$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa File: 8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa (raw, json) Hash identifier: baR/h2nDC+TG5ZwPkW3MDyYp04n/MaODPjRyEbz0JGk= Subject key identifier: 6B:BB:9C:66:6F:1B:76:79:4B:C1:10:0E:37:5B:83:13:0E:84:4B:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CFA2D92BFE0B9A4A87380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 152.70.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fa:2d:92:bf:e0:b9:a4:a8:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=1138aa66-8bc7-4031-973b-9abcf7aa98c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:dd:c1:ed:4d:a7:45:3c:7a:59:7d:43:87: b4:a5:12:a5:8d:9a:37:ad:b9:f4:e9:b9:7d:cc:ac: 9e:d6:0d:2e:ed:60:66:59:26:c1:2c:5b:e7:c3:ad: 8a:44:6a:bd:4f:de:a5:fa:20:d0:41:74:29:d6:f0: 4c:8c:16:56:0e:d9:14:17:2a:32:15:65:c2:7d:6f: fe:c1:51:ab:b6:6c:44:35:88:c5:04:2f:c6:31:0c: f0:ac:98:b2:2a:e5:bb:be:18:96:26:4b:a4:56:6d: 73:b1:30:b0:05:a6:bb:29:32:e8:22:33:d9:a3:c6: b2:bf:13:62:a0:4f:45:9c:37:85:60:f6:48:e4:69: c8:30:69:bb:bf:ea:8a:b7:47:f9:9b:9c:e0:d3:50: ce:1e:89:a7:6e:4f:52:b2:5d:4d:b5:25:a6:96:a9: bb:f7:46:61:1b:c8:07:b7:8f:0c:d6:98:ff:a9:5a: bc:b4:bd:fc:a2:a3:15:10:1f:8c:37:f8:cf:c3:6b: 5d:3a:0b:1b:7b:5b:90:c6:99:44:48:fb:26:fa:c0: 80:0e:6a:95:04:3b:d9:08:91:51:16:3f:96:71:b8: 07:61:c3:ea:1e:3c:53:16:33:b9:3d:56:ce:ce:14: af:df:0f:93:cc:2a:48:dd:90:eb:cd:05:3b:68:89: fc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:9C:66:6F:1B:76:79:4B:C1:10:0E:37:5B:83:13:0E:84:4B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:63:39:70:b5:21:48:a5:ff:14:a5:92:03:5c:f2:eb:55:13: 86:2e:65:4c:f8:c1:de:47:5b:40:f0:59:a5:10:a3:a4:46:33: 23:24:96:3b:78:d0:3d:91:c7:a2:a1:03:ef:63:22:0d:e1:58: e8:3a:71:88:c9:97:90:a2:c8:3c:39:8f:61:8f:3c:48:2c:93: 12:d0:a8:66:cb:74:ae:4e:c9:e9:ca:00:ee:62:61:49:68:f3: a5:7d:bf:46:1f:e7:a6:03:76:a4:15:0d:c9:04:2e:77:0b:4d: 92:59:35:b5:85:e5:a3:49:61:6a:e7:93:bb:ef:78:82:64:23: ae:8e:4d:91:87:c8:46:a5:34:04:93:02:b8:67:4e:92:02:e4: 4c:6d:46:c1:84:70:dc:89:e5:44:29:c3:1e:15:4d:13:aa:ad: 2c:51:87:ad:4c:b5:9f:fa:a5:3d:1b:3f:16:74:77:f1:1a:0c: 1a:bb:3d:69:b3:bc:8b:e1:f6:0a:f4:1d:e5:9e:0a:d3:ba:02: c0:5f:21:37:86:3b:c9:cd:61:a3:bb:c1:b7:47:a4:5e:d6:4f: 0b:fa:93:d4:43:c2:eb:49:e0:e9:00:2e:90:01:5f:85:a8:36: 03:dd:ed:b5:37:fb:d7:30:04:0c:73:6b:9d:ed:41:25:99:aa: 5b:30:89:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPotkr/guaSoc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MTEzOGFhNjYtOGJjNy00MDMxLTk3M2ItOWFiY2Y3YWE5OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFrdwe1Np0U8ell9Q4e0pRKljZo3rbn06bl9 zKye1g0u7WBmWSbBLFvnw62KRGq9T96l+iDQQXQp1vBMjBZWDtkUFyoyFWXCfW/+ wVGrtmxENYjFBC/GMQzwrJiyKuW7vhiWJkukVm1zsTCwBaa7KTLoIjPZo8ayvxNi oE9FnDeFYPZI5GnIMGm7v+qKt0f5m5zg01DOHomnbk9Ssl1NtSWmlqm790ZhG8gH t48M1pj/qVq8tL38oqMVEB+MN/jPw2tdOgsbe1uQxplESPsm+sCADmqVBDvZCJFR Fj+WcbgHYcPqHjxTFjO5PVbOzhSv3w+TzCpI3ZDrzQU7aIn8nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu7nGZvG3Z5S8EQDjdbgxMOhEvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODAzNWYwNGUtN2M1MC0z NGYwLWE4OTUtNmM1ZjkyYWNhMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5jOXC1IUil/xSlkgNc8utVE4YuZUz4wd5HW0DwWaUQo6RGMyMkljt4 0D2Rx6KhA+9jIg3hWOg6cYjJl5CiyDw5j2GPPEgskxLQqGbLdK5OyenKAO5iYUlo 86V9v0Yf56YDdqQVDckELncLTZJZNbWF5aNJYWrnk7vveIJkI66OTZGHyEalNAST ArhnTpIC5ExtRsGEcNyJ5UQpwx4VTROqrSxRh61MtZ/6pT0bPxZ0d/EaDBq7PWmz vIvh9gr0HeWeCtO6AsBfITeGO8nNYaO7wbdHpF7WTwv6k9RDwutJ4OkALpABX4Wo NgPd7bU3+9cwBAxza53tQSWZqlswiSM= -----END CERTIFICATE-----Generated at Sun Sep 20 21:57:30 2026 by rpki-client