$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1908e77-6773-31d6-918e-cb121f06b7f4.roa File: b1908e77-6773-31d6-918e-cb121f06b7f4.roa (raw, json) Hash identifier: FOfpIMAyWJXX0Fc42lej6sPr3Z6Cl8k5dTTj8Wn29q0= Subject key identifier: 27:FC:9A:3F:AF:EA:9F:05:A6:BF:BF:BF:FC:7C:93:1A:59:EC:33:98 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A155542E54B9D2FBB5D7A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1908e77-6773-31d6-918e-cb121f06b7f4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 152.70.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:55:54:2e:54:b9:d2:fb:b5:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9b4dffa6-546b-40c0-85fe-084266c4d9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:52:a7:c2:a8:93:67:26:34:d2:2f:70:a0: 8e:04:dc:d9:f7:c4:8d:0c:c5:cc:fb:3d:3a:3b:27: 06:96:e3:4d:4d:b9:cf:02:43:79:8a:2d:4a:0d:ad: d0:bc:76:02:e7:94:dd:41:8f:2f:0a:a0:a7:53:02: c9:e5:04:03:7e:b9:1f:a3:96:f2:aa:87:78:06:8f: 5f:4a:4e:b5:11:73:43:b5:04:27:f1:ca:52:59:cd: 30:83:9b:ae:f2:e5:17:30:18:47:ed:ed:db:4d:ca: 51:5c:a5:31:01:2f:33:cc:7c:33:0a:ba:36:27:c3: db:dd:61:fe:11:37:6d:df:7f:5f:13:92:70:7e:46: e1:ee:5d:f9:c6:66:cd:16:f6:f2:c2:0f:28:8a:ed: 03:3e:cf:13:58:55:08:4d:c4:9a:79:c6:bf:f5:da: 6d:3f:b0:c2:87:5e:f2:f0:9d:39:d3:2f:1d:0c:9b: d5:07:d4:e8:70:7b:de:2d:9d:7f:e5:05:3f:36:c8: a5:f3:c0:71:4c:39:26:4f:1f:4a:20:d9:58:cb:2d: c6:86:15:16:38:65:87:50:13:d0:58:41:4a:bf:ed: 01:40:5a:6c:d7:c4:c6:f0:1b:77:a7:79:88:c6:3f: 6a:b5:78:8c:ed:45:73:f3:e1:b6:63:2b:0c:00:62: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:9A:3F:AF:EA:9F:05:A6:BF:BF:BF:FC:7C:93:1A:59:EC:33:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1908e77-6773-31d6-918e-cb121f06b7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4c:17:63:bb:1c:46:12:94:18:a3:1a:6c:bd:36:df:09:b1: 31:d8:33:cd:60:66:b7:a4:6a:79:10:12:89:1d:b8:5b:d2:90: 7b:ef:66:f8:17:5d:bc:52:e8:33:7a:53:14:11:f3:ce:0c:e6: f7:3b:53:2a:b0:75:b6:c0:d4:dd:e7:c5:b0:bd:2a:23:60:9a: 65:e9:93:78:70:75:57:24:83:f7:08:b2:e2:56:b2:fc:31:51: 6c:1f:ca:be:58:88:3b:c4:af:d5:80:3a:40:2c:e0:00:c1:e3: f9:6c:65:00:b2:0a:18:77:62:27:f5:49:fc:66:3d:13:dd:6d: 4f:c2:47:93:2c:2e:76:5b:34:4b:a5:fa:0e:2f:6b:18:d2:40: 6e:c9:2a:51:f1:17:d3:a1:bc:e9:69:e9:f9:62:2b:cd:52:12: 09:75:79:48:fe:32:66:f7:c3:6f:9b:e6:c1:64:26:17:7c:34: 34:68:92:80:31:75:dc:31:5e:92:58:5d:75:6c:99:b1:10:04: 5a:e6:18:6c:f4:8a:a3:86:2c:a2:4f:76:7d:a0:5e:01:a1:85: 05:14:56:18:8b:f5:fc:9d:98:77:03:3c:6d:81:9d:2f:73:a1: 77:a8:ec:f7:8b:e1:ea:cf:04:bd:2d:5d:06:61:1a:8a:c2:46: 02:0f:8b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVVULlS50vu116AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWI0ZGZmYTYtNTQ2Yi00MGMwLTg1ZmUtMDg0MjY2YzRkOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRlSp8Kok2cmNNIvcKCOBNzZ98SNDMXM+z06 OycGluNNTbnPAkN5ii1KDa3QvHYC55TdQY8vCqCnUwLJ5QQDfrkfo5byqod4Bo9f Sk61EXNDtQQn8cpSWc0wg5uu8uUXMBhH7e3bTcpRXKUxAS8zzHwzCro2J8Pb3WH+ ETdt339fE5Jwfkbh7l35xmbNFvbywg8oiu0DPs8TWFUITcSaeca/9dptP7DCh17y 8J050y8dDJvVB9TocHveLZ1/5QU/Nsil88BxTDkmTx9KINlYyy3GhhUWOGWHUBPQ WEFKv+0BQFps18TG8Bt3p3mIxj9qtXiM7UVz8+G2YysMAGKEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf8mj+v6p8Fpr+/v/x8kxpZ7DOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjE5MDhlNzctNjc3My0z MWQ2LTkxOGUtY2IxMjFmMDZiN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRMF2O7HEYSlBijGmy9Nt8JsTHYM81gZrekankQEokduFvSkHvvZvgX XbxS6DN6UxQR884M5vc7UyqwdbbA1N3nxbC9KiNgmmXpk3hwdVckg/cIsuJWsvwx UWwfyr5YiDvEr9WAOkAs4ADB4/lsZQCyChh3Yif1SfxmPRPdbU/CR5MsLnZbNEul +g4vaxjSQG7JKlHxF9OhvOlp6fliK81SEgl1eUj+Mmb3w2+b5sFkJhd8NDRokoAx ddwxXpJYXXVsmbEQBFrmGGz0iqOGLKJPdn2gXgGhhQUUVhiL9fydmHcDPG2BnS9z oXeo7PeL4erPBL0tXQZhGorCRgIPi2o= -----END CERTIFICATE-----Generated at Tue Sep 22 19:32:58 2026 by rpki-client