$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa File: ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa (raw, json) Hash identifier: DSCvB+Vd28Ri2R5qW5miWkBKt3VFW1gqZMCQ14Mc1Ng= Subject key identifier: BE:D7:BF:0F:3A:14:BB:9B:F6:C2:DD:FB:DA:43:92:54:CC:13:86:AB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1037A463EB993E1D9E2FA780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 152.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:a4:63:eb:99:3e:1d:9e:2f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=31ce7d8a-d11f-445f-b4b0-927f0601e47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:88:b8:37:61:42:12:1a:53:78:35:a5:4d: 30:eb:a6:f4:2c:fe:4a:22:37:e8:1c:17:86:61:d7: 51:27:a3:fe:25:37:9d:bd:f1:67:fd:84:3d:df:74: fd:bb:8b:07:b1:a5:05:18:71:95:e2:50:73:72:58: 3d:44:8c:e5:3b:63:82:59:72:66:3f:dc:ff:28:7c: e0:47:f5:fb:c7:6e:d8:ab:0d:80:72:e9:45:8d:28: 4e:ff:a7:c6:54:7a:c0:0c:02:04:7f:d7:35:d6:78: ef:c9:35:81:4f:1a:4d:b7:3b:9c:59:49:db:97:e8: 43:d0:fb:3e:55:be:b3:4f:fc:3a:59:83:28:e9:ae: ad:2c:96:0c:fa:03:6a:33:14:5a:5f:9f:4a:c4:2d: 4b:7d:45:8e:07:77:d2:3b:da:66:df:af:b6:97:06: ee:72:b8:f5:ba:5a:8a:a1:f5:ae:9d:7b:02:d9:02: 0b:c0:d1:5f:0d:a7:0d:5d:a7:75:87:d1:06:0c:e6: 93:db:fb:4a:07:46:f3:3c:7a:00:f0:98:f2:7b:f5: b7:63:a8:15:e8:58:9e:f1:9f:46:7f:32:10:db:e2: d9:ec:e0:70:a8:7d:fb:ed:7e:78:57:34:5c:0f:2e: 7e:57:77:16:04:65:4f:90:c0:38:12:ec:ad:81:ad: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D7:BF:0F:3A:14:BB:9B:F6:C2:DD:FB:DA:43:92:54:CC:13:86:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a2:91:cf:d0:63:e4:f2:af:8d:ff:42:98:66:28:df:64:dc: 37:66:78:25:1b:32:b9:4e:90:ae:87:be:8f:33:0f:a6:aa:95: f7:ed:7c:1f:d7:54:a3:b3:b8:80:39:c2:84:ee:1f:52:20:4c: 37:56:16:bf:90:15:40:20:6b:dd:fa:63:3f:60:1b:58:56:75: aa:79:c2:d1:ee:69:68:d5:11:11:1d:4f:75:5e:6f:21:db:65: 76:5f:e8:da:e3:b1:8f:7c:6d:c4:e7:d3:23:04:70:72:dd:cc: 90:7e:c5:ee:54:ce:63:bb:9d:a6:7f:46:2f:61:20:b2:e5:c7: cd:52:c8:e4:9b:f6:89:b4:2d:8b:0b:ed:a8:91:45:b4:ee:0e: 8d:83:ae:7b:7b:20:ab:e6:cf:44:41:72:74:34:4e:31:9e:d1: 9a:2a:50:52:85:a5:0e:c6:3b:a8:af:28:bb:d2:c3:1d:8e:94: 31:ca:29:c5:bd:b7:f7:7a:1a:99:b6:6d:cc:2c:94:65:c2:c8: 43:e7:a8:0f:15:87:67:84:d1:d8:5d:6c:8f:ec:76:5e:bf:e8: 37:ec:b2:c4:e8:02:84:2d:bc:e3:61:ab:fa:ef:96:91:12:6a: bd:04:fd:81:d9:98:a1:de:6e:13:67:79:8f:f2:a9:4f:a1:2b: 71:c3:90:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6Rj65k+HZ4vp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MzFjZTdkOGEtZDExZi00NDVmLWI0YjAtOTI3ZjA2MDFlNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLKIuDdhQhIaU3g1pU0w66b0LP5KIjfoHBeG YddRJ6P+JTedvfFn/YQ933T9u4sHsaUFGHGV4lBzclg9RIzlO2OCWXJmP9z/KHzg R/X7x27Yqw2AculFjShO/6fGVHrADAIEf9c11njvyTWBTxpNtzucWUnbl+hD0Ps+ Vb6zT/w6WYMo6a6tLJYM+gNqMxRaX59KxC1LfUWOB3fSO9pm36+2lwbucrj1ulqK ofWunXsC2QILwNFfDacNXad1h9EGDOaT2/tKB0bzPHoA8Jjye/W3Y6gV6Fie8Z9G fzIQ2+LZ7OBwqH377X54VzRcDy5+V3cWBGVPkMA4Euytga15oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7Xvw86FLub9sLd+9pDklTME4arMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE1ZmM2MjEtY2RiMi0z NmNjLTg3M2ItZGNmNmY0NTdkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyikc/QY+Tyr43/QphmKN9k3DdmeCUbMrlOkK6Hvo8zD6aqlfftfB/X VKOzuIA5woTuH1IgTDdWFr+QFUAga936Yz9gG1hWdap5wtHuaWjVEREdT3VebyHb ZXZf6NrjsY98bcTn0yMEcHLdzJB+xe5UzmO7naZ/Ri9hILLlx81SyOSb9om0LYsL 7aiRRbTuDo2Drnt7IKvmz0RBcnQ0TjGe0ZoqUFKFpQ7GO6ivKLvSwx2OlDHKKcW9 t/d6Gpm2bcwslGXCyEPnqA8Vh2eE0dhdbI/sdl6/6DfsssToAoQtvONhq/rvlpES ar0E/YHZmKHebhNneY/yqU+hK3HDkDo= -----END CERTIFICATE-----Generated at Tue Sep 22 23:19:55 2026 by rpki-client