$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa File: e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa (raw, json) Hash identifier: VKqUMQiifmTJ/2vqNS10+2+TK4WNziGWkpBRo/vFVcQ= Subject key identifier: F3:27:E2:7B:C3:28:AF:2E:C6:1A:A2:A0:BB:4A:08:15:88:58:0F:41 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F02423E2B38F84352133D8500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 152.70.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:3e:2b:38:f8:43:52:13:3d:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=e7680f76-0f19-491a-97f5-c29906ee9e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:e4:a1:e5:f3:9d:7c:46:8c:a0:2e:ac:50: ba:6f:3a:3c:29:c5:db:41:42:27:56:66:58:8c:e8: 5e:cb:20:24:5d:39:52:3e:b8:b2:17:05:12:07:e8: 04:08:34:88:b7:af:57:25:b6:62:bf:10:fc:a0:40: 0e:7f:66:b4:c1:a9:60:43:f3:a7:07:c3:b0:ac:58: 71:f5:4c:42:a7:0e:12:a6:22:b4:21:0f:3e:47:2e: 82:2d:17:4c:40:fe:ba:1f:45:6c:e9:5b:97:33:59: 06:3c:fe:16:ef:33:ab:46:be:5b:5b:9c:81:a0:29: 6e:17:c5:a4:87:89:76:31:d2:9e:9e:7c:38:6e:4f: a5:17:3e:4d:dc:42:f2:d5:c0:2b:e2:15:a0:c1:cb: d9:45:79:c6:5d:cb:06:1b:25:e3:b3:cf:3e:13:66: b8:1c:9a:54:71:06:54:6f:d0:e7:9d:f2:61:26:98: 2c:c7:40:b4:34:a2:71:d9:b7:77:2c:68:79:8e:13: 36:01:2b:58:eb:3f:68:c3:74:ee:19:14:26:b1:d3: a1:b1:b6:8c:78:ff:9e:ca:2a:e3:d0:2a:31:2c:be: 8f:6e:26:48:ee:b3:ce:7e:ec:ba:84:26:54:14:8e: d3:3d:87:52:ed:63:69:fb:8d:13:17:d8:6b:69:1e: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:27:E2:7B:C3:28:AF:2E:C6:1A:A2:A0:BB:4A:08:15:88:58:0F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315c96-ceb9-3a3c-8310-30e6fadf5466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b6:ea:06:33:b4:87:44:6b:b8:a7:7b:be:3b:0d:cf:7f:f8: 09:fa:06:6d:94:94:c2:81:cd:c3:f9:d8:36:4f:d8:92:de:6a: ff:65:51:44:f0:61:e2:01:63:9e:10:e5:ad:39:4f:03:b6:fe: 40:69:4a:22:9a:a7:d7:f7:16:24:01:1b:bf:f1:4a:27:13:78: c0:ef:16:2c:49:96:b6:fc:86:99:0d:6b:9b:74:a0:94:40:df: 9d:57:a9:20:e6:eb:ee:bf:22:7f:92:3b:47:4a:0e:91:a7:1d: a4:b0:5a:68:4d:72:a7:ee:88:25:29:89:3d:e8:25:7e:d4:f7: 78:c4:ed:9c:b9:36:f9:9c:3b:19:ef:91:71:19:d9:6d:a9:08: 85:e7:4a:57:f6:ea:a7:c2:b9:6b:67:72:30:32:f2:be:52:f2: b6:e6:f7:92:28:b6:ad:55:ff:54:99:2e:42:14:b3:9b:c3:69: 6d:9e:50:5d:4d:1a:f9:0a:9a:08:0f:5d:db:ea:65:c7:1c:56: 56:e2:7c:b0:2d:62:af:27:86:75:09:75:2d:ca:86:cf:06:97: a6:3e:b3:5e:9f:94:6b:40:22:aa:c6:5f:83:07:ce:b2:c6:6f: aa:41:e1:8b:1e:39:70:0c:2c:3a:4b:85:8f:76:8f:58:68:01: b2:bf:5b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQj4rOPhDUhM9hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZTc2ODBmNzYtMGYxOS00OTFhLTk3ZjUtYzI5OTA2ZWU5ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/rkoeXznXxGjKAurFC6bzo8KcXbQUInVmZY jOheyyAkXTlSPriyFwUSB+gECDSIt69XJbZivxD8oEAOf2a0walgQ/OnB8OwrFhx 9UxCpw4SpiK0IQ8+Ry6CLRdMQP66H0Vs6VuXM1kGPP4W7zOrRr5bW5yBoCluF8Wk h4l2MdKennw4bk+lFz5N3ELy1cAr4hWgwcvZRXnGXcsGGyXjs88+E2a4HJpUcQZU b9DnnfJhJpgsx0C0NKJx2bd3LGh5jhM2AStY6z9ow3TuGRQmsdOhsbaMeP+eyirj 0CoxLL6PbiZI7rPOfuy6hCZUFI7TPYdS7WNp+40TF9hraR7l4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMn4nvDKK8uxhqioLtKCBWIWA9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTgzMTVjOTYtY2ViOS0z YTNjLTgzMTAtMzBlNmZhZGY1NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmEbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG26gYztIdEa7ine747Dc9/+An6Bm2UlMKBzcP52DZP2JLeav9lUUTw YeIBY54Q5a05TwO2/kBpSiKap9f3FiQBG7/xSicTeMDvFixJlrb8hpkNa5t0oJRA 351XqSDm6+6/In+SO0dKDpGnHaSwWmhNcqfuiCUpiT3oJX7U93jE7Zy5NvmcOxnv kXEZ2W2pCIXnSlf26qfCuWtncjAy8r5S8rbm95Iotq1V/1SZLkIUs5vDaW2eUF1N GvkKmggPXdvqZcccVlbifLAtYq8nhnUJdS3Khs8Gl6Y+s16flGtAIqrGX4MHzrLG b6pB4YseOXAMLDpLhY92j1hoAbK/W18= -----END CERTIFICATE-----Generated at Sat Sep 26 08:05:59 2026 by rpki-client