$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa File: fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa (raw, json) Hash identifier: JE1mqZ0ec5qIM2rVVK1j1fDvJE34/vlQmdOjkMMn4sw= Subject key identifier: 50:30:D5:71:96:C5:A8:E5:A9:DF:08:03:80:D9:BE:1E:D7:FC:17:DD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A15B1CA77211619CDBDB40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 152.70.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:5b:1c:a7:72:11:61:9c:db:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d2c652d5-e230-4b7c-bba9-b5b2079479ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:19:25:b8:c2:70:d8:b1:8a:5b:d9:8e:60: 4e:e9:6e:f3:7d:7d:c2:83:8c:ec:c9:17:1f:fa:cf: 39:00:db:3e:ca:74:af:e2:75:9b:7d:c2:f2:e9:6f: 64:3b:96:84:65:13:cb:ca:07:48:1d:c9:82:6e:63: b4:7d:df:cd:e7:b1:e5:4d:83:92:1d:5e:73:33:54: da:71:be:d0:70:9a:62:2f:9b:8a:27:e1:c4:65:88: 53:57:a6:d6:2d:83:2e:1b:87:f7:0b:de:a7:70:20: 24:49:6c:58:b7:9e:f5:34:48:ac:01:33:0e:e5:a0: 66:32:9a:f8:7a:60:c3:0a:53:5a:a2:3a:42:dc:ce: 60:20:f2:bf:b1:cb:f2:d8:7c:20:06:93:b0:94:f0: ab:25:32:9e:a7:e9:a0:90:dc:89:46:67:b5:a6:6f: 42:34:6f:77:9f:e7:bf:4c:07:f5:1f:25:59:70:41: dc:94:14:2e:56:6f:f6:e9:1e:de:74:dd:40:6a:04: 69:6e:9e:d7:e3:96:e9:e9:e9:d4:0c:8c:a0:1c:c0: 86:85:3c:b5:51:6e:79:d7:b6:c5:cb:8b:3c:ee:b7: 19:54:65:3b:78:a2:0c:a5:3b:e7:6a:54:5a:06:1f: 8b:d3:26:14:6f:dc:18:1a:77:1f:29:55:ec:8b:9f: 70:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:30:D5:71:96:C5:A8:E5:A9:DF:08:03:80:D9:BE:1E:D7:FC:17:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ac:93:be:8a:3d:98:81:4f:9e:26:6a:a9:50:32:bc:4c:ff: 76:27:76:ab:14:92:b2:9a:d4:9d:30:33:01:3d:e5:f3:3d:69: bb:c7:3e:bc:c1:02:47:67:ff:ac:81:3d:cb:d8:3e:db:7b:d4: 68:14:a6:4d:7f:db:99:e8:f9:da:ff:09:9e:12:48:c3:93:6f: c2:53:a9:b1:b7:52:7b:80:fa:e7:4a:be:32:69:79:e9:82:bd: eb:23:ab:1f:4c:dc:cb:55:ea:2c:5b:e8:36:cb:be:36:af:7c: f7:e5:60:ef:6d:a1:44:34:35:46:9d:b3:cc:84:12:ea:0c:5e: 3b:51:1a:02:00:8e:35:49:60:d9:5a:aa:85:1a:4c:0b:c9:46: 2c:0c:be:2e:f5:c8:0e:66:fc:bd:2b:a6:29:9b:e6:15:d9:56: fc:53:f8:5a:29:86:7f:f2:20:fb:5a:58:30:ff:3d:3b:57:6e: 96:db:da:c1:15:6a:47:8d:9a:9b:dc:a6:3a:a5:59:36:07:40: f7:a4:83:cf:17:6f:cc:72:5f:82:b3:dc:74:70:b7:b1:b7:e4: 9a:5c:8c:eb:55:86:23:51:6b:97:7b:1a:ca:22:fa:9c:c5:00: 26:d1:ad:83:52:28:23:5a:b2:a9:fc:68:33:db:9a:72:07:47: f3:04:f1:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVscp3IRYZzb20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDJjNjUyZDUtZTIzMC00YjdjLWJiYTktYjViMjA3OTQ3OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx0ZJbjCcNixilvZjmBO6W7zfX3Cg4zsyRcf +s85ANs+ynSv4nWbfcLy6W9kO5aEZRPLygdIHcmCbmO0fd/N57HlTYOSHV5zM1Ta cb7QcJpiL5uKJ+HEZYhTV6bWLYMuG4f3C96ncCAkSWxYt571NEisATMO5aBmMpr4 emDDClNaojpC3M5gIPK/scvy2HwgBpOwlPCrJTKep+mgkNyJRme1pm9CNG93n+e/ TAf1HyVZcEHclBQuVm/26R7edN1AagRpbp7X45bp6enUDIygHMCGhTy1UW5517bF y4s87rcZVGU7eKIMpTvnalRaBh+L0yYUb9wYGncfKVXsi59w3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAw1XGWxajlqd8IA4DZvh7X/BfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmRiMGViZDQtN2Q3Mi0z N2QxLTg2ZGItYzBhYTFhZjViODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2sk76KPZiBT54maqlQMrxM/3YndqsUkrKa1J0wMwE95fM9abvHPrzB Akdn/6yBPcvYPtt71GgUpk1/25no+dr/CZ4SSMOTb8JTqbG3UnuA+udKvjJpeemC vesjqx9M3MtV6ixb6DbLvjavfPflYO9toUQ0NUads8yEEuoMXjtRGgIAjjVJYNla qoUaTAvJRiwMvi71yA5m/L0rpimb5hXZVvxT+Fophn/yIPtaWDD/PTtXbpbb2sEV akeNmpvcpjqlWTYHQPekg88Xb8xyX4Kz3HRwt7G35JpcjOtVhiNRa5d7Gsoi+pzF ACbRrYNSKCNasqn8aDPbmnIHR/ME8Y0= -----END CERTIFICATE-----Generated at Tue Sep 22 00:55:41 2026 by rpki-client