$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa File: 4a708930-ba17-316a-894d-1271c0254604.roa (raw, json) Hash identifier: bunXeV7OJKCv2wLJokgx594i2mBBnx6mR87P5+boA8I= Subject key identifier: 94:74:40:0B:68:B4:3C:FF:E6:C2:E5:CA:8F:C3:21:98:29:1E:F0:80 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF99124DA9E2C37A21204C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 170.9.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:91:24:da:9e:2c:37:a2:12:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e7d2ca9e-911e-4ba7-bdf3-22778520a79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:72:c9:0d:8c:d2:2e:42:9d:1b:ca:0f:c4: 5f:d9:f9:b4:22:d4:b4:ac:b3:74:b6:df:9a:1b:4e: be:7c:89:09:d9:75:e1:5e:09:c9:8e:33:72:d2:a4: 81:60:54:db:99:08:63:ba:26:77:b6:3f:2b:6d:d1: e0:63:c3:ad:ca:5d:c0:9a:85:0a:2c:a4:27:ff:90: ab:72:eb:de:26:19:d5:57:2a:a6:94:53:3d:38:67: 7e:58:ea:ea:05:2f:68:40:5a:d4:eb:c1:26:2e:e3: b6:af:86:80:62:3c:a2:2c:b2:52:a7:55:f2:8b:3a: 56:43:c8:38:84:b1:dd:c8:9c:f5:87:3e:01:95:21: a2:0b:51:1a:cf:96:50:b9:72:ed:14:64:af:ed:0e: e7:5a:96:24:a7:b4:46:7f:b5:4c:04:ba:c7:2c:af: 46:f9:7a:72:5b:31:72:c5:c0:f2:9b:11:21:82:5d: 84:ca:80:ce:82:01:be:c7:c2:86:a7:1d:de:36:d3: 13:60:b4:11:29:37:67:f5:67:27:42:8d:1f:e4:0b: 28:f9:a4:8e:1f:7e:25:8c:ee:e0:69:84:f8:72:2b: f0:a7:7b:89:15:fa:2a:66:bf:cd:db:66:fc:7a:12: a7:1e:d1:ec:a9:3c:5f:b7:30:27:2c:3f:44:17:26: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:74:40:0B:68:B4:3C:FF:E6:C2:E5:CA:8F:C3:21:98:29:1E:F0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:47:fe:b1:00:6c:09:89:19:d3:cb:3d:ef:bf:16:4c:7a:13: a3:63:70:57:05:de:72:b5:62:d7:e9:f2:72:83:37:01:45:9d: 8d:79:e7:ee:84:cd:5f:0e:a2:3a:91:03:a6:c9:5c:cf:25:bb: 43:34:9a:0a:fa:ab:38:e3:8f:97:23:9f:89:2c:18:ce:ef:79: 73:ac:8f:2f:bd:47:d3:86:f2:45:d1:86:d9:26:88:27:85:54: d1:97:90:0b:aa:99:1c:20:d6:20:82:c4:07:a9:d1:f8:a9:ab: 15:6f:c1:e8:12:a0:67:d7:f4:fd:ac:08:8f:92:6a:bf:ce:2d: e3:a1:e8:e8:7b:36:49:39:40:05:6f:14:22:89:f1:fd:94:4b: 72:13:44:aa:c9:2b:42:b1:c7:62:4e:95:a4:a5:2b:ca:e1:77: 21:59:63:89:c1:80:26:51:08:4a:2b:33:ca:d7:0d:f6:9e:91: 8f:fb:cb:bd:3a:64:13:ba:15:a9:58:43:e3:44:0a:43:e3:c6: 54:ab:d0:af:c3:dc:e7:7c:ff:59:4c:d5:87:eb:33:c4:14:ce: e0:3c:dd:0a:16:f3:d2:26:eb:41:af:89:29:be:47:57:b0:50: c9:3b:87:9b:c4:af:2b:94:76:f2:21:4a:97:21:d5:e6:c1:14: 0b:d5:cc:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZEk2p4sN6ISBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTdkMmNhOWUtOTExZS00YmE3LWJkZjMtMjI3Nzg1MjBhNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHZyyQ2M0i5CnRvKD8Rf2fm0ItS0rLN0tt+a G06+fIkJ2XXhXgnJjjNy0qSBYFTbmQhjuiZ3tj8rbdHgY8Otyl3AmoUKLKQn/5Cr cuveJhnVVyqmlFM9OGd+WOrqBS9oQFrU68EmLuO2r4aAYjyiLLJSp1XyizpWQ8g4 hLHdyJz1hz4BlSGiC1Eaz5ZQuXLtFGSv7Q7nWpYkp7RGf7VMBLrHLK9G+XpyWzFy xcDymxEhgl2EyoDOggG+x8KGpx3eNtMTYLQRKTdn9WcnQo0f5Aso+aSOH34ljO7g aYT4civwp3uJFfoqZr/N22b8ehKnHtHsqTxftzAnLD9EFybXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJR0QAtotDz/5sLlyo/DIZgpHvCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGE3MDg5MzAtYmExNy0z MTZhLTg5NGQtMTI3MWMwMjU0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqgkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpH/rEAbAmJGdPLPe+/Fkx6E6NjcFcF3nK1Ytfp8nKDNwFFnY155+6E zV8OojqRA6bJXM8lu0M0mgr6qzjjj5cjn4ksGM7veXOsjy+9R9OG8kXRhtkmiCeF VNGXkAuqmRwg1iCCxAep0fipqxVvwegSoGfX9P2sCI+Sar/OLeOh6Oh7Nkk5QAVv FCKJ8f2US3ITRKrJK0Kxx2JOlaSlK8rhdyFZY4nBgCZRCEorM8rXDfaekY/7y706 ZBO6FalYQ+NECkPjxlSr0K/D3Od8/1lM1YfrM8QUzuA83QoW89Im60GviSm+R1ew UMk7h5vEryuUdvIhSpch1ebBFAvVzAw= -----END CERTIFICATE-----Generated at Wed May 13 16:27:06 2026 by rpki-client