$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa File: 4a708930-ba17-316a-894d-1271c0254604.roa (raw, json) Hash identifier: gQLBWaMkYxv4iAyNpOUWrGp6q9iPjTvZ7yhhmOddxJc= Subject key identifier: D0:87:AE:70:16:C0:2B:A3:6E:C9:45:74:6A:FB:83:1C:D1:90:E5:1D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A155E3D89EC9A76395E900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 170.9.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:55:e3:d8:9e:c9:a7:63:95:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=5b6811ba-1c3d-4975-830e-17cded13d4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d2:68:62:e7:4a:f2:d9:42:de:e3:bd:88:a3: 68:85:c9:67:a7:b3:c7:72:59:73:c1:4c:da:e3:c6: f2:43:90:8e:58:27:d4:15:11:f2:f6:26:be:d2:d7: b9:3f:32:9e:f3:48:75:01:39:7f:1e:b0:e6:f4:26: 81:c0:49:9b:8c:e9:fb:08:ed:0b:f0:b6:51:5c:85: b8:47:1b:9d:87:a9:1c:de:3e:9d:dd:fc:08:6c:a9: 86:74:88:38:59:6e:55:8e:e7:17:c6:49:77:67:8c: b5:1c:b0:e3:35:8b:e4:67:e6:d4:83:6c:5e:04:87: 79:2a:56:b7:67:0c:d7:33:b6:27:b5:3a:2a:9c:91: a0:fa:ea:77:77:17:fc:79:9d:62:b6:b5:64:3e:4a: 70:5d:fc:06:ac:2b:78:6a:38:b6:dc:aa:17:f1:f3: 2e:96:5e:f5:1a:9f:dd:e5:d7:7a:cb:89:8e:64:dc: 1f:14:bc:ee:d6:db:4d:57:e9:3d:01:83:9e:ca:4d: e3:1c:3e:93:97:0b:7e:d8:e9:3b:63:71:7f:53:df: 12:19:f3:40:f9:f9:8d:25:5b:0e:ef:f8:24:1a:4e: dc:ea:e9:c1:df:88:1b:f6:e9:0a:8c:da:da:76:d6: d4:55:81:1f:03:30:86:6e:8f:3b:40:9d:c0:e2:03: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:AE:70:16:C0:2B:A3:6E:C9:45:74:6A:FB:83:1C:D1:90:E5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:39:a0:d9:56:07:ff:dd:d2:5f:c7:c2:e4:21:5a:bd:1e:fa: 8d:cd:d5:a2:62:e2:1f:4c:bf:0f:ef:93:16:04:5f:91:96:6e: 95:b4:d6:fc:9a:b6:88:f0:98:c8:7b:5d:b7:fb:f9:8d:ba:36: db:38:fb:5b:49:b5:49:48:c8:61:53:72:4d:4f:bf:b7:a0:91: 47:0f:81:e3:b3:97:ca:8c:cc:fa:bb:4f:37:bd:96:e7:17:e2: 23:be:eb:7a:35:88:38:3a:40:45:f7:6b:36:1c:bc:d4:4a:4b: 5d:f3:0b:99:57:fe:8b:80:f9:06:ae:fb:0b:d9:a8:9a:71:f4: 3e:72:5e:30:46:98:aa:c1:45:7a:15:9e:20:8d:d5:b2:d1:c7: af:97:e7:43:0e:a3:9d:c6:8d:7b:2d:fb:3f:40:46:91:67:6a: 01:a6:44:0f:70:62:54:0c:b5:ad:45:95:f1:0f:c0:c9:82:de: a4:92:e2:89:ae:59:b5:48:68:02:c7:24:aa:1d:96:bc:68:d8: 8f:90:21:88:b2:2b:7b:b9:0f:ce:a9:ba:60:dd:be:5d:49:ef: 1c:dd:4d:30:57:11:3d:4f:49:46:32:f4:57:84:bc:ea:fd:a8: 4f:29:b0:49:29:6b:b3:3c:1f:ba:5e:54:e9:ff:26:4d:88:30: 10:4a:ba:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVXj2J7Jp2OV6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NWI2ODExYmEtMWMzZC00OTc1LTgzMGUtMTdjZGVkMTNkNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNJoYudK8tlC3uO9iKNohclnp7PHcllzwUza 48byQ5COWCfUFRHy9ia+0te5PzKe80h1ATl/HrDm9CaBwEmbjOn7CO0L8LZRXIW4 Rxudh6kc3j6d3fwIbKmGdIg4WW5VjucXxkl3Z4y1HLDjNYvkZ+bUg2xeBId5Kla3 ZwzXM7YntToqnJGg+up3dxf8eZ1itrVkPkpwXfwGrCt4aji23KoX8fMull71Gp/d 5dd6y4mOZNwfFLzu1ttNV+k9AYOeyk3jHD6Tlwt+2Ok7Y3F/U98SGfNA+fmNJVsO 7/gkGk7c6unB34gb9ukKjNradtbUVYEfAzCGbo87QJ3A4gMh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCHrnAWwCujbslFdGr7gxzRkOUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGE3MDg5MzAtYmExNy0z MTZhLTg5NGQtMTI3MWMwMjU0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqgkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw5oNlWB//d0l/HwuQhWr0e+o3N1aJi4h9Mvw/vkxYEX5GWbpW01vya tojwmMh7Xbf7+Y26Nts4+1tJtUlIyGFTck1Pv7egkUcPgeOzl8qMzPq7Tze9lucX 4iO+63o1iDg6QEX3azYcvNRKS13zC5lX/ouA+Qau+wvZqJpx9D5yXjBGmKrBRXoV niCN1bLRx6+X50MOo53GjXst+z9ARpFnagGmRA9wYlQMta1FlfEPwMmC3qSS4omu WbVIaALHJKodlrxo2I+QIYiyK3u5D86pumDdvl1J7xzdTTBXET1PSUYy9FeEvOr9 qE8psEkpa7M8H7peVOn/Jk2IMBBKujA= -----END CERTIFICATE-----Generated at Sun Sep 27 05:58:57 2026 by rpki-client