$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa File: 8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa (raw, json) Hash identifier: hMmXo0//xOvbE4vandJ6tKfb0TpyFlUawrTcusbOMVk= Subject key identifier: C4:4D:A4:D3:ED:99:9D:2B:C2:4C:79:6B:01:D2:3C:11:1E:C6:F5:D7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC555B6DF37B8318BE15620 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 152.70.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:55:b6:df:37:b8:31:8b:e1:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=27baf7b9-458f-45f7-8406-3dffc949f6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:f0:28:a5:2e:0a:f9:62:07:d8:0c:ec:ee: 02:eb:f8:a7:60:f8:d7:97:d3:e0:a5:0c:47:01:7d: 9c:27:12:31:e5:ae:3a:07:a0:7e:9b:ff:24:b9:27: b0:9e:4c:ee:9e:45:69:e8:44:38:2a:80:f4:5e:5c: 5e:de:fe:9b:55:b8:f7:81:cc:bf:2e:44:70:82:0d: 5e:3b:28:11:65:43:53:68:0d:3e:ba:ea:6d:f1:a4: e4:53:7a:1a:f1:e4:c3:34:78:7a:de:4e:76:24:62: e8:26:22:45:f7:07:16:14:1c:9a:54:08:d8:df:61: db:eb:5d:50:fa:05:54:a1:81:85:46:2f:51:90:d9: 50:4e:55:ac:17:a7:68:96:61:56:ff:aa:c8:2d:0c: 0a:af:a9:43:6b:4d:b2:52:7e:cd:0d:a8:4e:70:cc: d1:1d:1b:53:b8:6a:f6:53:40:79:74:54:58:f3:d5: 29:f6:7a:ce:88:eb:17:a7:a8:b1:61:39:3c:1a:c6: 72:fa:6a:a6:07:9f:68:cf:37:30:39:03:f8:22:42: 86:d1:5d:7c:82:eb:07:c6:e5:d9:4b:12:ab:e5:53: 24:01:04:72:c2:85:31:84:47:5e:e3:a6:61:dc:48: 11:b2:c6:83:bf:71:67:3c:49:0a:86:4d:45:4c:85: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4D:A4:D3:ED:99:9D:2B:C2:4C:79:6B:01:D2:3C:11:1E:C6:F5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e7:a3:bf:06:e3:df:fd:91:83:23:82:25:71:66:25:41:74: fc:3c:db:65:68:e7:c8:61:51:e1:9b:a8:66:85:ed:32:a5:9d: 0a:b7:f5:23:f0:91:d7:6b:61:0f:d6:3e:bd:99:a8:07:32:64: e4:0b:32:fa:3c:2a:f6:8f:11:d7:da:92:e8:68:af:c4:13:72: 53:be:bb:e5:ed:1a:a6:f4:a0:ab:2f:70:ce:82:d3:6d:28:e1: 80:84:96:92:f1:e3:ae:7b:20:dc:18:bb:8e:fb:0f:01:42:de: 17:98:d5:ec:74:2d:b2:c2:0b:3c:33:43:4f:67:29:78:44:32: 7f:08:a7:f7:63:26:fd:3a:fc:4d:94:17:4f:c2:7f:db:9c:de: c3:d7:86:95:c1:6f:f5:a4:42:12:b6:e9:85:10:aa:2c:74:5b: 43:73:a4:33:75:32:e3:42:d1:fd:b8:de:3a:c5:8c:13:8f:76: ec:d0:5f:c4:8f:bb:b5:d8:55:bd:99:d3:b1:53:d8:07:0c:14: 9c:bd:09:5b:76:50:a0:1a:5f:b1:b5:50:8e:80:f1:4e:8d:76: c5:76:cf:e5:2a:8e:bf:8f:7c:a6:2a:b1:ef:f8:48:5c:1f:56: 16:5d:8c:07:14:96:07:d3:ce:56:8f:65:38:04:a5:65:35:b0: eb:b3:3b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVW23ze4MYvhViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MjdiYWY3YjktNDU4Zi00NWY3LTg0MDYtM2RmZmM5NDlmNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyfwKKUuCvliB9gM7O4C6/inYPjXl9PgpQxH AX2cJxIx5a46B6B+m/8kuSewnkzunkVp6EQ4KoD0Xlxe3v6bVbj3gcy/LkRwgg1e OygRZUNTaA0+uupt8aTkU3oa8eTDNHh63k52JGLoJiJF9wcWFByaVAjY32Hb611Q +gVUoYGFRi9RkNlQTlWsF6dolmFW/6rILQwKr6lDa02yUn7NDahOcMzRHRtTuGr2 U0B5dFRY89Up9nrOiOsXp6ixYTk8GsZy+mqmB59ozzcwOQP4IkKG0V18gusHxuXZ SxKr5VMkAQRywoUxhEde46Zh3EgRssaDv3FnPEkKhk1FTIXuZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRNpNPtmZ0rwkx5awHSPBEexvXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODAzNWYwNGUtN2M1MC0z NGYwLWE4OTUtNmM1ZjkyYWNhMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3no78G49/9kYMjgiVxZiVBdPw822Vo58hhUeGbqGaF7TKlnQq39SPw kddrYQ/WPr2ZqAcyZOQLMvo8KvaPEdfakuhor8QTclO+u+XtGqb0oKsvcM6C020o 4YCElpLx4657INwYu477DwFC3heY1ex0LbLCCzwzQ09nKXhEMn8Ip/djJv06/E2U F0/Cf9uc3sPXhpXBb/WkQhK26YUQqix0W0NzpDN1MuNC0f243jrFjBOPduzQX8SP u7XYVb2Z07FT2AcMFJy9CVt2UKAaX7G1UI6A8U6NdsV2z+Uqjr+PfKYqse/4SFwf VhZdjAcUlgfTzlaPZTgEpWU1sOuzO90= -----END CERTIFICATE-----Generated at Wed May 13 05:22:39 2026 by rpki-client