$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1908e77-6773-31d6-918e-cb121f06b7f4.roa File: b1908e77-6773-31d6-918e-cb121f06b7f4.roa (raw, json) Hash identifier: iLDeEftm3FmiuKQzg0UNzfFKS4JQo7MXKElCw6frjes= Subject key identifier: 4C:A1:DF:EC:53:1E:BC:A7:C9:AF:C5:0A:8C:5A:5B:0C:3E:4B:DD:DC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAE042FAF1BD2F82B55D8F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1908e77-6773-31d6-918e-cb121f06b7f4.roa Signing time: Thu 21 Aug 2025 17:33:46 +0000 ROA not before: Thu 21 Aug 2025 17:33:46 +0000 ROA not after: Wed 19 Nov 2025 18:33:46 +0000 asID: 31898 IP address blocks: 152.70.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ae:04:2f:af:1b:d2:f8:2b:55:d8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:33:46 2025 GMT Not After : Nov 19 18:33:46 2025 GMT Subject: CN=394ad52c-8c23-4318-87bf-e38459e2f056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:5e:90:32:83:09:98:56:e1:c3:4f:a2:35: 88:9b:1d:64:94:e2:4e:ff:03:8d:dc:7d:f5:d7:bd: 46:39:04:61:cf:b8:6b:89:d2:0a:4c:5a:60:9f:ad: ae:f6:f3:6e:aa:27:11:64:58:76:04:66:13:e0:f7: 4f:5b:31:e8:51:2d:66:9d:c8:69:52:0c:aa:a4:e2: 55:b0:22:bc:dc:76:c3:cd:07:3d:0a:bc:25:1e:74: a0:6c:91:3e:f6:b9:e7:0f:9e:34:05:10:6d:03:1e: 32:e1:ca:e1:09:0e:ca:df:74:d3:21:23:28:dc:5b: 87:00:19:11:5f:70:e6:1c:a3:83:55:96:9f:fd:a4: e5:08:62:d2:d3:9e:6c:b7:92:0a:33:2f:29:89:81: 57:20:93:2f:ac:e3:83:d5:a4:2b:7e:2f:2a:f6:87: d6:30:ac:a5:80:41:39:fe:42:1a:03:a4:f0:fc:dc: 3b:11:b4:8a:46:02:2e:8f:57:13:95:7c:54:7b:fd: cb:ec:10:8a:c2:73:c2:ad:42:dc:36:a8:44:b2:ea: 6e:05:e4:c2:1f:ed:51:cd:65:bb:af:fc:00:97:49: 7b:6a:19:a7:f1:43:ef:1f:ae:be:d7:a4:74:c8:e5: 5a:ef:7b:f7:b9:bc:ba:1e:71:a1:42:27:54:62:62: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A1:DF:EC:53:1E:BC:A7:C9:AF:C5:0A:8C:5A:5B:0C:3E:4B:DD:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b1908e77-6773-31d6-918e-cb121f06b7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f7:88:56:3d:81:fe:a0:41:ff:c3:e6:0b:33:b6:e9:06:2b: d4:6b:fe:a6:ba:07:ef:34:af:77:3a:3c:44:84:dc:7a:e8:77: ae:4e:ee:15:98:75:ca:c6:38:72:cb:16:ce:44:73:e4:af:05: dc:68:d0:c7:81:7d:63:b9:40:c6:c7:bb:45:f3:9d:fb:fa:63: c3:8f:22:3d:eb:44:09:1c:d1:97:90:75:d2:95:b7:e8:3b:bd: 77:2b:49:08:e6:d1:ba:ba:6e:78:c6:00:48:e2:70:c6:3e:cc: 84:3e:3a:71:85:3c:2f:a8:0c:08:e6:1e:36:33:6b:aa:f9:d2: b2:9b:73:dc:80:87:47:d6:fa:0c:16:41:98:64:d7:e8:fb:7b: b3:64:30:f5:3d:a2:b6:28:70:c2:1b:7b:30:92:08:85:f6:3a: e1:ed:a5:70:35:cb:b0:40:bf:5c:1f:91:2c:48:52:93:fd:99: 25:64:d8:e7:1d:bf:7f:6e:86:a9:52:09:56:53:e2:15:69:38: 1c:a9:61:b5:ca:9a:b8:a7:38:9c:e5:c5:dc:6d:4a:ae:53:a3: 67:7d:52:2c:8b:ce:77:bd:b6:90:fb:57:ca:9c:dc:9b:7f:f3: 45:bb:bd:f4:af:c0:68:37:0c:f8:57:55:a0:67:96:1b:c7:fe: d8:b9:3f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurgQvrxvS+CtV2PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzM0NloXDTI1MTExOTE4MzM0NlowLzEtMCsGA1UEAxMk Mzk0YWQ1MmMtOGMyMy00MzE4LTg3YmYtZTM4NDU5ZTJmMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CZekDKDCZhW4cNPojWImx1klOJO/wON3H31 171GOQRhz7hridIKTFpgn62u9vNuqicRZFh2BGYT4PdPWzHoUS1mnchpUgyqpOJV sCK83HbDzQc9CrwlHnSgbJE+9rnnD540BRBtAx4y4crhCQ7K33TTISMo3FuHABkR X3DmHKODVZaf/aTlCGLS055st5IKMy8piYFXIJMvrOOD1aQrfi8q9ofWMKylgEE5 /kIaA6Tw/Nw7EbSKRgIuj1cTlXxUe/3L7BCKwnPCrULcNqhEsupuBeTCH+1RzWW7 r/wAl0l7ahmn8UPvH66+16R0yOVa73v3uby6HnGhQidUYmK1awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyh3+xTHrynya/FCoxaWww+S93cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjE5MDhlNzctNjc3My0z MWQ2LTkxOGUtY2IxMjFmMDZiN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT3iFY9gf6gQf/D5gsztukGK9Rr/qa6B+80r3c6PESE3Hrod65O7hWY dcrGOHLLFs5Ec+SvBdxo0MeBfWO5QMbHu0Xznfv6Y8OPIj3rRAkc0ZeQddKVt+g7 vXcrSQjm0bq6bnjGAEjicMY+zIQ+OnGFPC+oDAjmHjYza6r50rKbc9yAh0fW+gwW QZhk1+j7e7NkMPU9orYocMIbezCSCIX2OuHtpXA1y7BAv1wfkSxIUpP9mSVk2Ocd v39uhqlSCVZT4hVpOBypYbXKmrinOJzlxdxtSq5To2d9UiyLzne9tpD7V8qc3Jt/ 80W7vfSvwGg3DPhXVaBnlhvH/ti5Pyg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:23 2025 by rpki-client