$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa File: ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa (raw, json) Hash identifier: TQmOdyHnCf90NAJKJGd5i9YrEbCRJokh21efhRgTEo0= Subject key identifier: F7:17:F1:02:FA:0A:D6:6F:59:17:6D:3A:7A:18:E3:43:A5:11:34:C0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC004AB4E03071C21A302E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa Signing time: Wed 20 Aug 2025 18:32:07 +0000 ROA not before: Wed 20 Aug 2025 18:32:07 +0000 ROA not after: Tue 18 Nov 2025 19:32:07 +0000 asID: 31898 IP address blocks: 152.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:00:4a:b4:e0:30:71:c2:1a:30:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:32:07 2025 GMT Not After : Nov 18 19:32:07 2025 GMT Subject: CN=e8b18baa-f0b7-43c8-bada-328bb1a44b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:17:6b:4b:db:72:fb:96:c8:b7:27:c9:83: 3d:a4:2e:55:b1:d6:53:5a:f0:1d:2b:2f:b3:14:83: da:2f:9e:74:e3:ce:0a:ae:b0:d1:a1:59:10:2b:ed: 1b:ab:f7:de:a0:28:54:d4:4d:53:58:d9:49:6d:07: 51:eb:5f:d7:d5:5e:be:58:2a:60:52:ad:67:79:44: 77:20:72:a3:f4:c4:2b:4e:1c:bc:e5:89:31:7c:c1: 4f:c5:65:87:5e:de:eb:e9:dd:e4:6b:e3:41:a3:73: ec:5c:d2:7a:df:9b:81:dd:82:53:18:d0:01:5c:d4: 74:52:cf:2a:21:70:73:ba:c2:d0:65:2f:fa:e6:ed: 9c:41:66:2e:6e:eb:38:58:f0:0b:c4:cd:5a:67:04: 1e:0a:d9:cc:8c:c7:35:35:95:7c:73:bb:bf:4b:4b: fc:3f:ca:34:e5:8e:33:49:45:4b:26:94:e3:b7:7b: de:a9:93:b4:d0:6e:d5:01:e4:b8:bc:30:cf:0a:ed: b4:b1:4e:cb:55:5f:9c:b1:94:1b:5d:1e:b4:fd:55: 30:e7:cb:8e:8e:f0:c4:e2:8f:1b:de:11:7e:0f:a1: 37:34:b6:4b:7c:26:65:02:fa:ab:93:37:fe:cf:7a: 1a:ae:42:00:63:3c:52:a0:95:f5:64:ba:38:0e:70: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:17:F1:02:FA:0A:D6:6F:59:17:6D:3A:7A:18:E3:43:A5:11:34:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:7d:f3:9b:2d:01:f3:61:d0:72:d8:b8:cc:d6:d5:55:c4:03: a8:53:ad:b3:83:6a:f4:dd:30:d2:ff:48:f0:1f:1d:47:a7:b8: 07:aa:ec:76:ea:fe:f2:82:44:60:ea:5f:87:4a:7c:09:3b:61: c3:9a:92:f9:eb:c2:5e:ab:59:78:b7:cd:f7:51:8c:3f:e7:e7: 4a:2f:d0:20:ad:3c:b5:24:04:e3:55:d3:96:99:08:d8:b0:28: 6d:75:42:2c:0d:c6:f6:6e:0b:a8:a2:07:ca:f8:f6:7b:12:91: 50:7d:17:72:7a:c9:c9:34:16:89:e9:e1:fb:65:4c:b5:4b:0f: ce:08:04:98:d7:cc:11:1c:5e:eb:8d:25:f5:c3:49:f9:67:a9: ea:5d:e1:23:19:73:9e:23:13:6f:7f:76:3b:ff:b1:fc:7e:f9: 44:58:fd:15:8a:02:ba:44:7d:96:7b:16:98:6a:0b:58:ee:9e: 10:64:54:4c:50:45:68:b6:f0:e0:9e:63:0b:a6:df:bb:5c:a5: b7:48:37:fb:31:52:db:1e:12:9e:ad:06:8e:88:05:af:85:69: e8:97:5a:d2:c4:57:51:e4:25:3a:6a:c9:94:02:a3:3a:61:16: 75:5d:ac:a4:ce:0b:60:97:61:80:c4:0e:8d:26:b4:e0:64:84: 0a:94:4a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsAEq04DBxwhowLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MzIwN1oXDTI1MTExODE5MzIwN1owLzEtMCsGA1UEAxMk ZThiMThiYWEtZjBiNy00M2M4LWJhZGEtMzI4YmIxYTQ0YjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseMXa0vbcvuWyLcnyYM9pC5VsdZTWvAdKy+z FIPaL550484KrrDRoVkQK+0bq/feoChU1E1TWNlJbQdR61/X1V6+WCpgUq1neUR3 IHKj9MQrThy85YkxfMFPxWWHXt7r6d3ka+NBo3PsXNJ635uB3YJTGNABXNR0Us8q IXBzusLQZS/65u2cQWYubus4WPALxM1aZwQeCtnMjMc1NZV8c7u/S0v8P8o05Y4z SUVLJpTjt3veqZO00G7VAeS4vDDPCu20sU7LVV+csZQbXR60/VUw58uOjvDE4o8b 3hF+D6E3NLZLfCZlAvqrkzf+z3oarkIAYzxSoJX1ZLo4DnCcrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcX8QL6CtZvWRdtOnoY40OlETTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE1ZmM2MjEtY2RiMi0z NmNjLTg3M2ItZGNmNmY0NTdkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN985stAfNh0HLYuMzW1VXEA6hTrbODavTdMNL/SPAfHUenuAeq7Hbq /vKCRGDqX4dKfAk7YcOakvnrwl6rWXi3zfdRjD/n50ov0CCtPLUkBONV05aZCNiw KG11QiwNxvZuC6iiB8r49nsSkVB9F3J6yck0Fonp4ftlTLVLD84IBJjXzBEcXuuN JfXDSflnqepd4SMZc54jE29/djv/sfx++URY/RWKArpEfZZ7FphqC1junhBkVExQ RWi28OCeYwum37tcpbdIN/sxUtseEp6tBo6IBa+FaeiXWtLEV1HkJTpqyZQCozph FnVdrKTOC2CXYYDEDo0mtOBkhAqUSoo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:44 2025 by rpki-client