$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa File: d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa (raw, json) Hash identifier: oyunnCB3IVxGKlPUja3njbaVwyOhlZ2jqLgIXjN2wZk= Subject key identifier: F0:9F:B9:F4:80:21:D7:3E:11:41:86:0C:0E:AC:65:E3:F5:26:C9:F4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC535E99982471DBF318410 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 152.70.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:35:e9:99:82:47:1d:bf:31:84:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=336c177f-e8fe-4df3-a19c-723ad37d9679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:79:dd:3d:c9:c1:87:08:b5:4a:9a:b6:76:0f: 5f:c1:39:1f:c6:ed:e3:bd:10:29:a7:aa:f1:25:21: b8:73:93:d3:1d:3a:09:ea:e4:80:4a:82:cb:82:b5: e8:ba:98:9c:bd:52:96:8c:a3:8f:35:1a:cc:54:e5: 93:b4:08:53:85:e3:27:e1:0c:9e:6b:f4:e3:c9:b7: 47:b1:39:74:3b:24:90:2c:ce:81:c3:e1:13:78:db: 32:9d:89:49:48:1e:26:54:2c:15:7d:6c:17:bc:22: cc:fd:7b:b6:6d:87:88:47:06:b3:01:29:eb:e2:df: 12:2b:53:6c:f9:14:60:d0:85:df:3f:25:d8:2b:20: 08:ae:90:61:0f:ca:cd:1a:82:a8:09:4e:02:1a:94: 3a:69:87:61:59:d6:4d:64:ed:e5:b6:0d:1e:2e:55: db:ed:25:97:e2:d9:49:f7:a8:6d:71:34:96:a8:fa: 42:c1:a6:d6:d5:6d:17:44:10:1e:86:09:61:05:bb: 16:32:d1:52:f2:e2:9b:20:0b:74:e9:ab:7e:a0:41: e1:08:e3:b2:bc:ab:dc:6b:04:fe:ed:d3:f8:5c:ac: f4:5a:cc:78:08:b6:78:7c:62:df:68:f3:66:39:a2: a0:f3:f5:94:52:2d:43:47:c1:5f:db:d9:d7:f5:66: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9F:B9:F4:80:21:D7:3E:11:41:86:0C:0E:AC:65:E3:F5:26:C9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0dc5d65-c8a1-3cd3-b93f-e3f4e14586bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4b:75:0d:41:f0:be:a2:6a:b1:dc:75:2f:c6:f4:9c:cf:af: 9b:4f:e1:8a:09:22:7f:bb:0e:0e:bb:22:72:20:6c:6e:84:19: 66:6f:d0:c1:1f:ba:54:ef:44:f6:d8:b2:d6:9a:73:20:dd:4b: e7:77:13:8a:e4:36:03:eb:65:e4:4e:12:ad:d4:83:57:a9:2b: 69:4c:95:03:04:b4:35:e3:88:e6:cb:88:eb:93:92:65:9b:25: b7:ef:85:a4:94:5f:51:e0:2d:02:21:ef:e6:fe:77:a6:8e:c4: fb:94:fb:47:ed:19:7a:06:7c:d8:db:27:cb:02:8f:f2:85:a7: b8:34:0d:8d:a3:44:8b:fe:bf:ed:55:69:e1:81:60:00:c1:79: f8:fc:2f:dc:40:3d:aa:7d:8a:d8:14:19:b1:37:6d:d7:aa:ae: 0d:26:b2:05:2c:7b:1f:85:22:d5:64:4c:a2:49:4c:f7:2c:7b: 78:35:e9:43:98:b4:61:2d:56:27:da:f3:40:56:8c:90:d9:81: e7:7a:79:a4:28:6d:92:8b:6f:1f:56:3e:fa:22:36:6c:a0:26: a3:05:96:8d:52:73:40:bf:d0:5e:92:86:17:4a:ea:11:bd:2d: 9c:45:4b:31:59:d1:6c:fc:87:41:23:9e:1d:15:64:b8:84:67: fa:44:65:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTXpmYJHHb8xhBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzM2YzE3N2YtZThmZS00ZGYzLWExOWMtNzIzYWQzN2Q5Njc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnndPcnBhwi1Spq2dg9fwTkfxu3jvRApp6rx JSG4c5PTHToJ6uSASoLLgrXoupicvVKWjKOPNRrMVOWTtAhTheMn4Qyea/TjybdH sTl0OySQLM6Bw+ETeNsynYlJSB4mVCwVfWwXvCLM/Xu2bYeIRwazASnr4t8SK1Ns +RRg0IXfPyXYKyAIrpBhD8rNGoKoCU4CGpQ6aYdhWdZNZO3ltg0eLlXb7SWX4tlJ 96htcTSWqPpCwabW1W0XRBAehglhBbsWMtFS8uKbIAt06at+oEHhCOOyvKvcawT+ 7dP4XKz0Wsx4CLZ4fGLfaPNmOaKg8/WUUi1DR8Ff29nX9WaMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCfufSAIdc+EUGGDA6sZeP1Jsn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDBkYzVkNjUtYzhhMS0z Y2QzLWI5M2YtZTNmNGUxNDU4NmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmEbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERLdQ1B8L6iarHcdS/G9JzPr5tP4YoJIn+7Dg67InIgbG6EGWZv0MEf ulTvRPbYstaacyDdS+d3E4rkNgPrZeROEq3Ug1epK2lMlQMEtDXjiObLiOuTkmWb JbfvhaSUX1HgLQIh7+b+d6aOxPuU+0ftGXoGfNjbJ8sCj/KFp7g0DY2jRIv+v+1V aeGBYADBefj8L9xAPap9itgUGbE3bdeqrg0msgUsex+FItVkTKJJTPcse3g16UOY tGEtVifa80BWjJDZged6eaQobZKLbx9WPvoiNmygJqMFlo1Sc0C/0F6ShhdK6hG9 LZxFSzFZ0Wz8h0Ejnh0VZLiEZ/pEZVM= -----END CERTIFICATE-----Generated at Tue May 12 21:51:23 2026 by rpki-client