$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ed6b78be-4f96-3878-abe5-5639ee55ecf8.roa File: ed6b78be-4f96-3878-abe5-5639ee55ecf8.roa (raw, json) Hash identifier: MtXIP9CbRR5U1+uoTydZX4Zq56k77wbWYuLiX/L7Zxk= Subject key identifier: D1:F5:CE:5B:1D:10:45:B1:34:D9:3C:8B:10:D7:69:44:9E:7E:1B:6D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDAD20428593CACAF153A00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ed6b78be-4f96-3878-abe5-5639ee55ecf8.roa Signing time: Thu 21 Aug 2025 10:28:14 +0000 ROA not before: Thu 21 Aug 2025 10:28:14 +0000 ROA not after: Wed 19 Nov 2025 11:28:14 +0000 asID: 31898 IP address blocks: 152.70.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:d2:04:28:59:3c:ac:af:15:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:28:14 2025 GMT Not After : Nov 19 11:28:14 2025 GMT Subject: CN=250a2ad7-09b5-4ca0-ae20-106ac01f13a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:a9:8a:b4:b4:bb:bd:63:3e:a7:39:41:f2: 96:b7:88:62:8c:bc:1f:69:34:87:66:27:a4:f5:be: 55:5f:97:e2:04:a5:d2:c6:52:6a:c6:41:95:31:ae: 0b:39:6f:bc:32:1c:b5:ed:89:1f:80:b9:78:d1:1d: 21:0a:37:0a:f4:01:d1:91:47:aa:d3:1c:e0:38:bc: b9:ef:df:99:e1:a8:4b:7d:b9:61:3e:d0:1f:65:c5: 1b:89:d1:44:0a:d0:0d:87:66:2e:8d:e9:4c:13:89: 33:a7:ee:7e:b5:df:fd:c7:48:36:9b:b3:2e:ba:67: 5b:34:27:2e:23:58:af:86:25:74:cc:13:57:35:62: bd:c9:6c:19:8e:24:d4:5c:d0:d0:44:b6:72:14:df: df:f3:6d:15:e9:d0:09:8e:24:9f:79:37:47:33:8d: af:61:80:9f:a4:a0:0e:f9:c3:42:7a:c8:e7:5a:5c: 26:a6:30:16:cf:7e:2d:9d:9b:7c:f0:e2:cf:57:67: 01:b0:be:6a:72:c5:82:d8:bd:d3:3e:de:43:73:6e: c4:dc:ba:02:33:73:f6:9b:d6:60:df:26:38:e8:4d: c1:c7:78:0c:87:cb:b2:c8:75:4e:65:98:b7:da:7e: d0:4a:d0:54:b9:0f:4e:0c:20:20:6c:89:fc:00:76: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F5:CE:5B:1D:10:45:B1:34:D9:3C:8B:10:D7:69:44:9E:7E:1B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ed6b78be-4f96-3878-abe5-5639ee55ecf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ff:a1:d4:c5:5a:3d:44:f1:b5:78:3f:a5:19:07:d0:99:a8: 71:52:02:89:77:a3:8a:f3:b2:c0:c1:d0:be:c6:54:e4:02:fa: ea:19:6e:cb:4c:8c:7c:54:b9:1b:cc:47:9a:3d:e2:8a:47:b9: e9:55:70:df:25:97:6d:fa:f2:c5:e8:e2:72:03:fa:cf:6d:6a: d0:93:80:c7:b6:f9:b3:c2:96:b0:b6:3a:10:44:78:9b:71:07: 87:f4:8f:3d:5d:0a:12:39:f0:de:58:a4:5a:4d:8d:18:a8:2f: fc:ce:46:cb:f5:b7:2e:1c:8f:b2:7f:5e:d3:10:25:14:dc:92: 97:91:3f:5f:96:af:ba:d3:51:66:eb:1e:d0:35:98:ee:19:d9: 88:5c:76:4d:f0:0c:ca:3d:fc:00:da:e2:09:cc:82:08:cd:73: 79:24:31:3c:59:f1:51:85:6b:80:b2:c0:0e:60:c6:31:b1:70: d4:4a:37:f4:52:3e:e6:e1:14:d8:8c:cf:46:4e:b9:f9:43:db: 05:78:7c:14:53:96:b6:11:30:58:a2:93:72:70:10:63:a3:8c: 62:2b:48:db:0e:5e:46:d1:fe:46:57:94:43:61:de:18:ea:54: e6:6a:a8:70:dd:27:35:07:56:54:49:79:e8:fe:83:a9:68:8c: df:34:17:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2tIEKFk8rK8VOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjgxNFoXDTI1MTExOTExMjgxNFowLzEtMCsGA1UEAxMk MjUwYTJhZDctMDliNS00Y2EwLWFlMjAtMTA2YWMwMWYxM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTCpirS0u71jPqc5QfKWt4hijLwfaTSHZiek 9b5VX5fiBKXSxlJqxkGVMa4LOW+8Mhy17YkfgLl40R0hCjcK9AHRkUeq0xzgOLy5 79+Z4ahLfblhPtAfZcUbidFECtANh2YujelME4kzp+5+td/9x0g2m7MuumdbNCcu I1ivhiV0zBNXNWK9yWwZjiTUXNDQRLZyFN/f820V6dAJjiSfeTdHM42vYYCfpKAO +cNCesjnWlwmpjAWz34tnZt88OLPV2cBsL5qcsWC2L3TPt5Dc27E3LoCM3P2m9Zg 3yY46E3Bx3gMh8uyyHVOZZi32n7QStBUuQ9ODCAgbIn8AHaJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH1zlsdEEWxNNk8ixDXaUSefhttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWQ2Yjc4YmUtNGY5Ni0z ODc4LWFiZTUtNTYzOWVlNTVlY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH/odTFWj1E8bV4P6UZB9CZqHFSAol3o4rzssDB0L7GVOQC+uoZbstM jHxUuRvMR5o94opHuelVcN8ll2368sXo4nID+s9tatCTgMe2+bPClrC2OhBEeJtx B4f0jz1dChI58N5YpFpNjRioL/zORsv1ty4cj7J/XtMQJRTckpeRP1+Wr7rTUWbr HtA1mO4Z2Yhcdk3wDMo9/ADa4gnMggjNc3kkMTxZ8VGFa4CywA5gxjGxcNRKN/RS PubhFNiMz0ZOuflD2wV4fBRTlrYRMFiik3JwEGOjjGIrSNsOXkbR/kZXlENh3hjq VOZqqHDdJzUHVlRJeej+g6lojN80F+I= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:07 2025 by rpki-client