$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa File: fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa (raw, json) Hash identifier: 2gP1GvtkOT+Ue8bKF+GvZr5lMAK0C/J1nTDgpnsfl6k= Subject key identifier: 9C:6F:5D:71:17:85:23:E1:D9:EC:52:74:AF:A8:6D:40:D8:64:28:BD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF99598DFFDAC9F1148D410 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 152.70.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:95:98:df:fd:ac:9f:11:48:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=51f98f09-6541-455e-94ea-49952ab4a5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:1b:6b:77:dd:b5:dd:b9:7c:6f:92:8d:cb: c2:e0:8a:77:4e:6a:d3:1c:9f:88:45:75:da:5e:fa: 63:f0:8b:21:04:5d:ef:32:da:7e:6b:e9:fd:1c:71: 77:07:ff:b6:af:bf:77:93:12:fe:9b:35:f2:33:22: 1b:b1:b1:bd:c6:60:56:c7:11:95:7f:8e:3f:d8:b3: 89:85:91:f4:64:af:6b:ce:36:0b:8a:df:d3:b3:96: 45:4b:31:55:1c:e2:7e:c8:2a:35:41:cf:3f:59:92: 74:89:63:7c:5c:00:e2:34:1f:fc:3d:2d:52:6a:08: d0:44:59:e8:d3:55:f5:8e:20:88:51:9b:40:e7:46: 07:10:af:92:c4:ad:75:19:54:d1:ef:52:80:66:db: e7:f4:b7:02:6c:ba:7f:26:c2:da:9a:23:71:4d:4a: 45:f3:25:c4:5f:fe:29:cd:63:cd:4e:40:4b:ba:e2: d4:37:37:f5:04:32:aa:47:7f:f4:24:8c:95:b5:39: 46:c5:9c:81:d1:e7:8f:32:43:ae:8a:65:b6:4a:25: ab:63:12:df:92:42:3f:14:f2:65:ec:fe:4c:5b:e5: 2a:17:02:a0:6b:af:d4:e8:38:61:36:db:7e:51:94: 38:1e:c2:09:9d:ac:0e:3b:60:59:84:59:30:04:36: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6F:5D:71:17:85:23:E1:D9:EC:52:74:AF:A8:6D:40:D8:64:28:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f7:2c:ba:09:fe:94:1f:43:55:26:d7:72:f3:3d:fb:a5:20: 32:2c:8e:17:dd:56:24:00:98:91:88:07:10:2b:a8:9d:b6:7d: ce:23:59:fd:f2:9a:0d:79:24:64:22:35:8c:f5:1a:0e:7a:f3: 3a:27:64:f0:87:d4:19:85:21:ee:da:2c:80:4d:2c:56:cc:1d: 91:e9:65:6a:26:e9:0d:98:cd:5c:74:2d:8f:2e:3c:85:32:59: d5:f0:31:4a:f9:f5:4e:fb:39:c5:5f:c2:7f:2d:f8:55:df:dd: 55:c1:62:35:07:f7:f3:e3:1c:46:65:dd:fb:56:ea:4d:76:1c: cc:29:f9:57:53:c7:8c:de:eb:b0:6c:e7:72:86:d2:82:21:3c: 00:32:f4:92:42:f1:9d:44:9a:d9:5c:2b:7a:80:dd:24:97:f0: ad:1c:a8:7e:41:94:db:4b:35:3f:5a:ab:71:91:85:6d:b8:7b: 4d:d0:32:90:09:72:f1:9f:22:40:57:55:f3:7e:a0:de:97:f0: 7e:64:ce:74:15:ef:25:f9:05:63:06:ec:7b:ec:5e:fc:76:6d: 0c:a4:8d:11:ae:1a:7e:ad:cf:be:43:84:ff:db:7f:4f:46:f6: df:0c:c5:fd:d6:13:b2:f5:2a:91:b3:7a:f5:1b:98:2d:57:67: d8:c8:f7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZWY3/2snxFI1BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTFmOThmMDktNjU0MS00NTVlLTk0ZWEtNDk5NTJhYjRhNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwScba3fdtd25fG+SjcvC4Ip3TmrTHJ+IRXXa Xvpj8IshBF3vMtp+a+n9HHF3B/+2r793kxL+mzXyMyIbsbG9xmBWxxGVf44/2LOJ hZH0ZK9rzjYLit/Ts5ZFSzFVHOJ+yCo1Qc8/WZJ0iWN8XADiNB/8PS1SagjQRFno 01X1jiCIUZtA50YHEK+SxK11GVTR71KAZtvn9LcCbLp/JsLamiNxTUpF8yXEX/4p zWPNTkBLuuLUNzf1BDKqR3/0JIyVtTlGxZyB0eePMkOuimW2SiWrYxLfkkI/FPJl 7P5MW+UqFwKga6/U6DhhNtt+UZQ4HsIJnawOO2BZhFkwBDbTUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxvXXEXhSPh2exSdK+obUDYZCi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmRiMGViZDQtN2Q3Mi0z N2QxLTg2ZGItYzBhYTFhZjViODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT3LLoJ/pQfQ1Um13LzPfulIDIsjhfdViQAmJGIBxArqJ22fc4jWf3y mg15JGQiNYz1Gg568zonZPCH1BmFIe7aLIBNLFbMHZHpZWom6Q2YzVx0LY8uPIUy WdXwMUr59U77OcVfwn8t+FXf3VXBYjUH9/PjHEZl3ftW6k12HMwp+VdTx4ze67Bs 53KG0oIhPAAy9JJC8Z1EmtlcK3qA3SSX8K0cqH5BlNtLNT9aq3GRhW24e03QMpAJ cvGfIkBXVfN+oN6X8H5kznQV7yX5BWMG7HvsXvx2bQykjRGuGn6tz75DhP/bf09G 9t8Mxf3WE7L1KpGzevUbmC1XZ9jI9+A= -----END CERTIFICATE-----Generated at Wed May 13 07:51:33 2026 by rpki-client