$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa File: 2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa (raw, json) Hash identifier: uVP2DnGY1vyRkkkgRrUuQzoiNQPyUq6DPRmXGwRpgS4= Subject key identifier: 7D:49:00:C9:48:F3:CE:91:81:52:A2:1C:C4:00:6D:0E:2F:21:78:70 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E78FF86C9CA24CFABF8C905B8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 31898 IP address blocks: 152.70.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:86:c9:ca:24:cf:ab:f8:c9:05:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=0acc078e-646c-4b39-bca2-c62d82314542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:07:23:c9:33:38:c9:2c:ef:cd:55:ac:d0: 6f:c8:7c:dc:eb:0c:2b:c9:70:15:20:40:da:47:72: a3:33:1d:1c:21:54:eb:71:5b:89:2b:75:7a:0e:c9: 85:29:45:18:3f:19:f3:1d:57:3c:16:f2:d0:d8:a3: b9:49:28:fe:c4:35:d5:59:01:2f:42:3c:98:5e:e0: 2c:e7:43:6c:73:f1:d2:58:b2:0f:7e:6c:4e:22:b9: d2:d0:9c:44:a2:13:4e:cb:a5:85:6c:52:e6:87:3b: ac:0f:e0:cd:f1:ed:94:b8:9e:64:af:bf:02:3d:9a: bf:8a:42:7c:59:bf:93:b4:37:9f:fb:30:f8:23:11: 1e:40:16:fa:50:2a:32:3a:12:ac:51:9d:31:cc:02: 69:d6:f4:57:bb:02:f6:c1:eb:bf:24:19:82:e7:18: 79:21:8f:af:dd:e9:81:38:cd:48:bf:29:1f:b8:d4: 0d:0a:16:b4:8d:df:7f:e8:80:c2:8f:73:37:29:fb: bc:7b:d2:59:67:56:9b:a3:54:41:d9:2b:49:53:89: 53:7a:cf:cd:43:b1:27:2d:a3:90:f7:52:a5:3b:6b: 77:6b:3a:34:d0:1a:a4:03:5f:cc:ba:c3:a5:5d:70: e3:d4:81:ca:ff:ca:ef:a6:ff:d4:e1:86:a8:e6:e0: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:49:00:C9:48:F3:CE:91:81:52:A2:1C:C4:00:6D:0E:2F:21:78:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e84750d-1e7d-3a47-bac3-95c139ab9ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bf:65:34:d7:02:09:c2:6b:d2:ed:8a:6a:3d:52:e7:fb:b2: cb:ed:10:e3:24:36:ed:fe:9d:be:08:98:8c:02:0b:bd:9b:5d: ca:61:69:7d:a7:89:3a:db:a0:d2:d3:f2:ad:16:4c:0e:b0:6d: 5d:a7:c8:f4:d2:91:5d:c0:cc:cf:00:ad:82:90:4b:4c:2b:7d: 42:35:06:6c:9b:35:8e:bd:62:aa:a1:3f:ee:56:49:85:50:13: c3:5f:a4:65:fd:88:07:db:dd:d7:cb:b4:9f:39:f5:7e:38:f7: 48:29:df:d2:b5:33:12:be:4a:8d:01:9d:55:8d:68:b3:2c:71: 0a:0f:49:e9:e7:7a:99:5b:40:7a:65:52:98:46:a0:c9:de:ab: 3f:de:9d:f2:8c:9c:bf:05:a9:b4:f0:18:21:75:3b:98:83:39: ef:ba:fd:0e:5f:90:0c:40:a6:ea:c4:11:a3:ff:ba:93:5f:85: 9b:ac:da:7d:c3:05:54:d5:e3:d8:8c:f8:a9:a9:34:06:04:17: d5:f2:27:f3:dc:01:a3:29:25:f6:44:9c:dc:a0:f9:71:22:8e: 32:a0:95:41:63:78:3c:f0:f4:4b:b4:b6:3b:4c:17:c5:d3:10: f5:fd:ba:4b:a3:e1:c7:36:6f:c8:62:21:20:48:7d:55:7f:ca: af:f9:e3:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4bJyiTPq/jJBbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk MGFjYzA3OGUtNjQ2Yy00YjM5LWJjYTItYzYyZDgyMzE0NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm10HI8kzOMks781VrNBvyHzc6wwryXAVIEDa R3KjMx0cIVTrcVuJK3V6DsmFKUUYPxnzHVc8FvLQ2KO5SSj+xDXVWQEvQjyYXuAs 50Nsc/HSWLIPfmxOIrnS0JxEohNOy6WFbFLmhzusD+DN8e2UuJ5kr78CPZq/ikJ8 Wb+TtDef+zD4IxEeQBb6UCoyOhKsUZ0xzAJp1vRXuwL2weu/JBmC5xh5IY+v3emB OM1IvykfuNQNCha0jd9/6IDCj3M3Kfu8e9JZZ1abo1RB2StJU4lTes/NQ7EnLaOQ 91KlO2t3azo00BqkA1/MusOlXXDj1IHK/8rvpv/U4Yao5uDXqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1JAMlI886RgVKiHMQAbQ4vIXhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmU4NDc1MGQtMWU3ZC0z YTQ3LWJhYzMtOTVjMTM5YWI5ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmEYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy/ZTTXAgnCa9Ltimo9Uuf7ssvtEOMkNu3+nb4ImIwCC72bXcphaX2n iTrboNLT8q0WTA6wbV2nyPTSkV3AzM8ArYKQS0wrfUI1BmybNY69YqqhP+5WSYVQ E8NfpGX9iAfb3dfLtJ859X4490gp39K1MxK+So0BnVWNaLMscQoPSenneplbQHpl UphGoMneqz/enfKMnL8FqbTwGCF1O5iDOe+6/Q5fkAxApurEEaP/upNfhZus2n3D BVTV49iM+KmpNAYEF9XyJ/PcAaMpJfZEnNyg+XEijjKglUFjeDzw9Eu0tjtMF8XT EPX9ukuj4cc2b8hiISBIfVV/yq/5474= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:11 2026 by rpki-client