$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa File: 4a708930-ba17-316a-894d-1271c0254604.roa (raw, json) Hash identifier: 6ePR7S8xQimo8BJSkwSz5M0e7wtkPTPEpGvm0qXXs1I= Subject key identifier: 54:2A:D8:09:C9:7D:E4:61:08:F9:01:BC:F3:64:B3:A2:1B:F7:0D:22 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3EBF6FA316E6443F7F0E40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 170.9.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:bf:6f:a3:16:e6:44:3f:7f:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=3b9f31e5-1692-44bb-a408-bd004e04c77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:ca:6d:46:4e:68:66:10:4b:26:d7:ca:a2: 5a:ec:60:a3:65:e0:2b:09:49:bc:57:03:5e:34:3e: 5c:76:59:a9:49:c7:21:2d:8c:a8:e4:88:95:b8:81: 0a:56:22:9e:75:20:4a:62:2c:60:ba:e8:d8:9b:e6: 95:44:48:2b:de:10:b7:30:a6:de:a2:49:26:48:90: 8f:68:fc:8e:d3:95:33:da:cc:a7:db:02:d3:92:09: 05:d4:d4:02:79:de:c6:48:c3:c1:de:d9:bb:50:10: d5:77:09:86:d3:9b:00:7a:97:c4:eb:12:fa:0b:76: 96:17:83:80:cf:23:28:a1:b7:90:65:d9:cd:87:bd: a1:29:1a:19:68:a0:2f:67:a6:eb:b1:25:d0:17:2a: c2:e9:87:d8:02:04:60:78:b7:18:4c:7a:8e:28:96: dc:f6:e1:c2:75:df:0c:3b:13:22:53:c8:01:48:74: 0b:39:e5:27:55:26:12:06:84:9e:0b:be:17:03:fb: 5e:81:56:59:f4:c1:98:ea:86:64:a2:14:e7:f3:6a: 3b:79:1f:6c:6c:d2:17:74:f6:41:92:c5:a2:e9:65: a6:55:1b:08:c8:b0:c7:f2:9d:87:5b:03:c1:8e:d1: 3e:47:35:38:60:d5:2a:2e:d8:e7:c3:39:52:7a:33: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2A:D8:09:C9:7D:E4:61:08:F9:01:BC:F3:64:B3:A2:1B:F7:0D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4a708930-ba17-316a-894d-1271c0254604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:11:00:4f:9a:dc:9a:10:68:f0:f7:60:26:76:16:b0:1e:4e: 85:68:22:47:e3:dd:cc:05:11:98:f9:88:e4:fd:36:bb:7b:28: 84:4e:ec:21:fe:bc:3b:1b:5f:ce:5c:d7:8c:62:aa:bc:a8:26: c1:0d:27:1d:8f:f9:f5:f2:31:0e:87:8a:82:43:cb:1a:65:99: 06:b7:c4:22:a1:6f:f9:0b:03:7c:ac:2d:da:bc:30:12:a1:34: d1:e9:c5:cf:a4:f6:0d:04:25:33:34:23:51:08:2e:62:df:22: 16:52:96:81:e0:3a:9f:37:d9:2e:89:4d:b5:e3:7b:a8:e4:8d: c6:3a:2e:07:96:9c:92:fc:cf:d5:ee:f9:64:08:c0:d6:df:f0: d5:7b:68:a4:a4:17:32:6d:43:01:e0:cf:19:c9:ba:9f:1b:7a: bb:27:d0:d4:27:dc:50:db:84:60:81:da:1f:62:ed:69:e3:69: 9e:82:2b:ee:da:4a:16:ff:05:f5:f3:be:c8:8f:c7:eb:27:67: f3:d5:c1:f5:ce:61:e8:3f:85:5c:30:6d:d0:4a:f4:d4:7f:ce: 24:0d:87:83:42:de:cd:da:f3:50:a8:04:f8:e3:3f:88:1a:a1: a8:e7:10:43:0a:7b:53:ea:9a:e4:30:6b:9d:e7:27:b4:83:39: 56:52:7b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPr9voxbmRD9/DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk M2I5ZjMxZTUtMTY5Mi00NGJiLWE0MDgtYmQwMDRlMDRjNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBfKbUZOaGYQSybXyqJa7GCjZeArCUm8VwNe ND5cdlmpScchLYyo5IiVuIEKViKedSBKYixguujYm+aVREgr3hC3MKbeokkmSJCP aPyO05Uz2syn2wLTkgkF1NQCed7GSMPB3tm7UBDVdwmG05sAepfE6xL6C3aWF4OA zyMoobeQZdnNh72hKRoZaKAvZ6brsSXQFyrC6YfYAgRgeLcYTHqOKJbc9uHCdd8M OxMiU8gBSHQLOeUnVSYSBoSeC74XA/tegVZZ9MGY6oZkohTn82o7eR9sbNIXdPZB ksWi6WWmVRsIyLDH8p2HWwPBjtE+RzU4YNUqLtjnwzlSejPk5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQq2AnJfeRhCPkBvPNks6Ib9w0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGE3MDg5MzAtYmExNy0z MTZhLTg5NGQtMTI3MWMwMjU0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqgkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoRAE+a3JoQaPD3YCZ2FrAeToVoIkfj3cwFEZj5iOT9Nrt7KIRO7CH+ vDsbX85c14xiqryoJsENJx2P+fXyMQ6HioJDyxplmQa3xCKhb/kLA3ysLdq8MBKh NNHpxc+k9g0EJTM0I1EILmLfIhZSloHgOp832S6JTbXje6jkjcY6LgeWnJL8z9Xu +WQIwNbf8NV7aKSkFzJtQwHgzxnJup8bersn0NQn3FDbhGCB2h9i7WnjaZ6CK+7a Shb/BfXzvsiPx+snZ/PVwfXOYeg/hVwwbdBK9NR/ziQNh4NC3s3a81CoBPjjP4ga oajnEEMKe1PqmuQwa53nJ7SDOVZSe0U= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:27 2026 by rpki-client