$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa File: 4f0cf56c-094b-3ec5-8954-8e7090994967.roa (raw, json) Hash identifier: PuxcFWDX0CzSkscruOUK640jo057thpc18TDXoZB2kg= Subject key identifier: D3:FB:58:B3:BE:47:CA:47:B7:64:90:3D:E7:BF:0F:64:63:31:F9:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A2A56F5F8F63BA4FE0E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 152.67.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:2a:56:f5:f8:f6:3b:a4:fe:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=7f94b60f-02fc-49ef-bbff-e5b31a916f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5e:ab:93:fa:85:b4:8b:2f:c4:13:9a:8b:a8: db:24:db:c9:bd:c7:ce:cf:33:27:e2:a0:11:bc:20: 56:c5:10:43:b5:35:cc:5e:da:97:ba:2c:7e:bb:f4: fe:46:21:3f:0d:48:df:34:b6:c0:6f:54:4d:ba:0a: 31:6e:55:d3:f3:c1:02:5d:d8:46:32:06:27:15:de: df:a6:17:2f:16:c1:14:90:88:59:ef:55:c4:52:97: 63:27:7f:f7:9d:88:01:86:0c:5a:2b:7b:4c:7a:62: 6a:62:0d:01:90:7c:4b:69:b2:1d:3e:35:d7:c2:e7: bf:0f:20:9e:9d:db:d0:4b:ab:39:dc:9a:53:42:07: 61:42:8e:4c:ce:02:26:57:94:3b:1b:44:7f:21:14: a7:02:94:2f:ef:25:f4:8a:cc:63:5e:90:ed:59:eb: 8f:74:4d:97:8d:6a:e2:73:31:0a:1d:d1:10:34:e0: 17:52:4f:70:02:be:38:cd:fa:f0:b9:9e:31:7f:fc: c2:ab:fd:a6:c0:b9:e7:af:53:0d:c7:00:e7:8b:9e: 94:80:70:33:1c:e6:fa:d4:70:30:3e:22:06:51:83: fd:77:b1:04:ad:f6:d8:35:80:79:d8:ee:57:6a:c8: 11:61:d3:f0:31:5d:13:36:9e:e3:e8:ce:3d:f6:48: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FB:58:B3:BE:47:CA:47:B7:64:90:3D:E7:BF:0F:64:63:31:F9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4f0cf56c-094b-3ec5-8954-8e7090994967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.67.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b9:c3:19:1e:76:d8:51:6e:a7:03:04:ff:75:86:13:bf:3e: c0:f2:ed:75:4f:35:3f:0c:3d:ec:79:2f:bc:07:83:1b:ae:6a: f4:92:b8:ec:ad:3d:f1:ea:bb:da:2e:34:27:9d:ec:41:ba:39: e9:9a:9b:74:bb:c5:d2:b3:82:98:cd:27:5f:7a:46:52:22:9a: 9d:7e:64:62:16:bd:42:22:9c:f5:f3:c7:10:89:a7:09:08:dd: 94:99:a2:50:98:f9:bd:e9:25:d4:4d:ae:63:f7:e0:6a:4f:67: 5b:c7:49:c3:20:4f:31:0a:62:44:35:f8:b1:87:1a:95:80:fb: 44:af:3a:2d:45:b2:ed:7b:95:6c:70:29:93:aa:85:62:9b:6e: 52:d2:64:81:87:b8:0b:1c:cc:80:4c:a7:f1:8e:49:fe:1b:46: 35:83:a2:fe:e7:84:33:8b:ab:fc:66:2e:95:fe:b8:e8:07:78: 84:bf:c3:f4:1a:53:80:a5:25:43:96:05:43:39:c2:00:67:4b: 0f:e7:52:ef:06:2b:c3:45:2c:ba:75:59:49:79:55:24:b9:b3: 67:b5:f8:89:ff:ae:1d:9f:3d:ba:10:90:d7:69:a1:dd:26:ab: 64:36:87:50:ba:bf:aa:5c:34:f5:18:7e:07:9e:9c:1b:02:a1: 69:82:bf:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCipW9fj2O6T+DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk N2Y5NGI2MGYtMDJmYy00OWVmLWJiZmYtZTViMzFhOTE2ZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV6rk/qFtIsvxBOai6jbJNvJvcfOzzMn4qAR vCBWxRBDtTXMXtqXuix+u/T+RiE/DUjfNLbAb1RNugoxblXT88ECXdhGMgYnFd7f phcvFsEUkIhZ71XEUpdjJ3/3nYgBhgxaK3tMemJqYg0BkHxLabIdPjXXwue/DyCe ndvQS6s53JpTQgdhQo5MzgImV5Q7G0R/IRSnApQv7yX0isxjXpDtWeuPdE2XjWri czEKHdEQNOAXUk9wAr44zfrwuZ4xf/zCq/2mwLnnr1MNxwDni56UgHAzHOb61HAw PiIGUYP9d7EErfbYNYB52O5XasgRYdPwMV0TNp7j6M499ki5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP7WLO+R8pHt2SQPee/D2RjMfnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGYwY2Y1NmMtMDk0Yi0z ZWM1LTg5NTQtOGU3MDkwOTk0OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmENAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+5wxkedthRbqcDBP91hhO/PsDy7XVPNT8MPex5L7wHgxuuavSSuOyt PfHqu9ouNCed7EG6Oemam3S7xdKzgpjNJ196RlIimp1+ZGIWvUIinPXzxxCJpwkI 3ZSZolCY+b3pJdRNrmP34GpPZ1vHScMgTzEKYkQ1+LGHGpWA+0SvOi1Fsu17lWxw KZOqhWKbblLSZIGHuAsczIBMp/GOSf4bRjWDov7nhDOLq/xmLpX+uOgHeIS/w/Qa U4ClJUOWBUM5wgBnSw/nUu8GK8NFLLp1WUl5VSS5s2e1+In/rh2fPboQkNdpod0m q2Q2h1C6v6pcNPUYfgeenBsCoWmCv84= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:39 2026 by rpki-client