$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa File: 4faebc4b-4621-371a-b55b-980b9dfaa752.roa (raw, json) Hash identifier: fLIv8no34ptxVUqj6eyf8AeN1tZl63sbAazf4UXbDRs= Subject key identifier: 26:BB:52:27:CC:6A:AA:3D:E4:10:00:B4:B9:0A:31:D4:56:7E:C7:87 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6DD4C7E49A615DB16A4EB740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 164.152.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:c7:e4:9a:61:5d:b1:6a:4e:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=e71f8e44-daa7-4683-9546-2040cc8cc6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:1b:6f:05:b3:4e:22:17:ab:05:4f:98:8e: 6f:91:70:e5:c2:a2:54:c5:4b:58:f8:96:c7:30:52: c9:ea:e9:91:0a:f5:60:16:0c:3d:9d:73:c5:5f:28: d0:ff:e6:1c:97:23:87:1f:51:42:84:73:8d:7d:d5: 05:39:44:59:9d:10:33:5b:39:40:9f:0c:43:8b:15: 8f:48:f8:73:ca:67:ec:11:65:d7:18:7e:46:68:69: bc:2b:27:7f:64:e3:1a:5b:b4:a4:cf:f5:16:21:cd: 77:4c:1b:40:69:f1:fd:ce:57:49:e8:52:8a:c4:51: 4a:e4:f4:59:a2:9c:37:b2:9c:ff:ba:85:4c:bf:d4: 7f:f9:3a:71:11:48:f0:10:54:c5:53:99:ff:09:07: 2b:a2:2b:43:89:9a:83:5f:08:5d:94:2e:7d:cf:3a: 90:aa:d9:29:86:a0:ab:46:c9:ce:41:f6:0d:57:60: 3c:65:8d:ab:4c:23:aa:db:02:2d:b7:35:d0:8e:22: 93:0f:c1:39:b9:e6:25:6a:af:1e:b9:36:9f:21:02: ef:d3:4d:34:e0:c4:da:98:df:65:74:fb:80:9a:6d: 23:e8:6f:4b:a7:29:00:19:32:a8:5c:bf:29:0e:e6: 59:94:d0:f0:5f:ad:d9:53:3e:41:11:05:d0:f1:5f: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BB:52:27:CC:6A:AA:3D:E4:10:00:B4:B9:0A:31:D4:56:7E:C7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4faebc4b-4621-371a-b55b-980b9dfaa752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 164.152.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b1:8e:c1:45:34:d0:ea:f2:b1:a0:06:26:54:7e:f1:78:b1: ef:8f:81:d8:f2:ee:9c:41:ef:57:f5:55:f9:11:7d:bd:cf:f4: 8d:cc:85:ba:96:2a:ac:82:9d:b9:a9:e4:6e:7f:65:be:e7:5a: bb:4a:b1:1a:08:21:de:77:0f:2c:1c:07:72:04:51:5b:03:21: 50:e7:cf:9b:1b:14:7c:2a:c2:6b:59:69:4e:36:31:04:93:7f: 9e:94:c8:97:72:ee:1c:66:2d:ff:27:d8:41:0f:be:15:cf:4e: 3e:58:d6:81:9d:81:86:ec:9f:9f:ac:c8:7b:64:cc:bc:30:97: b9:20:7c:ac:a6:42:af:13:03:f4:25:fb:06:18:ab:03:c3:e3: cb:c8:32:ad:82:27:c0:11:f2:85:9e:8c:c9:69:15:60:7b:c6: 39:dd:15:0e:9d:21:5d:0a:47:ff:6c:b6:1a:9a:e0:7e:ba:f8: f4:c3:72:20:96:60:0c:f9:7d:6b:29:b3:b8:7c:88:0e:a8:5b: b2:11:07:62:c8:c6:34:e5:7f:04:9d:53:19:50:0b:fd:6f:c4: ef:9c:b5:7b:86:14:22:60:7b:82:7a:f1:d4:c1:79:9b:4c:3a: d8:90:da:82:7f:88:82:ac:6e:1e:3c:84:0b:49:aa:de:d6:22: 50:4c:cb:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1MfkmmFdsWpOt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk ZTcxZjhlNDQtZGFhNy00NjgzLTk1NDYtMjA0MGNjOGNjNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1UbbwWzTiIXqwVPmI5vkXDlwqJUxUtY+JbH MFLJ6umRCvVgFgw9nXPFXyjQ/+YclyOHH1FChHONfdUFOURZnRAzWzlAnwxDixWP SPhzymfsEWXXGH5GaGm8Kyd/ZOMaW7Skz/UWIc13TBtAafH9zldJ6FKKxFFK5PRZ opw3spz/uoVMv9R/+TpxEUjwEFTFU5n/CQcroitDiZqDXwhdlC59zzqQqtkphqCr RsnOQfYNV2A8ZY2rTCOq2wIttzXQjiKTD8E5ueYlaq8euTafIQLv00004MTamN9l dPuAmm0j6G9LpykAGTKoXL8pDuZZlNDwX63ZUz5BEQXQ8V+9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCa7UifMaqo95BAAtLkKMdRWfseHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZhZWJjNGItNDYyMS0z NzFhLWI1NWItOTgwYjlkZmFhNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpJjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCxjsFFNNDq8rGgBiZUfvF4se+Pgdjy7pxB71f1VfkRfb3P9I3MhbqW KqyCnbmp5G5/Zb7nWrtKsRoIId53DywcB3IEUVsDIVDnz5sbFHwqwmtZaU42MQST f56UyJdy7hxmLf8n2EEPvhXPTj5Y1oGdgYbsn5+syHtkzLwwl7kgfKymQq8TA/Ql +wYYqwPD48vIMq2CJ8AR8oWejMlpFWB7xjndFQ6dIV0KR/9sthqa4H66+PTDciCW YAz5fWsps7h8iA6oW7IRB2LIxjTlfwSdUxlQC/1vxO+ctXuGFCJge4J68dTBeZtM OtiQ2oJ/iIKsbh48hAtJqt7WIlBMyyo= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:01 2026 by rpki-client