$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa File: 8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa (raw, json) Hash identifier: ZGmnYUMY5SMqplVQTlx1khJyjE7XJvz1N5cw03v849U= Subject key identifier: 32:68:7F:E9:56:38:DD:AA:4D:FA:A7:72:6D:6E:28:CA:A8:DE:EB:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B8BC0B494B406B5E15060 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa Signing time: Tue 19 Aug 2025 17:39:37 +0000 ROA not before: Tue 19 Aug 2025 17:39:37 +0000 ROA not after: Mon 17 Nov 2025 18:39:37 +0000 asID: 31898 IP address blocks: 152.70.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:8b:c0:b4:94:b4:06:b5:e1:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:37 2025 GMT Not After : Nov 17 18:39:37 2025 GMT Subject: CN=fa3c495f-d5a9-4da5-a654-55bf95aa5e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:c1:58:63:9c:58:09:a7:37:dc:8c:20:a1: f6:ef:9c:18:d7:72:90:7e:dc:18:0f:7e:ee:df:8e: b6:1a:ff:1c:74:23:b1:2a:66:22:db:b8:c2:94:4d: 15:93:28:ff:1e:e8:ec:b5:5b:df:74:4b:43:5b:df: b9:f3:05:5c:ca:66:8f:86:59:96:47:51:49:fc:0f: e5:7e:11:50:64:bb:62:b3:62:83:d2:4a:51:e6:03: 88:97:78:c7:3e:c2:54:56:57:4a:f3:54:f7:7c:c2: ca:c7:2e:90:62:14:4f:b1:1b:dc:19:f6:18:c7:25: fe:3f:1b:a5:c6:c6:46:f3:66:9a:c6:0e:64:1a:e0: e2:cd:e3:16:fa:6a:1a:28:de:ef:b6:96:18:cd:0c: bc:1a:9b:5c:db:ca:58:0d:a2:79:af:b5:f2:af:1d: 7e:ae:9e:bc:6f:a0:0a:a9:ac:a4:81:1f:6b:34:dd: 13:c2:a0:bb:bf:5f:87:e6:4f:26:f0:7f:a6:c6:43: 8f:fc:d3:d1:c9:e1:fc:b0:fc:7c:a5:bf:31:77:b2: 4b:c6:26:a9:79:87:f3:fd:d1:37:0c:cf:c9:a5:c0: 47:66:31:f1:5c:f6:35:a8:99:a2:03:4a:0c:83:e5: d7:7c:59:b9:f9:a2:de:2a:95:55:a3:f6:6e:41:3a: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:68:7F:E9:56:38:DD:AA:4D:FA:A7:72:6D:6E:28:CA:A8:DE:EB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e7:c5:a4:66:1e:6c:d9:fb:7b:8b:ab:dd:14:7c:7e:bc:12: 0d:37:34:32:2d:9c:8a:79:2e:87:6e:79:f3:88:a1:a4:04:f7: 0a:59:79:07:62:69:21:60:ac:d7:b5:c4:33:22:2a:39:70:ec: 88:e0:21:d4:d1:72:fd:05:8e:2a:f2:6f:2e:40:6d:17:0c:35: 27:c4:1d:d1:1f:07:b8:7d:ba:19:6a:d5:12:45:ae:a4:6f:b6: 2f:ed:de:21:54:e5:46:5c:91:e9:33:3f:a4:1f:1b:2b:8b:02: 03:d1:f9:68:7f:a6:aa:77:54:97:47:35:0c:86:3a:de:65:96: 73:8a:b0:ee:98:8b:72:08:d1:f8:96:1a:82:85:1a:10:fb:c4: 22:64:18:d8:41:15:9c:7e:25:cd:2e:cd:f9:c7:b4:3a:9a:8a: 56:0b:dd:98:22:8a:be:72:6e:61:da:8b:16:f8:5c:5f:57:9b: 70:1f:44:0c:e4:bc:b1:7c:19:9f:a1:95:40:26:e2:7c:0c:be: e7:e8:13:c0:57:c0:8f:2b:b8:f1:17:16:41:ef:69:70:ae:31: 59:f5:88:d6:e4:7a:45:82:1c:0d:5a:ce:eb:5f:b9:65:84:a4: 90:71:61:59:83:d6:05:23:88:76:21:04:6b:38:9d:93:c2:e1: b2:22:bd:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG4vAtJS0BrXhUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkzN1oXDTI1MTExNzE4MzkzN1owLzEtMCsGA1UEAxMk ZmEzYzQ5NWYtZDVhOS00ZGE1LWE2NTQtNTViZjk1YWE1ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GTBWGOcWAmnN9yMIKH275wY13KQftwYD37u 3462Gv8cdCOxKmYi27jClE0Vkyj/HujstVvfdEtDW9+58wVcymaPhlmWR1FJ/A/l fhFQZLtis2KD0kpR5gOIl3jHPsJUVldK81T3fMLKxy6QYhRPsRvcGfYYxyX+Pxul xsZG82aaxg5kGuDizeMW+moaKN7vtpYYzQy8Gptc28pYDaJ5r7Xyrx1+rp68b6AK qaykgR9rNN0TwqC7v1+H5k8m8H+mxkOP/NPRyeH8sPx8pb8xd7JLxiapeYfz/dE3 DM/JpcBHZjHxXPY1qJmiA0oMg+XXfFm5+aLeKpVVo/ZuQTpQYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJof+lWON2qTfqncm1uKMqo3uuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODAzNWYwNGUtN2M1MC0z NGYwLWE4OTUtNmM1ZjkyYWNhMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3nxaRmHmzZ+3uLq90UfH68Eg03NDItnIp5LoduefOIoaQE9wpZeQdi aSFgrNe1xDMiKjlw7IjgIdTRcv0Fjiryby5AbRcMNSfEHdEfB7h9uhlq1RJFrqRv ti/t3iFU5UZckekzP6QfGyuLAgPR+Wh/pqp3VJdHNQyGOt5llnOKsO6Yi3II0fiW GoKFGhD7xCJkGNhBFZx+Jc0uzfnHtDqailYL3Zgiir5ybmHaixb4XF9Xm3AfRAzk vLF8GZ+hlUAm4nwMvufoE8BXwI8ruPEXFkHvaXCuMVn1iNbkekWCHA1azutfuWWE pJBxYVmD1gUjiHYhBGs4nZPC4bIivS4= -----END CERTIFICATE-----Generated at Wed Aug 20 03:31:31 2025 by rpki-client