$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88d4b247-3902-310b-8300-2a28d16b3a6d.roa File: 88d4b247-3902-310b-8300-2a28d16b3a6d.roa (raw, json) Hash identifier: Ety+HneBJc+2cvmZuzwfYRXdwKg/13rvVLP9Xj1ZM5E= Subject key identifier: AB:12:E5:EB:21:96:99:13:31:2A:39:DC:98:A8:09:4E:FD:01:FE:71 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B912BF577709DCB88DB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88d4b247-3902-310b-8300-2a28d16b3a6d.roa Signing time: Tue 19 Aug 2025 17:39:39 +0000 ROA not before: Tue 19 Aug 2025 17:39:39 +0000 ROA not after: Mon 17 Nov 2025 18:39:39 +0000 asID: 31898 IP address blocks: 152.70.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:91:2b:f5:77:70:9d:cb:88:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:39 2025 GMT Not After : Nov 17 18:39:39 2025 GMT Subject: CN=7933d796-3b55-4770-ac10-dfeaeaf845fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b1:0b:9d:23:46:55:2a:3d:e6:37:47:5f:79: 02:a8:03:e8:8c:a8:62:99:62:61:5c:1d:d4:83:e2: 00:4e:e4:e8:95:11:da:4d:77:77:c6:64:51:59:5c: 4d:dc:15:b9:6b:0c:98:9d:97:94:1d:27:8e:ce:49: 53:e6:3b:b0:3d:a1:e7:2f:b9:84:e2:d6:20:58:f5: 01:f4:e6:69:23:37:a7:f2:99:07:12:e4:e1:97:47: 59:dd:32:04:39:71:92:81:08:70:79:f2:2c:72:b8: 2e:ec:db:90:35:b2:bc:5e:e7:c7:34:00:57:2e:e2: 3c:77:ed:37:3c:12:68:44:25:96:da:19:57:9f:7a: 0f:18:60:58:b2:97:96:d0:54:7e:1c:41:c0:74:d4: 2c:72:e3:cb:41:15:92:e9:09:0e:da:3f:6b:b9:30: 49:b2:3f:6c:f6:29:78:aa:66:7f:52:3f:e7:b6:1f: 9c:be:cc:d6:e3:cb:18:c4:bf:33:62:01:f8:ed:b9: e5:50:0b:ab:9f:bc:3d:1a:57:4c:58:8e:31:98:a9: 1d:08:50:29:e0:d9:d8:82:9f:77:b2:0a:6d:c5:9b: 22:15:6b:fd:e7:f1:9a:3b:91:bd:87:ca:fb:56:f1: b2:c8:42:85:0f:e1:3f:96:07:44:19:49:fc:85:b8: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:12:E5:EB:21:96:99:13:31:2A:39:DC:98:A8:09:4E:FD:01:FE:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/88d4b247-3902-310b-8300-2a28d16b3a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e1:b1:73:e5:a3:f5:6d:74:f3:d8:0a:19:17:25:a8:22:9d: f8:6b:40:a2:7d:51:bd:c2:fa:28:9a:21:90:2f:14:ce:55:09: 3e:3b:ec:42:31:3a:7b:aa:a7:98:85:51:32:a7:0b:93:e9:ea: 26:e9:fc:14:ff:04:7e:52:20:e8:d9:60:70:70:fc:fe:62:f6: fd:93:90:15:cc:c5:9f:3f:01:db:19:27:b6:22:28:99:2f:c3: 84:1f:c2:3f:97:40:13:c0:e2:23:8d:2f:67:70:fa:10:a2:7c: 1e:5a:fc:24:09:30:20:51:be:a3:1a:d5:21:60:06:0e:0c:38: 9e:f0:6a:fd:7b:01:02:aa:91:8e:94:8d:47:ae:dd:91:90:45: 90:d1:c0:58:91:9b:5b:17:e9:db:cd:65:e1:30:45:36:ed:6d: 69:26:4a:c1:90:2a:96:89:b7:f4:7c:b7:7c:ec:79:a6:e1:c0: 2e:83:c8:6a:47:55:79:26:ee:f1:da:16:8c:d3:12:a1:d2:ed: db:72:19:8b:61:ed:9a:3e:b7:9c:90:31:23:d7:ff:62:2b:3f: cf:fe:bd:ff:28:74:05:24:9f:8e:a6:98:f4:4d:65:f0:b8:d4: 5e:04:09:d1:c9:f2:6f:d2:01:37:94:88:2c:81:7b:1a:ad:ef: 92:95:d3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG5Er9XdwncuI2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkzOVoXDTI1MTExNzE4MzkzOVowLzEtMCsGA1UEAxMk NzkzM2Q3OTYtM2I1NS00NzcwLWFjMTAtZGZlYWVhZjg0NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbELnSNGVSo95jdHX3kCqAPojKhimWJhXB3U g+IATuTolRHaTXd3xmRRWVxN3BW5awyYnZeUHSeOzklT5juwPaHnL7mE4tYgWPUB 9OZpIzen8pkHEuThl0dZ3TIEOXGSgQhwefIscrgu7NuQNbK8XufHNABXLuI8d+03 PBJoRCWW2hlXn3oPGGBYspeW0FR+HEHAdNQscuPLQRWS6QkO2j9ruTBJsj9s9il4 qmZ/Uj/nth+cvszW48sYxL8zYgH47bnlUAurn7w9GldMWI4xmKkdCFAp4NnYgp93 sgptxZsiFWv95/GaO5G9h8r7VvGyyEKFD+E/lgdEGUn8hbiTjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsS5eshlpkTMSo53JioCU79Af5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODhkNGIyNDctMzkwMi0z MTBiLTgzMDAtMmEyOGQxNmIzYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmEZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLhsXPlo/VtdPPYChkXJaginfhrQKJ9Ub3C+iiaIZAvFM5VCT477EIx Onuqp5iFUTKnC5Pp6ibp/BT/BH5SIOjZYHBw/P5i9v2TkBXMxZ8/AdsZJ7YiKJkv w4Qfwj+XQBPA4iONL2dw+hCifB5a/CQJMCBRvqMa1SFgBg4MOJ7wav17AQKqkY6U jUeu3ZGQRZDRwFiRm1sX6dvNZeEwRTbtbWkmSsGQKpaJt/R8t3zseabhwC6DyGpH VXkm7vHaFozTEqHS7dtyGYth7Zo+t5yQMSPX/2IrP8/+vf8odAUkn46mmPRNZfC4 1F4ECdHJ8m/SATeUiCyBexqt75KV07w= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:19 2025 by rpki-client