$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa File: 96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa (raw, json) Hash identifier: 2rkPj6b6tDftHHoxdPMqbZA9LNGzvGaT0ZpozgHDBIc= Subject key identifier: 7A:FC:27:02:62:5A:E2:C8:55:F0:21:0E:3C:77:A0:CF:B8:40:F0:D0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA7873576C58659254E956C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 170.52.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:35:76:c5:86:59:25:4e:95:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=867fdf17-37e1-4126-b357-cf84b74cf01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0c:80:b6:d2:24:d1:6b:25:0d:74:29:fd:20: 0f:ee:1e:5d:88:95:e6:95:53:2c:39:b6:03:c0:e3: 8c:3f:75:99:53:b3:a8:d4:c9:aa:e5:bb:0f:56:d2: ad:8a:c7:84:d8:75:dd:3f:3f:62:4a:5e:b6:e8:a3: 38:0c:1a:3b:91:d8:6f:11:55:94:0e:f4:a7:51:42: 87:42:55:ce:a6:a3:84:aa:95:43:c3:30:09:24:2b: 7e:6a:a4:9a:1d:1f:95:df:0d:73:fe:fb:6e:5d:e5: 94:1f:3e:a3:61:9a:71:09:d3:88:a0:f2:45:8a:07: 2e:35:26:0a:71:98:93:ba:fc:36:4c:b9:46:a8:4e: 23:dc:32:c1:ba:fc:78:50:63:ab:20:98:68:ee:b3: 5a:16:78:57:66:79:7f:c9:b6:ca:8d:b6:18:69:e4: 60:27:aa:99:d4:3e:6e:c8:87:ad:9f:e5:bc:e7:d3: bb:85:c5:a0:b6:67:e5:90:cd:47:42:a2:40:b0:6e: 4d:03:d8:24:3c:ca:6a:65:7d:b9:3a:a2:8d:34:c7: 33:3c:29:a8:15:22:b6:91:9d:69:c3:f9:14:96:01: 1d:96:e9:b5:2d:c3:03:d1:94:53:f3:03:1d:5c:86: e2:09:ce:87:c9:f3:53:a2:d1:c2:f0:d0:9f:9c:61: d8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FC:27:02:62:5A:E2:C8:55:F0:21:0E:3C:77:A0:CF:B8:40:F0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96205b1d-b1c3-30a6-be77-fd63b68ca4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.52.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7c:00:3c:22:44:6f:28:da:f6:24:72:62:2f:4b:38:19:20: 1e:49:3f:7c:3f:1f:37:9f:39:19:b3:25:73:b3:79:cc:15:e0: 49:ef:69:5a:b0:3e:aa:ef:ba:25:d7:42:6c:f0:a7:c8:08:19: 28:d5:08:d6:bf:1d:6f:05:93:b9:af:b7:fe:1f:86:3a:d2:df: 84:4c:3f:05:ed:e9:83:7c:4f:a7:7d:f4:ba:dd:3e:a8:f2:9e: eb:80:8c:3c:73:58:43:01:8e:99:b1:34:02:29:a2:a2:c5:53: 14:ca:ec:b3:d3:7d:00:a5:eb:db:b6:60:1d:88:9c:71:21:09: 89:5f:1e:96:44:ee:a4:75:2d:d1:4f:91:94:f3:e4:1e:0e:e7: 6f:4e:48:92:98:48:0c:ce:a5:30:3b:86:a1:b3:89:40:81:82: 74:6c:b6:24:5c:93:75:70:21:2a:d5:88:6b:34:c5:5f:2e:82: 5e:c1:4b:17:1d:03:97:6d:28:dd:b1:d2:7c:b8:e3:30:23:62: 31:70:62:14:7c:ed:71:31:58:ff:77:98:95:98:4b:40:c3:f7: f1:54:db:00:fe:6a:05:fb:f7:74:6c:5e:52:62:25:33:52:20: 62:9f:7c:1c:af:fc:0a:00:f9:3a:b2:44:8d:54:6c:1c:f1:54: b7:1b:3a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzV2xYZZJU6VbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODY3ZmRmMTctMzdlMS00MTI2LWIzNTctY2Y4NGI3NGNmMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgyAttIk0WslDXQp/SAP7h5diJXmlVMsObYD wOOMP3WZU7Oo1Mmq5bsPVtKtiseE2HXdPz9iSl626KM4DBo7kdhvEVWUDvSnUUKH QlXOpqOEqpVDwzAJJCt+aqSaHR+V3w1z/vtuXeWUHz6jYZpxCdOIoPJFigcuNSYK cZiTuvw2TLlGqE4j3DLBuvx4UGOrIJho7rNaFnhXZnl/ybbKjbYYaeRgJ6qZ1D5u yIetn+W859O7hcWgtmflkM1HQqJAsG5NA9gkPMpqZX25OqKNNMczPCmoFSK2kZ1p w/kUlgEdlum1LcMD0ZRT8wMdXIbiCc6HyfNTotHC8NCfnGHYKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr8JwJiWuLIVfAhDjx3oM+4QPDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTYyMDViMWQtYjFjMy0z MGE2LWJlNzctZmQ2M2I2OGNhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ8ADwiRG8o2vYkcmIvSzgZIB5JP3w/HzefORmzJXOzecwV4EnvaVqw PqrvuiXXQmzwp8gIGSjVCNa/HW8Fk7mvt/4fhjrS34RMPwXt6YN8T6d99LrdPqjy nuuAjDxzWEMBjpmxNAIpoqLFUxTK7LPTfQCl69u2YB2InHEhCYlfHpZE7qR1LdFP kZTz5B4O529OSJKYSAzOpTA7hqGziUCBgnRstiRck3VwISrViGs0xV8ugl7BSxcd A5dtKN2x0ny44zAjYjFwYhR87XExWP93mJWYS0DD9/FU2wD+agX793RsXlJiJTNS IGKffByv/AoA+TqyRI1UbBzxVLcbOlo= -----END CERTIFICATE-----Generated at Thu Aug 27 14:15:43 2026 by rpki-client