$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa File: ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa (raw, json) Hash identifier: Y2rXiK0VEwKviohCIpqQL4SAeTrkJhROxcPvE1I66J8= Subject key identifier: BD:8B:0F:CB:AF:40:8A:BC:49:A6:88:C3:31:D3:8A:0B:A3:72:4E:E2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6DD4D4D8A4BBA4CA8ECE0E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 152.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:d4:d8:a4:bb:a4:ca:8e:ce:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=f611d041-af29-4483-8ee5-975afe9c84c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:e2:9b:53:e7:dc:a9:3a:81:48:30:e0:78: b5:b6:07:8c:34:09:23:18:29:70:a5:81:40:10:90: c0:33:58:59:37:22:47:cb:6c:11:80:f7:83:4a:21: e6:50:89:4c:52:7a:fd:c1:0a:d6:35:1f:70:03:0d: bf:33:10:f5:8d:40:6e:e1:c1:af:9a:1f:be:91:22: aa:4c:54:3b:94:1b:e3:10:0d:69:c5:80:fb:47:57: 87:1f:4e:ee:07:56:1c:3c:5b:e0:84:43:d9:ff:56: 8e:85:ce:fb:0f:d6:74:44:bd:7a:7e:21:f6:e6:e8: 02:d3:00:2e:03:e8:ee:6e:cb:0e:eb:9d:89:aa:b3: 86:ce:9e:13:a5:81:0c:4e:7f:58:49:f5:9e:48:20: 9e:89:94:71:45:7c:e2:6e:0a:bf:4c:c0:0e:82:ff: a8:77:84:06:c2:99:fc:3f:e5:fd:6d:ad:c5:7c:20: f1:42:71:aa:ca:84:7b:55:eb:ef:b2:64:8e:01:31: 15:fd:d9:4e:5f:e8:29:6d:78:63:84:1d:c8:2e:69: d3:8a:3d:f7:6d:1b:01:05:6d:53:20:08:0e:7e:62: bd:16:b6:47:75:b8:7d:0f:cb:7f:db:44:a2:f3:da: be:d8:e4:b0:04:51:ab:7e:b3:ab:db:49:d2:92:a2: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:0F:CB:AF:40:8A:BC:49:A6:88:C3:31:D3:8A:0B:A3:72:4E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba5fc621-cdb2-36cc-873b-dcf6f457d80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e0:ad:ae:eb:26:6b:f6:52:d9:22:0b:37:d4:16:02:81:8f: 37:d7:27:0f:a2:12:bc:a0:c6:e1:f7:97:4f:cc:00:f5:0c:65: ca:f5:b4:cb:d9:59:89:1d:c1:66:77:57:af:86:3e:7c:51:dc: 92:d1:f6:7e:51:2a:f6:62:32:65:80:dc:18:ba:39:5d:f0:d0: e9:8c:71:6a:d4:02:09:3c:78:6f:34:06:5f:d1:f9:47:05:98: e6:87:d0:d5:fc:28:56:0e:6c:60:b3:5c:5c:a5:24:ff:01:ff: 9c:2a:a0:55:99:4d:04:f3:d3:f9:e2:a3:95:22:a4:8c:1e:57: 43:77:ec:8c:a1:cf:6a:ac:2b:a1:22:fb:17:0f:20:de:69:c2: cf:b2:0c:18:01:a5:b7:83:58:1b:48:68:e3:b5:a8:5a:1e:49: c1:20:a4:bc:9e:96:8a:69:6d:e6:47:1a:e8:a2:e3:60:bf:f9: 9c:4f:d6:77:0d:33:84:53:fd:6a:dc:e9:8c:25:04:57:95:0c: 7b:c7:c6:ef:1a:07:49:f6:b8:07:7c:ef:ed:85:ca:5f:2c:c3: 54:aa:70:19:56:8f:85:2e:17:69:0c:81:a3:12:1a:cc:bd:42: 54:59:2c:ab:b4:fc:d0:80:31:e6:ca:4d:56:62:5d:6d:ff:48: 7b:cd:3e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1NTYpLukyo7ODoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk ZjYxMWQwNDEtYWYyOS00NDgzLThlZTUtOTc1YWZlOWM4NGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjurim1Pn3Kk6gUgw4Hi1tgeMNAkjGClwpYFA EJDAM1hZNyJHy2wRgPeDSiHmUIlMUnr9wQrWNR9wAw2/MxD1jUBu4cGvmh++kSKq TFQ7lBvjEA1pxYD7R1eHH07uB1YcPFvghEPZ/1aOhc77D9Z0RL16fiH25ugC0wAu A+jubssO652JqrOGzp4TpYEMTn9YSfWeSCCeiZRxRXzibgq/TMAOgv+od4QGwpn8 P+X9ba3FfCDxQnGqyoR7VevvsmSOATEV/dlOX+gpbXhjhB3ILmnTij33bRsBBW1T IAgOfmK9FrZHdbh9D8t/20Si89q+2OSwBFGrfrOr20nSkqLuNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2LD8uvQIq8SaaIwzHTigujck7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE1ZmM2MjEtY2RiMi0z NmNjLTg3M2ItZGNmNmY0NTdkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbgra7rJmv2UtkiCzfUFgKBjzfXJw+iErygxuH3l0/MAPUMZcr1tMvZ WYkdwWZ3V6+GPnxR3JLR9n5RKvZiMmWA3Bi6OV3w0OmMcWrUAgk8eG80Bl/R+UcF mOaH0NX8KFYObGCzXFylJP8B/5wqoFWZTQTz0/nio5UipIweV0N37Iyhz2qsK6Ei +xcPIN5pws+yDBgBpbeDWBtIaOO1qFoeScEgpLyeloppbeZHGuii42C/+ZxP1ncN M4RT/Wrc6YwlBFeVDHvHxu8aB0n2uAd87+2Fyl8sw1SqcBlWj4UuF2kMgaMSGsy9 QlRZLKu0/NCAMebKTVZiXW3/SHvNPqg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:44 2026 by rpki-client