$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3152561-490c-38ed-b83a-4cb3a39bd654.roa File: c3152561-490c-38ed-b83a-4cb3a39bd654.roa (raw, json) Hash identifier: eqju9CHqod0YIq2tB+hhRqkls6VkdO9wN78kQ87m9RA= Subject key identifier: FA:FF:95:E1:28:FF:DE:4E:C0:8B:81:89:5C:96:D7:2C:93:F4:02:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A101116942BBED967DA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3152561-490c-38ed-b83a-4cb3a39bd654.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 152.70.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:10:11:16:94:2b:be:d9:67:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=eee28634-2295-4bc5-bc44-8cc0b15d3133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:b2:2d:83:6f:6c:94:d1:7e:de:ac:f8:82: c0:4c:df:32:fe:1f:4c:0d:29:90:00:c5:c7:ec:e5: 2d:7e:1b:86:3e:86:5c:e1:48:4b:50:a5:5e:36:4c: 08:32:98:a1:27:03:ac:ba:2a:a7:f4:46:cc:e3:dc: 4b:7e:ee:da:1a:e3:25:db:bf:70:7e:9c:76:bb:2b: ed:6a:ea:20:6c:68:a9:e9:65:07:41:71:ea:f1:a6: 24:80:68:87:39:4f:b7:96:b6:f7:64:38:07:c6:7d: 4c:2d:b4:4a:e0:5e:f6:43:2e:7d:2c:d2:47:cb:b5: 61:a5:e9:d0:39:43:45:f4:68:bf:15:7c:04:2b:2d: 0c:c5:03:64:5b:e4:2c:92:17:06:c1:b6:7f:ff:8c: 69:36:d2:d5:28:71:5b:34:a1:38:cd:56:08:d5:c7: de:89:b8:c6:07:8b:af:fd:3d:0f:d0:d6:43:00:5f: d3:2a:e0:27:24:95:6f:8d:5a:9f:e3:0e:dd:25:dd: 2a:12:47:7b:7d:03:bd:6e:27:4e:1f:6c:9b:c2:bd: 48:e6:d5:69:89:00:5d:e7:3b:09:42:8f:31:ae:13: 88:97:66:94:a2:94:aa:ef:2c:84:8a:d6:e6:61:0f: f9:08:6b:0c:e6:5f:fc:23:10:60:ec:e0:76:7c:ab: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:95:E1:28:FF:DE:4E:C0:8B:81:89:5C:96:D7:2C:93:F4:02:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3152561-490c-38ed-b83a-4cb3a39bd654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:02:9d:8a:25:f8:df:10:15:3a:e4:2b:45:47:b3:2c:ff:4d: d6:82:90:88:12:34:39:ba:00:cd:ff:e9:16:d3:70:de:cf:0c: b1:2f:22:1d:19:79:34:10:f9:d7:95:b2:b1:4e:45:00:07:4b: 2f:86:3c:5c:20:2d:45:fe:c7:02:2c:f3:6f:a6:86:90:2d:6b: 10:90:85:b2:c3:4e:db:5f:7c:42:e7:a7:11:99:5f:d1:be:ba: 9c:d5:cf:d1:c6:99:e2:2c:1c:5a:89:6c:64:bb:bd:bb:93:19: 1d:83:cb:15:ca:ad:8f:13:8d:e2:37:0f:70:b6:8d:ad:c0:4a: 2e:17:b0:01:42:e4:37:e1:ad:59:72:6f:25:e8:b7:27:59:92: 55:fd:f6:a5:af:f4:46:40:e1:eb:c4:09:a6:56:7a:57:d9:f9: 11:a2:44:45:5c:a4:04:03:a0:5d:bb:5d:07:d5:d8:ff:11:6b: 6f:18:df:c1:45:06:1c:7e:00:ef:37:65:ed:c5:f7:56:03:88: b3:3c:0c:72:9a:d8:90:2c:0d:83:5f:17:3d:e5:5d:ef:d3:ab: 32:6c:2f:b7:7d:af:30:1f:1e:db:26:e6:26:f2:df:d2:2c:51: 8a:49:92:bc:6d:df:eb:8a:c1:18:9b:27:30:b1:45:3f:aa:17: aa:d5:a5:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChARFpQrvtln2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZWVlMjg2MzQtMjI5NS00YmM1LWJjNDQtOGNjMGIxNWQzMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKWyLYNvbJTRft6s+ILATN8y/h9MDSmQAMXH 7OUtfhuGPoZc4UhLUKVeNkwIMpihJwOsuiqn9EbM49xLfu7aGuMl279wfpx2uyvt auogbGip6WUHQXHq8aYkgGiHOU+3lrb3ZDgHxn1MLbRK4F72Qy59LNJHy7VhpenQ OUNF9Gi/FXwEKy0MxQNkW+QskhcGwbZ//4xpNtLVKHFbNKE4zVYI1cfeibjGB4uv /T0P0NZDAF/TKuAnJJVvjVqf4w7dJd0qEkd7fQO9bidOH2ybwr1I5tVpiQBd5zsJ Qo8xrhOIl2aUopSq7yyEitbmYQ/5CGsM5l/8IxBg7OB2fKvSDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr/leEo/95OwIuBiVyW1yyT9AIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMxNTI1NjEtNDkwYy0z OGVkLWI4M2EtNGNiM2EzOWJkNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmEYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgCnYol+N8QFTrkK0VHsyz/TdaCkIgSNDm6AM3/6RbTcN7PDLEvIh0Z eTQQ+deVsrFORQAHSy+GPFwgLUX+xwIs82+mhpAtaxCQhbLDTttffELnpxGZX9G+ upzVz9HGmeIsHFqJbGS7vbuTGR2DyxXKrY8TjeI3D3C2ja3ASi4XsAFC5DfhrVly byXotydZklX99qWv9EZA4evECaZWelfZ+RGiREVcpAQDoF27XQfV2P8Ra28Y38FF Bhx+AO83Ze3F91YDiLM8DHKa2JAsDYNfFz3lXe/TqzJsL7d9rzAfHtsm5iby39Is UYpJkrxt3+uKwRibJzCxRT+qF6rVpRc= -----END CERTIFICATE-----Generated at Mon Jul 13 02:54:37 2026 by rpki-client