$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa File: e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa (raw, json) Hash identifier: G6IT4rVv0fTqV0G30v1XBnehbk5ftI2zK0dI3SBzAZY= Subject key identifier: 72:5E:18:E2:F7:7B:F9:69:60:98:C1:EE:D5:E3:2C:91:54:89:CA:11 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3EAE2B53C5B2714815BF14 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 204.216.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:ae:2b:53:c5:b2:71:48:15:bf:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=4ee30420-90f1-49a7-baba-0b22427f23cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:2d:51:42:25:44:9f:0b:17:af:d3:73:49: 88:6d:ff:1a:98:c5:ee:5c:0e:14:83:3e:12:96:d7: 02:a4:59:76:a6:24:c6:a2:ed:7f:19:5c:74:ca:c0: fc:96:5e:cb:d9:47:9d:6b:7a:86:13:28:cb:b9:aa: 01:18:41:a6:0d:30:98:d7:c3:9d:79:09:ea:c0:25: 4d:39:a8:08:72:6a:d3:b3:58:ab:62:77:31:4f:67: d4:41:eb:10:36:88:30:0a:3b:2d:e6:0a:05:c2:44: 1c:02:d3:36:95:71:2c:c2:3e:99:53:1d:ff:8b:ca: 8e:fb:a4:e1:6d:78:38:da:86:a0:6b:47:9c:af:a9: 7a:1a:a7:c4:e7:76:38:5e:31:a4:2f:cf:ee:38:38: 21:55:16:ce:eb:47:8b:9c:49:91:27:c7:37:c5:58: bf:7e:30:10:47:17:0c:7c:22:3e:a8:7d:1e:a5:4a: 69:e7:71:40:99:93:5d:53:f8:c7:d5:8e:f9:0a:df: 6c:c3:99:e4:d3:60:93:d6:0f:eb:b7:de:1c:95:10: 12:43:4d:68:3b:fa:48:4e:0d:92:eb:cc:6c:41:14: 32:c9:1a:15:15:cc:5c:c6:23:9b:8d:4e:09:a2:2a: d9:55:53:54:b9:43:20:b5:15:b3:1b:ae:c5:db:f8: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:18:E2:F7:7B:F9:69:60:98:C1:EE:D5:E3:2C:91:54:89:CA:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9f:0a:1e:be:da:d5:d0:fc:f4:71:7a:50:a5:ca:69:04:46: a7:c0:7e:9a:6e:11:4b:28:29:92:b6:e1:88:86:f7:df:a9:27: d4:57:21:d1:a9:27:c2:23:f4:74:5e:bc:30:f4:ec:42:ff:0e: b2:a0:ab:87:20:e6:5c:6b:fd:5a:21:b1:02:4c:ae:9f:40:f1: b2:48:e7:ae:f9:cf:f9:4e:8c:60:b6:4d:2f:43:c9:51:53:93: db:c5:c6:4e:b5:33:3b:9f:dd:0e:fb:bb:3a:c4:8f:95:a5:48: 5b:57:a9:27:7c:15:84:fc:20:a2:06:55:1e:28:d3:bb:42:9d: f1:70:17:18:25:1d:bc:4d:a3:2f:bb:cf:e0:a1:b9:16:83:9e: 2f:95:b1:a1:69:bf:f4:6a:03:e2:81:0e:ff:7a:66:5f:c7:fd: 5c:6c:c6:62:01:14:8d:79:37:02:34:9d:12:a1:17:ff:ec:ae: 0f:26:47:7c:fd:39:18:51:a2:f7:cd:1b:e9:eb:fe:64:4e:d7: ec:b9:2b:47:c0:e7:80:b9:e6:cc:99:54:ed:43:f5:67:ca:ab: 52:66:5d:02:e2:3f:0e:62:b0:8b:dd:31:09:4a:e1:70:13:0b: 6a:78:3e:b1:83:c3:94:43:fb:fd:32:e6:ea:f7:4f:0d:ac:28: f2:4b:aa:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPq4rU8WycUgVvxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NGVlMzA0MjAtOTBmMS00OWE3LWJhYmEtMGIyMjQyN2YyM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVAtUUIlRJ8LF6/Tc0mIbf8amMXuXA4Ugz4S ltcCpFl2piTGou1/GVx0ysD8ll7L2Ueda3qGEyjLuaoBGEGmDTCY18OdeQnqwCVN OagIcmrTs1irYncxT2fUQesQNogwCjst5goFwkQcAtM2lXEswj6ZUx3/i8qO+6Th bXg42oaga0ecr6l6GqfE53Y4XjGkL8/uODghVRbO60eLnEmRJ8c3xVi/fjAQRxcM fCI+qH0epUpp53FAmZNdU/jH1Y75Ct9sw5nk02CT1g/rt94clRASQ01oO/pITg2S 68xsQRQyyRoVFcxcxiObjU4JoirZVVNUuUMgtRWzG67F2/in1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJeGOL3e/lpYJjB7tXjLJFUicoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTY5NzBkN2YtNjVjNy0z ZjVmLTg2YzQtOWRjYTNhMjcwZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGfCh6+2tXQ/PRxelClymkERqfAfppuEUsoKZK24YiG99+pJ9RXIdGp J8Ij9HRevDD07EL/DrKgq4cg5lxr/VohsQJMrp9A8bJI5675z/lOjGC2TS9DyVFT k9vFxk61Mzuf3Q77uzrEj5WlSFtXqSd8FYT8IKIGVR4o07tCnfFwFxglHbxNoy+7 z+ChuRaDni+VsaFpv/RqA+KBDv96Zl/H/VxsxmIBFI15NwI0nRKhF//srg8mR3z9 ORhRovfNG+nr/mRO1+y5K0fA54C55syZVO1D9WfKq1JmXQLiPw5isIvdMQlK4XAT C2p4PrGDw5RD+/0y5ur3Tw2sKPJLqsA= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:30 2026 by rpki-client