$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d5eb437-25cb-3acb-95d7-6271dfce2862.roa File: 5d5eb437-25cb-3acb-95d7-6271dfce2862.roa (raw, json) Hash identifier: mXxJcdimYqv1yBIR83Od8QW5+grL/OvOnOZGGzT70AE= Subject key identifier: 03:8E:3C:E4:50:06:79:A4:31:3A:65:98:B9:B5:D6:64:8E:9B:0C:7C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C83441F450B9A02B4C2000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d5eb437-25cb-3acb-95d7-6271dfce2862.roa Signing time: Mon 25 Aug 2025 17:00:26 +0000 ROA not before: Mon 25 Aug 2025 17:00:26 +0000 ROA not after: Sun 23 Nov 2025 18:00:26 +0000 asID: 31898 IP address blocks: 134.70.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:34:41:f4:50:b9:a0:2b:4c:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:26 2025 GMT Not After : Nov 23 18:00:26 2025 GMT Subject: CN=2da0a239-9d65-4b21-9b45-79b3463e01af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:57:1a:b4:36:80:86:50:03:2a:56:5d:bc: 8d:43:dd:3b:01:ce:86:ab:75:e1:45:bf:1f:54:96: 66:da:cb:27:bf:d5:82:8d:14:21:f0:12:e5:bf:36: 42:4f:5e:35:1d:37:80:7e:47:d3:e7:5a:f5:2a:51: 21:48:35:7e:c1:6f:14:c3:af:7d:00:db:ae:42:c1: 27:13:67:3f:a0:bb:b4:6b:4a:41:e5:e7:fe:53:2e: 4e:a5:5e:8f:06:3b:e6:53:47:b4:14:7d:dc:f0:4a: 05:db:9f:dc:ec:33:c1:72:11:ee:b1:ed:86:04:60: 65:41:72:27:cc:94:17:00:bb:c6:96:cd:cf:14:72: b9:f4:5b:b3:95:b6:f4:e7:8e:a1:e8:7a:29:bb:99: 38:ef:19:39:a5:20:4e:db:2b:c3:e9:b8:74:c8:eb: 5d:fd:42:eb:98:4d:92:9e:a2:07:02:64:3b:16:0b: 59:24:86:01:60:68:5b:3b:ec:f8:4e:c7:01:d1:e1: 4d:cb:64:a8:ba:c9:39:7e:50:a2:3d:1f:be:a0:34: d2:de:61:be:79:ed:99:87:0b:3a:3b:d4:ac:11:7c: 8d:f2:3a:58:f2:d5:53:88:c2:2a:2d:ea:f1:ee:2e: 75:e5:f9:0b:04:ba:a1:3f:4b:1d:63:5d:5a:9e:b2: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8E:3C:E4:50:06:79:A4:31:3A:65:98:B9:B5:D6:64:8E:9B:0C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5d5eb437-25cb-3acb-95d7-6271dfce2862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:99:a4:13:07:70:a4:de:cf:5f:ce:a2:ff:73:c3:db:2e:b8: a0:87:f0:01:2b:f1:04:b4:df:37:39:6f:b0:e4:27:f5:27:fe: 4e:60:f0:02:d2:32:70:e9:55:e1:4d:93:cf:7d:98:a5:ab:ab: 77:c4:9f:e8:92:8a:5a:a2:5e:63:83:52:1c:e6:34:9b:2d:24: 72:f2:0f:6d:a8:14:49:fd:86:34:7f:7f:65:35:b9:dd:11:ba: d8:8d:d0:c6:4f:77:85:ff:eb:8f:f5:0a:48:ea:62:f3:46:fd: 59:23:c1:5a:76:06:f2:8a:3c:fc:94:7a:5a:16:f7:2b:42:b9: 43:bb:fb:77:61:5e:18:4f:b6:6c:8a:ce:9b:cc:03:03:df:09: 83:9a:d2:f3:84:5e:3c:26:b1:12:d5:50:d5:c9:17:ee:a0:df: de:39:78:97:a9:18:a3:4c:06:b2:75:89:e3:61:f7:40:51:d1: 03:51:ca:6e:52:ea:9f:4c:0e:90:30:f7:92:7a:da:67:e3:8f: 3c:5d:33:27:52:12:63:05:85:13:09:26:54:69:cb:da:2c:f8: 94:3a:3c:5e:1b:c4:e0:17:1f:2f:46:5e:23:cf:b0:ef:16:a8: 2a:39:10:b8:23:44:7c:ca:97:de:b2:d5:a6:cb:84:6e:60:b2: 50:94:05:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yDRB9FC5oCtMIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAyNloXDTI1MTEyMzE4MDAyNlowLzEtMCsGA1UEAxMk MmRhMGEyMzktOWQ2NS00YjIxLTliNDUtNzliMzQ2M2UwMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoulXGrQ2gIZQAypWXbyNQ907Ac6Gq3XhRb8f VJZm2ssnv9WCjRQh8BLlvzZCT141HTeAfkfT51r1KlEhSDV+wW8Uw699ANuuQsEn E2c/oLu0a0pB5ef+Uy5OpV6PBjvmU0e0FH3c8EoF25/c7DPBchHuse2GBGBlQXIn zJQXALvGls3PFHK59Fuzlbb0546h6Hopu5k47xk5pSBO2yvD6bh0yOtd/ULrmE2S nqIHAmQ7FgtZJIYBYGhbO+z4TscB0eFNy2Sousk5flCiPR++oDTS3mG+ee2Zhws6 O9SsEXyN8jpY8tVTiMIqLerx7i515fkLBLqhP0sdY11anrKGpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOOPORQBnmkMTplmLm11mSOmwx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWQ1ZWI0MzctMjVjYi0z YWNiLTk1ZDctNjI3MWRmY2UyODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOZpBMHcKTez1/Oov9zw9suuKCH8AEr8QS03zc5b7DkJ/Un/k5g8ALS MnDpVeFNk899mKWrq3fEn+iSilqiXmODUhzmNJstJHLyD22oFEn9hjR/f2U1ud0R utiN0MZPd4X/64/1CkjqYvNG/VkjwVp2BvKKPPyUeloW9ytCuUO7+3dhXhhPtmyK zpvMAwPfCYOa0vOEXjwmsRLVUNXJF+6g3945eJepGKNMBrJ1ieNh90BR0QNRym5S 6p9MDpAw95J62mfjjzxdMydSEmMFhRMJJlRpy9os+JQ6PF4bxOAXHy9GXiPPsO8W qCo5ELgjRHzKl96y1abLhG5gslCUBQM= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:35 2025 by rpki-client