$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6189edae-7a69-3db3-875d-bbc30a380d84.roa File: 6189edae-7a69-3db3-875d-bbc30a380d84.roa (raw, json) Hash identifier: 3QQO5fr+QJhGOXBeQmGtJw+bfgv0wae7cs6eYI8UPas= Subject key identifier: D2:31:02:9E:1C:6B:2F:24:74:7A:44:BB:59:29:CF:BA:6B:24:8F:BB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9D8FE638B685CD3455FDC00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6189edae-7a69-3db3-875d-bbc30a380d84.roa Signing time: Mon 25 Aug 2025 17:34:15 +0000 ROA not before: Mon 25 Aug 2025 17:34:15 +0000 ROA not after: Sun 23 Nov 2025 18:34:15 +0000 asID: 31898 IP address blocks: 134.70.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d8:fe:63:8b:68:5c:d3:45:5f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:34:15 2025 GMT Not After : Nov 23 18:34:15 2025 GMT Subject: CN=313a10d7-bec9-4c2f-a723-f916b5eebc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:e9:ea:0d:53:06:cf:09:c1:a3:a1:05:0f: 80:91:0a:2a:e3:e2:b5:a0:a7:67:c7:99:c7:0a:bd: 2a:e2:e8:66:f3:d5:dc:e3:27:fc:e5:55:96:68:95: fb:a8:0e:d2:27:32:81:bd:4b:25:e1:8c:03:7b:59: 2d:9e:b1:3d:81:61:01:28:fd:49:3f:8d:ba:fd:f4: 52:1b:15:88:4f:73:44:08:1b:ee:8b:e8:d3:67:e8: 3e:32:15:21:84:63:8f:08:b0:61:d8:f7:32:42:7a: 68:e7:a2:21:b9:af:1e:0c:88:9b:79:14:de:70:7b: e0:3c:62:29:e2:e6:35:bc:59:49:32:43:ae:31:d7: 4c:da:d1:c1:bd:65:04:7d:ab:d4:5d:1b:18:8b:89: 5c:8f:8b:5a:97:86:77:67:9e:c7:1d:11:c5:d0:7a: 7b:bb:4a:c9:7b:fe:ce:89:ed:46:98:e9:80:91:28: 5d:3f:c3:a6:83:80:99:cb:f4:09:6d:fd:ca:ec:25: db:61:8c:40:92:0e:d8:46:73:3e:05:48:23:07:5d: 2b:dd:a4:61:1b:d3:f9:4a:21:7f:57:ec:7c:c3:15: dc:67:3b:0a:4d:e8:75:0d:ab:b7:a2:7e:22:f0:db: 7f:78:d3:31:8d:ae:ca:ae:c9:89:11:c0:03:61:42: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:31:02:9E:1C:6B:2F:24:74:7A:44:BB:59:29:CF:BA:6B:24:8F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6189edae-7a69-3db3-875d-bbc30a380d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:02:92:b7:92:7f:42:43:a1:74:eb:51:68:c9:29:bd:41:b2: cf:8b:df:76:1f:75:26:8c:77:0b:b2:56:fa:81:2c:37:67:09: cf:63:89:9d:2d:75:3b:7f:74:4e:6f:4b:88:ac:23:83:1b:97: a2:e5:af:6b:e5:7e:85:e2:b8:1a:63:62:d9:ce:35:41:9f:d9: 43:62:1d:5b:58:d8:15:69:5e:f9:ba:9f:81:f2:54:89:ad:74: 37:ad:5c:5f:0d:d9:eb:a6:63:5b:9a:9b:f7:bc:60:03:2a:10: 55:db:51:63:79:38:fc:2f:cc:c5:b0:e2:8e:85:60:97:2b:b0: 97:88:d9:15:5a:0f:5e:89:61:cf:98:77:b9:15:64:4d:6c:d3: 17:aa:a9:ca:ff:a4:09:9e:a9:9f:26:53:ea:b1:62:35:32:3f: 1a:88:98:3d:34:3d:ec:fc:2d:e3:1c:2f:ef:63:2d:d1:d9:a4: 76:40:7b:db:48:59:93:57:bb:af:91:ad:de:9d:f5:26:08:f9: 24:67:9f:27:27:f7:b0:05:30:91:3d:8d:1a:61:c7:8a:79:70: 46:14:ee:22:3a:0b:37:51:c0:33:81:68:72:1f:69:18:2b:fa: 7a:10:77:8c:65:26:cd:28:73:e4:6b:72:6c:f6:b6:47:a4:b8: 83:ee:8f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr52P5ji2hc00Vf3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MzQxNVoXDTI1MTEyMzE4MzQxNVowLzEtMCsGA1UEAxMk MzEzYTEwZDctYmVjOS00YzJmLWE3MjMtZjkxNmI1ZWViYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSzp6g1TBs8JwaOhBQ+AkQoq4+K1oKdnx5nH Cr0q4uhm89Xc4yf85VWWaJX7qA7SJzKBvUsl4YwDe1ktnrE9gWEBKP1JP426/fRS GxWIT3NECBvui+jTZ+g+MhUhhGOPCLBh2PcyQnpo56Ihua8eDIibeRTecHvgPGIp 4uY1vFlJMkOuMddM2tHBvWUEfavUXRsYi4lcj4tal4Z3Z57HHRHF0Hp7u0rJe/7O ie1GmOmAkShdP8Omg4CZy/QJbf3K7CXbYYxAkg7YRnM+BUgjB10r3aRhG9P5SiF/ V+x8wxXcZzsKTeh1Dau3on4i8Nt/eNMxja7KrsmJEcADYUJv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIxAp4cay8kdHpEu1kpz7prJI+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjE4OWVkYWUtN2E2OS0z ZGIzLTg3NWQtYmJjMzBhMzgwZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0CkreSf0JDoXTrUWjJKb1Bss+L33YfdSaMdwuyVvqBLDdnCc9jiZ0t dTt/dE5vS4isI4Mbl6Llr2vlfoXiuBpjYtnONUGf2UNiHVtY2BVpXvm6n4HyVImt dDetXF8N2eumY1uam/e8YAMqEFXbUWN5OPwvzMWw4o6FYJcrsJeI2RVaD16JYc+Y d7kVZE1s0xeqqcr/pAmeqZ8mU+qxYjUyPxqImD00Pez8LeMcL+9jLdHZpHZAe9tI WZNXu6+Rrd6d9SYI+SRnnycn97AFMJE9jRphx4p5cEYU7iI6CzdRwDOBaHIfaRgr +noQd4xlJs0oc+Rrcmz2tkekuIPuj14= -----END CERTIFICATE-----Generated at Thu Oct 9 01:04:29 2025 by rpki-client