$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa File: 9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa (raw, json) Hash identifier: G5lqaNfeXNqsTKesy7Snq5Rnf/pRz8hZOhScUlpRMdY= Subject key identifier: D4:C5:98:9E:3A:F8:D4:69:99:67:AC:89:31:7E:18:CD:F2:61:62:AE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9D8FB6AF97C18BA24C75B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa Signing time: Mon 25 Aug 2025 17:34:14 +0000 ROA not before: Mon 25 Aug 2025 17:34:14 +0000 ROA not after: Sun 23 Nov 2025 18:34:14 +0000 asID: 31898 IP address blocks: 134.70.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d8:fb:6a:f9:7c:18:ba:24:c7:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:34:14 2025 GMT Not After : Nov 23 18:34:14 2025 GMT Subject: CN=074ee3fe-50fd-43c6-8e96-b7d930335ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8a:28:f4:f7:fd:1f:57:9d:39:a2:08:17:60: ef:60:b8:66:9e:4f:87:f2:77:83:e0:d0:b4:78:c1: 6f:ec:18:41:9c:1b:c8:09:2a:9a:f1:08:77:99:fa: 07:cf:ec:f5:f1:d2:bd:0c:8d:49:a6:f4:a2:2b:4d: bd:a3:d4:73:4b:55:38:f5:d4:95:4e:b3:fe:45:03: 6a:61:9d:1b:fc:a4:e2:f7:da:a7:69:a9:23:87:e8: 59:7c:a9:f8:7f:5a:86:d1:97:3a:b2:bf:d6:8c:b8: c6:c1:7e:81:a1:9f:c3:d9:b1:8a:df:5c:15:28:e5: f4:34:8f:0e:c6:a7:6f:78:0c:97:84:59:63:59:c4: bc:37:ab:5f:9b:65:9a:0f:b8:04:d0:be:af:c0:02: 8a:46:bc:eb:38:cb:13:c9:25:f3:cc:6d:e4:f2:06: 83:d9:03:30:9e:dc:03:c8:7b:fd:e4:e0:b9:cf:43: eb:fb:22:b6:be:ed:12:b0:d9:b3:43:d0:fa:d2:dd: 99:f3:f6:f4:31:8d:24:1b:33:0c:a5:fa:e2:7c:ed: 10:93:63:e5:63:c5:90:0f:29:40:61:b8:86:4c:6b: 94:ee:9e:bb:47:f9:d6:37:01:bb:7d:56:34:f9:24: 53:4b:66:d4:db:f3:ac:fa:83:d2:f6:aa:21:7a:38: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C5:98:9E:3A:F8:D4:69:99:67:AC:89:31:7E:18:CD:F2:61:62:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9da2c57a-bd84-33d8-a9c5-3c7715e05387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ad:fa:5f:71:8d:bc:60:11:46:41:55:02:b2:7b:60:8b:a4: aa:54:59:41:63:88:cd:8c:7f:5b:d2:e6:6c:e9:bd:2e:0a:08: 9b:07:28:7b:c4:e8:c5:58:12:3d:24:a1:fa:ad:03:ea:3d:ed: f4:d7:3b:51:af:7f:17:61:92:dd:ea:8f:c1:ed:1a:c2:db:af: 2a:9c:af:13:2d:94:17:ee:41:bc:8a:e9:84:4a:13:43:bc:ef: 5b:47:66:2e:68:d1:16:4a:90:8a:8d:c5:53:73:07:be:0c:04: 0a:2b:76:b4:eb:a5:f9:a4:8c:45:a9:2d:1d:5b:33:1e:1e:84: 43:7c:4c:a9:01:cc:b1:7a:dd:9c:d5:84:70:3a:a3:0a:9d:23: 5a:63:d8:d8:31:97:60:59:c1:d2:35:04:3c:96:ef:ae:82:39: 1d:54:b3:9a:fd:86:83:3a:79:73:ba:19:97:ed:05:35:34:92: f5:f0:e3:03:35:9f:a7:d2:20:a3:e6:a6:4c:1c:be:b6:64:7d: a9:be:73:e8:5c:0e:c4:c1:cc:e1:e5:08:7e:7b:a6:cb:7f:3d: 3c:6f:2e:74:41:5a:bc:a1:cb:9c:b1:d4:c3:1c:9f:b1:8f:b7: 11:a8:de:66:3d:a5:91:82:06:5e:5f:40:44:a3:61:f8:8e:cc: e1:8b:75:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr52Ptq+XwYuiTHW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MzQxNFoXDTI1MTEyMzE4MzQxNFowLzEtMCsGA1UEAxMk MDc0ZWUzZmUtNTBmZC00M2M2LThlOTYtYjdkOTMwMzM1ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgooo9Pf9H1edOaIIF2DvYLhmnk+H8neD4NC0 eMFv7BhBnBvICSqa8Qh3mfoHz+z18dK9DI1JpvSiK029o9RzS1U49dSVTrP+RQNq YZ0b/KTi99qnaakjh+hZfKn4f1qG0Zc6sr/WjLjGwX6BoZ/D2bGK31wVKOX0NI8O xqdveAyXhFljWcS8N6tfm2WaD7gE0L6vwAKKRrzrOMsTySXzzG3k8gaD2QMwntwD yHv95OC5z0Pr+yK2vu0SsNmzQ9D60t2Z8/b0MY0kGzMMpfrifO0Qk2PlY8WQDylA YbiGTGuU7p67R/nWNwG7fVY0+SRTS2bU2/Os+oPS9qohejgm1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTFmJ46+NRpmWesiTF+GM3yYWKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWRhMmM1N2EtYmQ4NC0z M2Q4LWE5YzUtM2M3NzE1ZTA1Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImt+l9xjbxgEUZBVQKye2CLpKpUWUFjiM2Mf1vS5mzpvS4KCJsHKHvE 6MVYEj0kofqtA+o97fTXO1Gvfxdhkt3qj8HtGsLbryqcrxMtlBfuQbyK6YRKE0O8 71tHZi5o0RZKkIqNxVNzB74MBAordrTrpfmkjEWpLR1bMx4ehEN8TKkBzLF63ZzV hHA6owqdI1pj2Ngxl2BZwdI1BDyW766COR1Us5r9hoM6eXO6GZftBTU0kvXw4wM1 n6fSIKPmpkwcvrZkfam+c+hcDsTBzOHlCH57pst/PTxvLnRBWryhy5yx1MMcn7GP txGo3mY9pZGCBl5fQESjYfiOzOGLddc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:29 2025 by rpki-client