$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c44941a3-9e2d-3069-9be4-31ecbdd9ef23.roa File: c44941a3-9e2d-3069-9be4-31ecbdd9ef23.roa (raw, json) Hash identifier: pwKX8GhVhcduVZA3qtaFRmh2txT4qnZTN3fLxn2saPs= Subject key identifier: 43:A5:63:4D:5D:BA:38:DE:6B:9A:2A:4E:3B:7E:EF:7B:A3:CF:9E:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C831C2D407D76F35438F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c44941a3-9e2d-3069-9be4-31ecbdd9ef23.roa Signing time: Mon 25 Aug 2025 17:00:24 +0000 ROA not before: Mon 25 Aug 2025 17:00:24 +0000 ROA not after: Sun 23 Nov 2025 18:00:24 +0000 asID: 31898 IP address blocks: 134.70.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:31:c2:d4:07:d7:6f:35:43:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:24 2025 GMT Not After : Nov 23 18:00:24 2025 GMT Subject: CN=27125698-6eb8-4b4b-8df5-ede3f797c7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:17:8a:0f:2b:c2:1c:17:25:68:f2:74:d5: 19:2f:34:cd:ad:0b:63:ab:76:da:da:39:60:d5:c8: 84:8d:6a:bd:c1:e6:12:98:39:58:ff:82:3e:c0:90: 9c:d6:01:4b:f5:fd:bf:be:6a:b7:76:ff:ea:a4:9b: d5:39:8e:db:b3:4a:47:f3:57:da:1d:12:41:83:92: ec:ef:ed:a7:a2:5c:5c:4a:15:37:f2:38:73:ea:b9: 8c:11:2e:62:7b:d8:57:ec:b0:ce:71:45:b8:9a:f9: 1a:9f:9a:f5:72:9d:b0:81:11:a8:00:5b:10:c4:90: 29:ee:0d:e6:45:cc:31:bb:57:6b:3e:02:4a:1e:05: c0:f9:cc:77:35:88:2c:61:18:b4:3b:9f:14:c2:65: 03:64:7e:e7:47:1f:be:31:ca:5e:13:fd:87:73:6e: 6b:ea:37:0f:b9:0e:ac:92:73:09:2e:ba:ab:c2:18: 99:57:01:a3:cc:b4:fa:b2:5f:b9:60:92:37:b9:dd: 1d:62:06:5b:33:a3:36:44:30:c1:66:25:c8:33:1c: 46:9c:36:77:ec:5a:73:7a:aa:ec:14:75:b9:ba:9e: 18:a8:f7:fe:eb:4c:3d:5f:22:c7:f8:87:32:88:cd: d2:0d:77:47:34:65:cd:9a:72:a9:09:26:45:f3:38: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A5:63:4D:5D:BA:38:DE:6B:9A:2A:4E:3B:7E:EF:7B:A3:CF:9E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c44941a3-9e2d-3069-9be4-31ecbdd9ef23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c2:a8:33:56:f5:c6:ce:ec:cb:8a:41:95:45:92:9f:c5:02: 27:04:e4:60:c1:26:04:a2:16:db:d4:d1:a0:f7:07:0b:8c:9a: 9a:1f:c4:5e:5c:5e:b3:c3:c4:99:0b:48:13:f8:7c:a5:5c:36: 2a:61:aa:37:1c:5c:fe:03:e3:d5:bd:9d:8d:fd:14:c7:bf:8c: c6:84:a3:8b:e7:b2:44:ad:27:bc:8b:58:2e:c5:ee:67:3e:cc: 11:a5:0a:f9:63:10:59:60:a7:0b:2a:89:9e:2f:8d:5c:ff:f3: c2:92:1a:38:1e:3b:5f:69:4f:f4:ba:a2:9b:bd:f8:83:23:1c: 5d:b7:ff:d0:5e:a3:c3:25:fd:4c:1e:07:22:0e:66:ce:b0:68: 81:59:0d:27:06:4f:c1:5b:9e:26:f1:d9:ec:f1:1c:78:08:10: 88:01:25:11:cd:ac:64:dc:17:d5:b0:fa:d3:37:53:c7:4c:6b: 48:0b:f9:f6:32:83:ea:19:85:da:6c:bb:25:e5:0e:be:81:66: 9a:ba:fe:8c:8d:e1:79:77:4f:b7:90:a1:86:0a:94:a2:95:73: 83:35:d8:b6:3b:2e:1d:86:c2:20:1b:7f:36:ab:37:cc:e1:6f: dd:7a:26:47:18:85:3f:2b:57:22:c8:cd:c3:7c:67:b9:8c:64: b5:f0:f2:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yDHC1AfXbzVDj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAyNFoXDTI1MTEyMzE4MDAyNFowLzEtMCsGA1UEAxMk MjcxMjU2OTgtNmViOC00YjRiLThkZjUtZWRlM2Y3OTdjN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW8Xig8rwhwXJWjydNUZLzTNrQtjq3ba2jlg 1ciEjWq9weYSmDlY/4I+wJCc1gFL9f2/vmq3dv/qpJvVOY7bs0pH81faHRJBg5Ls 7+2nolxcShU38jhz6rmMES5ie9hX7LDOcUW4mvkan5r1cp2wgRGoAFsQxJAp7g3m Rcwxu1drPgJKHgXA+cx3NYgsYRi0O58UwmUDZH7nRx++McpeE/2Hc25r6jcPuQ6s knMJLrqrwhiZVwGjzLT6sl+5YJI3ud0dYgZbM6M2RDDBZiXIMxxGnDZ37Fpzeqrs FHW5up4YqPf+60w9XyLH+IcyiM3SDXdHNGXNmnKpCSZF8zj4NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOlY01dujjea5oqTjt+73ujz55/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzQ0OTQxYTMtOWUyZC0z MDY5LTliZTQtMzFlY2JkZDllZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7CqDNW9cbO7MuKQZVFkp/FAicE5GDBJgSiFtvU0aD3BwuMmpofxF5c XrPDxJkLSBP4fKVcNiphqjccXP4D49W9nY39FMe/jMaEo4vnskStJ7yLWC7F7mc+ zBGlCvljEFlgpwsqiZ4vjVz/88KSGjgeO19pT/S6opu9+IMjHF23/9Beo8Ml/Uwe ByIOZs6waIFZDScGT8Fbnibx2ezxHHgIEIgBJRHNrGTcF9Ww+tM3U8dMa0gL+fYy g+oZhdpsuyXlDr6BZpq6/oyN4Xl3T7eQoYYKlKKVc4M12LY7Lh2GwiAbfzarN8zh b916JkcYhT8rVyLIzcN8Z7mMZLXw8ls= -----END CERTIFICATE-----Generated at Thu Oct 9 00:52:18 2025 by rpki-client