$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff4c7452-682b-36ec-b14d-0097bc8111b0.roa File: ff4c7452-682b-36ec-b14d-0097bc8111b0.roa (raw, json) Hash identifier: QJ2CVNiMHSTeL97g0rjdaHsuUildBN0tzj78sy50R/I= Subject key identifier: 64:59:14:4D:83:99:2C:B9:36:A6:80:E3:EE:C6:6F:AD:A7:06:5C:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42AAE7E7698C5A9ED97068 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff4c7452-682b-36ec-b14d-0097bc8111b0.roa Signing time: Tue 26 Aug 2025 22:54:36 +0000 ROA not before: Tue 26 Aug 2025 22:54:36 +0000 ROA not after: Mon 24 Nov 2025 23:54:36 +0000 asID: 31898 IP address blocks: 134.70.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:aa:e7:e7:69:8c:5a:9e:d9:70:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:36 2025 GMT Not After : Nov 24 23:54:36 2025 GMT Subject: CN=f86227fd-35bf-4b0a-b22c-259f1c24df81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:8c:de:93:17:ab:72:c5:e9:a3:6f:ec:c9: d1:83:42:c2:d0:78:ee:f6:4d:4f:ce:49:75:3e:b9: c1:57:c8:47:f8:3c:34:b1:44:b5:d5:21:01:a6:07: 10:8a:b2:65:6b:d8:d1:71:f2:e1:a0:24:aa:31:d6: 2f:89:03:92:3a:28:97:79:6d:07:9d:8f:7a:cf:8c: b6:ed:27:7c:72:e9:48:02:68:a2:60:6e:21:e4:0f: ce:05:73:2c:14:59:e2:b6:4e:fd:e5:05:03:06:66: bb:55:51:5e:02:e0:2e:db:e5:96:51:13:7c:c9:32: c7:38:7e:2b:d5:75:ee:15:d7:a9:d3:09:bd:fa:b4: b9:a5:95:f0:42:93:68:1d:3e:39:af:dc:4c:3c:93: 75:ec:e0:b4:a8:1b:1f:c6:17:53:0d:9e:2d:59:0b: 5d:a9:8c:3a:b4:55:59:a1:58:8c:60:7b:88:b5:25: 06:18:56:71:40:14:c4:b6:bc:b5:87:c6:23:14:d5: bc:cd:33:08:7b:b4:da:9c:50:a1:72:c2:e5:d5:1f: 35:89:b6:8d:ed:49:9f:1f:d9:5b:b3:6d:2d:46:8d: e6:33:22:c4:70:21:69:d7:7d:e2:c6:c3:a6:76:da: 1d:9b:d7:be:3e:bb:c0:52:74:92:cf:e8:2f:83:00: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:59:14:4D:83:99:2C:B9:36:A6:80:E3:EE:C6:6F:AD:A7:06:5C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff4c7452-682b-36ec-b14d-0097bc8111b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:61:4f:eb:5c:73:0f:a3:b6:7d:dd:fa:d0:c1:0d:71:7d:3f: b2:b2:9a:f4:87:1a:e7:84:f1:6a:8b:36:46:a7:d2:76:f9:0c: 89:17:47:56:d9:3b:77:79:dd:46:4e:7b:f8:0b:cf:58:02:75: 9d:72:2e:9a:35:13:21:3a:38:c5:0b:cc:41:35:09:93:67:d1: 6b:99:75:68:b0:c8:e5:a0:c6:1b:f7:27:93:4a:63:27:c0:03: 26:2b:c2:0b:d9:39:1a:c3:c8:34:7d:75:53:7e:ec:72:94:cb: 88:c5:f8:fe:49:71:00:9d:70:2f:34:fb:5d:00:92:3f:63:77: c0:98:0d:28:da:8a:73:18:6f:fc:23:4e:d7:55:67:6b:b6:ec: 55:5c:eb:ae:dd:dd:0d:46:6b:ba:14:ac:76:62:81:83:74:5e: d1:5d:07:98:97:7c:6c:de:6a:98:13:66:68:bd:d0:a1:48:5a: f5:32:db:af:89:3e:3b:18:bd:13:f4:44:1f:11:e9:49:5c:b6: 7f:d9:0b:d8:14:d7:81:ac:7c:5c:11:9e:a1:14:a4:0c:e8:63: 64:0f:b8:56:18:5d:ce:f9:95:e4:3e:a3:9d:05:64:d2:a5:bb: 25:73:0d:56:73:61:60:f0:86:7d:60:7b:8b:f6:e2:7a:f2:11: 83:08:7a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9Qqrn52mMWp7ZcGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQzNloXDTI1MTEyNDIzNTQzNlowLzEtMCsGA1UEAxMk Zjg2MjI3ZmQtMzViZi00YjBhLWIyMmMtMjU5ZjFjMjRkZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19aM3pMXq3LF6aNv7MnRg0LC0Hju9k1Pzkl1 PrnBV8hH+Dw0sUS11SEBpgcQirJla9jRcfLhoCSqMdYviQOSOiiXeW0HnY96z4y2 7Sd8culIAmiiYG4h5A/OBXMsFFnitk795QUDBma7VVFeAuAu2+WWURN8yTLHOH4r 1XXuFdep0wm9+rS5pZXwQpNoHT45r9xMPJN17OC0qBsfxhdTDZ4tWQtdqYw6tFVZ oViMYHuItSUGGFZxQBTEtry1h8YjFNW8zTMIe7TanFChcsLl1R81ibaN7UmfH9lb s20tRo3mMyLEcCFp133ixsOmdtodm9e+PrvAUnSSz+gvgwDk0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRZFE2DmSy5NqaA4+7Gb62nBlxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmY0Yzc0NTItNjgyYi0z NmVjLWIxNGQtMDA5N2JjODExMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZhT+tccw+jtn3d+tDBDXF9P7KymvSHGueE8WqLNkan0nb5DIkXR1bZ O3d53UZOe/gLz1gCdZ1yLpo1EyE6OMULzEE1CZNn0WuZdWiwyOWgxhv3J5NKYyfA AyYrwgvZORrDyDR9dVN+7HKUy4jF+P5JcQCdcC80+10Akj9jd8CYDSjainMYb/wj TtdVZ2u27FVc667d3Q1Ga7oUrHZigYN0XtFdB5iXfGzeapgTZmi90KFIWvUy26+J PjsYvRP0RB8R6Ulctn/ZC9gU14GsfFwRnqEUpAzoY2QPuFYYXc75leQ+o50FZNKl uyVzDVZzYWDwhn1ge4v24nryEYMIemc= -----END CERTIFICATE-----Generated at Thu Oct 9 00:52:16 2025 by rpki-client