$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa File: 456ba9f7-e72c-305d-b3cd-691ae04fe061.roa (raw, json) Hash identifier: SS8cMq43CQs2A4oqsHPEjIRZVqOch8oXZTior8eqZX4= Subject key identifier: F8:89:62:F6:AB:62:B1:B7:87:EA:6B:12:E1:11:15:F0:72:6D:77:F6 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F4328584A71EB4EA6D50248D62B2FCBC0 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 55134 IP address blocks: 70.34.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:4e:a6:d5:02:48:d6:2b:2f:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=9a27bde7-e82e-4bba-ada0-1ea8cb14bfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:64:56:bc:4e:56:b1:ef:3a:9c:1a:3e:89:1b: 25:f4:8a:68:51:84:f3:eb:fe:a7:2a:83:7a:10:24: 3c:fa:93:61:84:9f:48:aa:52:89:11:4c:79:84:48: 78:74:90:8d:84:83:c8:c2:0c:8e:81:2a:74:6a:ba: bb:85:f0:83:aa:05:76:0e:47:94:3a:d4:1f:aa:13: a5:0f:16:a6:6f:43:bd:08:a0:be:8f:fe:f7:ce:6f: ec:5a:76:5e:ef:d0:20:68:23:56:fc:5d:1c:82:9e: ce:a2:bd:a1:dd:86:c9:a6:37:fa:36:fc:21:98:29: 9b:da:96:d7:ca:ae:e0:9c:d2:1c:d4:ba:ab:58:2c: a5:01:28:a6:c7:8e:8c:eb:e0:0d:26:75:1d:e9:c6: 16:56:16:c4:3f:59:85:80:5a:c3:8b:54:35:52:b8: 8c:8e:8d:72:9d:e7:73:15:0d:cf:df:1b:04:ad:7e: 65:8a:aa:47:30:b9:93:be:f0:ce:73:9a:0d:48:91: f6:fc:e0:5c:bd:2a:68:84:e5:fe:c2:ee:cf:22:ef: ce:46:d4:74:43:d9:3b:20:e5:00:97:d2:bb:d1:26: e9:35:b6:0c:53:e9:46:7a:7f:d2:d6:b3:36:ec:17: d5:ca:6d:8a:af:46:4e:39:ca:a0:f9:fc:7e:07:55: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:89:62:F6:AB:62:B1:B7:87:EA:6B:12:E1:11:15:F0:72:6D:77:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 70.34.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:54:4e:1c:8c:bf:2b:cf:34:f5:1f:d6:84:7d:11:90:f1:52: 17:09:77:06:8e:ff:c2:08:a1:29:ff:b3:8c:33:56:83:6c:fe: 5f:13:8b:83:9b:82:c1:36:5a:1b:33:60:f7:0b:10:bb:09:99: 5d:a5:42:2b:f4:2a:3a:c0:43:3e:7b:af:a3:ad:a8:39:21:9a: d7:47:20:b7:30:e9:e2:60:cc:c8:89:0b:ed:61:8d:ca:10:ac: d7:26:e2:24:f3:ca:4a:5c:4d:01:a8:aa:35:a0:31:62:64:0a: d7:ea:61:29:cb:d5:1e:33:8c:ab:9d:df:c1:14:23:15:de:ad: 65:db:58:d8:c7:1f:b5:fd:b3:59:0e:30:5f:67:be:14:db:0f: 3c:91:46:ce:4a:6c:62:1e:24:ab:47:70:8c:27:d3:e2:df:82: 7b:95:1e:ec:e7:f5:54:09:80:f7:d0:e7:d8:f4:84:33:b6:da: 18:66:b5:2a:22:68:fd:01:9b:f6:73:9a:34:ee:da:55:66:f1: 78:bc:39:86:3b:8e:76:31:12:d3:b5:07:f6:a9:5a:b9:41:59: 02:41:aa:47:a0:6a:19:c1:ff:5c:87:26:13:e1:5d:7c:f6:59: 2c:bf:d9:52:be:97:56:63:e7:eb:d7:55:7f:c0:c8:ba:90:63: 40:40:40:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx606m1QJI1isvy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk OWEyN2JkZTctZTgyZS00YmJhLWFkYTAtMWVhOGNiMTRiZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2RWvE5Wse86nBo+iRsl9IpoUYTz6/6nKoN6 ECQ8+pNhhJ9IqlKJEUx5hEh4dJCNhIPIwgyOgSp0arq7hfCDqgV2DkeUOtQfqhOl Dxamb0O9CKC+j/73zm/sWnZe79AgaCNW/F0cgp7Oor2h3YbJpjf6NvwhmCmb2pbX yq7gnNIc1LqrWCylASimx46M6+ANJnUd6cYWVhbEP1mFgFrDi1Q1UriMjo1ynedz FQ3P3xsErX5liqpHMLmTvvDOc5oNSJH2/OBcvSpohOX+wu7PIu/ORtR0Q9k7IOUA l9K70SbpNbYMU+lGen/S1rM27BfVym2Kr0ZOOcqg+fx+B1Wg6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiJYvarYrG3h+prEuERFfBybXf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvNDU2YmE5ZjctZTcyYy0z MDVkLWIzY2QtNjkxYWUwNGZlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5UThyMvyvPNPUf1oR9EZDxUhcJdwaO/8IIoSn/s4wzVoNs/l8Ti4Ob gsE2WhszYPcLELsJmV2lQiv0KjrAQz57r6OtqDkhmtdHILcw6eJgzMiJC+1hjcoQ rNcm4iTzykpcTQGoqjWgMWJkCtfqYSnL1R4zjKud38EUIxXerWXbWNjHH7X9s1kO MF9nvhTbDzyRRs5KbGIeJKtHcIwn0+LfgnuVHuzn9VQJgPfQ59j0hDO22hhmtSoi aP0Bm/ZzmjTu2lVm8Xi8OYY7jnYxEtO1B/apWrlBWQJBqkegahnB/1yHJhPhXXz2 WSy/2VK+l1Zj5+vXVX/AyLqQY0BAQEc= -----END CERTIFICATE-----Generated at Sun Aug 3 00:45:08 2025 by rpki-client