$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0389cf87-62e8-36e9-aeba-713af17db0e7.roa File: 0389cf87-62e8-36e9-aeba-713af17db0e7.roa (raw, json) Hash identifier: 297OUH/QShYMYYNVRCGG4OgXvQWX5kUGe2zseFlNeYQ= Subject key identifier: D4:73:16:81:BD:CB:31:DC:79:B7:C2:0C:58:81:42:8E:44:C1:00:52 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE941B9AF66C640F9A1E6AD80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0389cf87-62e8-36e9-aeba-713af17db0e7.roa Signing time: Tue 19 Aug 2025 18:56:32 +0000 ROA not before: Tue 19 Aug 2025 18:56:32 +0000 ROA not after: Mon 17 Nov 2025 19:56:32 +0000 asID: 31898 IP address blocks: 134.70.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:41:b9:af:66:c6:40:f9:a1:e6:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 18:56:32 2025 GMT Not After : Nov 17 19:56:32 2025 GMT Subject: CN=fd76b274-ad0a-4d26-b6ca-400e0bec1f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:d4:81:94:46:83:33:48:f9:50:7d:59:7e: 76:c6:f7:d2:a5:82:28:ff:5a:7a:e8:ab:65:1b:24: a8:47:6c:7c:fd:20:6a:8a:6c:33:28:40:4d:c6:8b: df:2e:4d:d4:ad:85:88:23:cb:05:f7:ab:a5:8d:58: aa:76:17:e9:91:91:ad:4b:a2:7a:ba:53:82:94:02: 8f:70:27:42:6d:fd:65:fd:58:7f:db:98:99:2b:2f: a0:35:fa:77:73:37:6d:89:86:5d:08:03:a3:06:d5: 06:72:6d:5f:ac:0f:16:b6:86:e1:7a:37:a9:7e:bc: 60:ab:77:07:b6:38:bf:b7:a7:7a:89:59:b4:e1:94: bb:eb:75:c4:62:2b:dc:c9:9f:42:92:be:36:ce:71: 41:93:46:68:70:e7:12:b3:1d:6d:5f:db:eb:b9:66: 22:f4:48:92:50:e4:d7:7e:b8:c8:ad:45:bd:a2:9c: 00:71:4c:88:fd:57:4f:65:34:52:5e:10:49:a7:c5: 87:9b:31:0a:4b:09:62:ce:eb:67:67:a5:85:8d:19: 26:17:90:26:b6:fa:45:ed:40:8b:04:a3:c4:27:64: c9:8e:c3:3f:cb:15:2d:f1:d4:33:09:6a:bd:ee:30: 54:e6:b3:8a:42:bd:b9:25:64:4c:15:84:bf:4a:8b: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:16:81:BD:CB:31:DC:79:B7:C2:0C:58:81:42:8E:44:C1:00:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0389cf87-62e8-36e9-aeba-713af17db0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7f:c3:74:bc:aa:b4:9b:a6:bb:6b:61:61:0e:9a:4f:6d:6f: 07:01:1b:34:01:50:e5:78:e2:ec:d8:85:16:9f:e2:62:bc:52: f2:01:cd:5c:07:84:a7:07:a7:5b:4f:98:e5:6b:37:93:e3:30: f8:97:6a:14:15:62:5f:ca:25:1a:03:c6:f2:bc:77:53:d7:6f: ce:64:7a:f0:cc:16:80:60:91:f8:85:67:92:55:f9:72:7b:16: fb:2a:f7:17:9e:80:5f:50:24:78:b0:8b:87:06:50:56:83:6a: b9:24:d3:70:4a:28:72:51:72:a6:13:7a:a6:1d:3e:2d:51:71: 5d:56:7c:64:5c:3b:5b:c8:39:13:4b:99:c1:34:50:39:eb:2f: 40:29:a4:34:88:f4:62:5c:71:b6:6e:69:26:53:73:00:30:1f: 9f:c7:4a:ca:c9:7e:b9:98:13:76:8f:37:21:f6:3a:63:02:7a: ae:a0:d2:ee:9d:03:42:b6:91:51:ea:ca:47:5f:17:3c:4c:c6: 47:ab:40:0c:31:ca:79:d1:05:8e:f3:fa:a8:a2:4b:75:28:ea: 05:be:5a:60:1d:92:1b:1d:1f:d7:8f:08:4a:75:60:d6:b1:18: cf:d2:32:fe:e8:d2:9f:41:09:e4:1e:ce:bc:83:d1:d3:32:23: d7:24:b2:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpQbmvZsZA+aHmrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE4NTYzMloXDTI1MTExNzE5NTYzMlowLzEtMCsGA1UEAxMk ZmQ3NmIyNzQtYWQwYS00ZDI2LWI2Y2EtNDAwZTBiZWMxZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgjUgZRGgzNI+VB9WX52xvfSpYIo/1p66Ktl GySoR2x8/SBqimwzKEBNxovfLk3UrYWII8sF96uljViqdhfpkZGtS6J6ulOClAKP cCdCbf1l/Vh/25iZKy+gNfp3czdtiYZdCAOjBtUGcm1frA8Wtobhejepfrxgq3cH tji/t6d6iVm04ZS763XEYivcyZ9Ckr42znFBk0ZocOcSsx1tX9vruWYi9EiSUOTX frjIrUW9opwAcUyI/VdPZTRSXhBJp8WHmzEKSwlizutnZ6WFjRkmF5AmtvpF7UCL BKPEJ2TJjsM/yxUt8dQzCWq97jBU5rOKQr25JWRMFYS/SovCswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRzFoG9yzHcebfCDFiBQo5EwQBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDM4OWNmODctNjJlOC0z NmU5LWFlYmEtNzEzYWYxN2RiMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR/w3S8qrSbprtrYWEOmk9tbwcBGzQBUOV44uzYhRaf4mK8UvIBzVwH hKcHp1tPmOVrN5PjMPiXahQVYl/KJRoDxvK8d1PXb85kevDMFoBgkfiFZ5JV+XJ7 Fvsq9xeegF9QJHiwi4cGUFaDarkk03BKKHJRcqYTeqYdPi1RcV1WfGRcO1vIORNL mcE0UDnrL0AppDSI9GJccbZuaSZTcwAwH5/HSsrJfrmYE3aPNyH2OmMCeq6g0u6d A0K2kVHqykdfFzxMxkerQAwxynnRBY7z+qiiS3Uo6gW+WmAdkhsdH9ePCEp1YNax GM/SMv7o0p9BCeQezryD0dMyI9ckspw= -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:36 2025 by rpki-client