$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa File: 23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa (raw, json) Hash identifier: 3RpoudZ0ANZXlk1FGvNky4qYS5vXV9zvswDjZVpo3y4= Subject key identifier: 22:D9:7A:F8:77:17:71:69:0D:AB:87:E6:E4:22:8C:AF:CB:66:2C:0A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE5963A63E3204894BEDDD00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa Signing time: Fri 15 Aug 2025 21:10:19 +0000 ROA not before: Fri 15 Aug 2025 21:10:19 +0000 ROA not after: Thu 13 Nov 2025 22:10:19 +0000 asID: 31898 IP address blocks: 134.70.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:63:a6:3e:32:04:89:4b:ed:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:19 2025 GMT Not After : Nov 13 22:10:19 2025 GMT Subject: CN=1fc2fd9c-a363-4457-8023-bdcab7fc2d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e2:a0:60:da:e1:37:67:a8:95:32:87:11:28: 00:87:cb:3a:92:ec:77:a8:5a:48:59:54:9f:fd:0c: 40:e3:c2:e7:e8:6f:16:91:3d:ba:27:5d:1f:d8:de: 16:5e:29:2a:cc:7d:03:8e:a0:7e:db:e5:99:8e:98: 74:a4:44:06:c1:c5:21:f5:ac:76:79:25:08:7f:71: 95:26:c9:43:a6:67:f6:a7:94:0e:80:74:fc:ed:0f: d3:94:47:4a:58:5c:19:7f:21:eb:79:0d:a9:77:d7: ed:12:48:65:f8:a9:c7:bd:38:9b:7d:bd:9b:fe:c3: fb:11:85:ef:1c:85:ae:1f:76:f7:82:63:49:a4:0c: 26:24:a0:7e:4c:26:32:9b:1a:5c:ca:ab:83:a3:d9: c9:ea:d7:c5:9b:84:eb:dc:f4:ab:96:62:1f:8b:b7: c6:3e:10:b1:be:99:6c:22:75:80:00:a8:27:89:35: a9:03:b9:5f:75:52:39:fa:b5:1a:4d:74:08:da:a6: a7:42:4e:82:24:e5:1a:88:60:c3:87:0f:a5:e4:3d: 65:c9:f2:45:77:e4:62:e1:9d:60:26:3d:eb:f0:1f: c6:66:7d:c1:c0:c7:7e:91:de:63:60:fa:0d:97:e1: 9f:b3:ac:64:39:3d:09:46:f0:4c:2c:60:35:c6:2c: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:7A:F8:77:17:71:69:0D:AB:87:E6:E4:22:8C:AF:CB:66:2C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:64:5f:fb:56:4a:7f:c3:ee:4b:03:21:ca:09:94:7b:8e:38: 84:91:0e:74:3b:f3:e9:3a:5e:38:00:99:f0:07:f7:40:7e:f2: e4:e3:a8:79:65:e4:7f:81:d8:f6:80:c6:45:5b:81:d0:81:be: 7d:0b:9d:ad:de:bf:eb:bc:61:cb:28:e4:a7:f3:a5:77:26:72: bc:63:75:de:8a:bb:4b:d2:e3:8d:86:48:eb:84:d3:ea:41:cb: 9e:73:63:41:f0:06:a5:b1:15:0b:0f:17:fc:c2:d5:1e:28:14: 90:fd:e3:33:30:64:c6:96:a4:74:4e:b8:2c:07:dc:49:10:17: 0f:74:6c:e5:5d:c6:60:48:1b:44:1a:bc:a7:68:2b:34:51:39: f8:8f:e2:35:fa:7c:2c:e4:a9:01:cc:6d:e1:a0:0b:59:be:11: ab:01:dd:12:92:4f:3d:42:eb:7f:4b:aa:80:64:7a:db:31:05: 3b:a6:a6:5f:29:74:3c:78:16:e4:23:69:7e:52:6e:5a:95:2c: 0c:e1:fd:e4:10:21:7d:30:1f:c6:ef:ac:23:98:f5:af:ce:79: 55:e0:8a:d4:65:d0:62:75:d9:b1:a9:4a:e6:ff:a8:72:ec:01: 29:f5:6d:e4:63:27:ff:5b:20:2e:1a:c2:29:6e:f2:dc:e3:8e: 8d:02:78:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWWOmPjIEiUvt3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAxOVoXDTI1MTExMzIyMTAxOVowLzEtMCsGA1UEAxMk MWZjMmZkOWMtYTM2My00NDU3LTgwMjMtYmRjYWI3ZmMyZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOKgYNrhN2eolTKHESgAh8s6kux3qFpIWVSf /QxA48Ln6G8WkT26J10f2N4WXikqzH0DjqB+2+WZjph0pEQGwcUh9ax2eSUIf3GV JslDpmf2p5QOgHT87Q/TlEdKWFwZfyHreQ2pd9ftEkhl+KnHvTibfb2b/sP7EYXv HIWuH3b3gmNJpAwmJKB+TCYymxpcyquDo9nJ6tfFm4Tr3PSrlmIfi7fGPhCxvpls InWAAKgniTWpA7lfdVI5+rUaTXQI2qanQk6CJOUaiGDDhw+l5D1lyfJFd+Ri4Z1g Jj3r8B/GZn3BwMd+kd5jYPoNl+Gfs6xkOT0JRvBMLGA1xixckwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLZevh3F3FpDauH5uQijK/LZiwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNmNmMxMzktNjViNS0z YWIyLWEzYTYtNjJmYjAzNTAzYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNkX/tWSn/D7ksDIcoJlHuOOISRDnQ78+k6XjgAmfAH90B+8uTjqHll 5H+B2PaAxkVbgdCBvn0Lna3ev+u8Ycso5KfzpXcmcrxjdd6Ku0vS442GSOuE0+pB y55zY0HwBqWxFQsPF/zC1R4oFJD94zMwZMaWpHROuCwH3EkQFw90bOVdxmBIG0Qa vKdoKzRROfiP4jX6fCzkqQHMbeGgC1m+EasB3RKSTz1C639LqoBketsxBTumpl8p dDx4FuQjaX5SblqVLAzh/eQQIX0wH8bvrCOY9a/OeVXgitRl0GJ12bGpSub/qHLs ASn1beRjJ/9bIC4awilu8tzjjo0CeI8= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:21 2025 by rpki-client