$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5651f5ea-6045-34d7-b975-caffe4a1c210.roa File: 5651f5ea-6045-34d7-b975-caffe4a1c210.roa (raw, json) Hash identifier: SGhM1zw/lMA15wUT81AXNQ5Yin2DbfMlW5JD2gtCAuw= Subject key identifier: F0:3C:69:C0:B6:4B:F3:CA:22:1E:EA:26:91:F1:9F:80:A3:05:B4:5C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE5967147A9297FE8E8E2D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5651f5ea-6045-34d7-b975-caffe4a1c210.roa Signing time: Fri 15 Aug 2025 21:10:21 +0000 ROA not before: Fri 15 Aug 2025 21:10:21 +0000 ROA not after: Thu 13 Nov 2025 22:10:21 +0000 asID: 31898 IP address blocks: 134.70.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:67:14:7a:92:97:fe:8e:8e:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:21 2025 GMT Not After : Nov 13 22:10:21 2025 GMT Subject: CN=aceace4e-17c9-4251-b6a3-0aaeee49bdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:c2:e1:56:74:87:14:8a:58:44:02:38:39: 58:9b:cc:22:af:0a:95:5e:b6:cd:6a:0f:10:e9:d6: 1a:4d:39:36:7d:6a:74:02:0d:57:ba:b5:7a:7a:8b: c1:b3:6b:55:e0:63:a8:47:27:6d:7e:b1:d6:d3:23: 67:25:78:35:8b:5d:7e:86:9b:90:12:82:59:05:1d: 54:dc:c1:7f:42:21:f2:e7:21:47:d6:38:52:05:06: c2:14:2e:68:a1:d7:f1:d1:f0:ea:6f:7e:f3:81:9a: 93:db:3a:ab:78:d5:fa:a8:14:f1:14:2d:8d:79:61: d3:af:aa:e6:a8:51:6d:3b:fb:11:21:7e:74:30:44: d7:7a:51:b0:c8:11:ad:36:66:2d:ed:72:cb:04:cf: c6:98:4b:0b:9a:52:68:6d:9f:22:b4:66:6f:a4:34: 67:ff:ae:0c:84:fa:9f:92:49:1b:c3:22:30:11:4a: e0:67:72:3c:a5:bc:5e:6c:9d:7d:05:54:b7:a7:ef: 27:95:fd:9a:27:8a:b7:e3:8a:ac:c3:ab:92:5d:37: fd:a8:fd:b6:ea:f3:5f:5d:1f:ca:49:8e:2c:7c:aa: 75:27:80:7f:f8:1f:e9:c0:b3:53:28:81:49:a8:97: df:39:73:ff:af:5c:3c:83:87:6f:04:35:53:00:0b: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3C:69:C0:B6:4B:F3:CA:22:1E:EA:26:91:F1:9F:80:A3:05:B4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5651f5ea-6045-34d7-b975-caffe4a1c210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:63:71:2f:eb:2d:27:ed:6d:43:4c:b4:1b:c7:54:80:03:6c: 0d:03:ea:34:fe:a3:41:fe:c1:b3:da:55:f8:48:1c:2f:cf:d9: f9:68:9f:7e:93:c5:75:53:59:58:19:87:e9:44:a9:9a:9f:f1: bf:79:ed:c3:4e:8b:8d:a3:40:4d:8d:ac:64:3c:75:c4:b6:80: d5:a3:ab:32:25:35:39:cd:36:7d:e5:de:e2:ec:ad:f4:d3:4f: 73:19:c0:6f:89:59:14:91:45:d9:70:a5:aa:cf:00:22:64:fe: 27:99:96:c6:f8:d2:18:58:c9:ce:30:70:36:a7:ef:64:c7:79: 1c:76:9d:6f:5f:e7:67:c8:9d:3f:76:9f:a0:39:51:d3:9f:3b: 1d:d6:0f:09:d6:51:4d:d2:6f:92:e2:7a:b8:f7:d3:f7:6e:cc: 44:61:5c:49:4e:55:7d:92:b4:ec:36:ed:67:77:34:18:f4:08: e7:14:f7:23:9f:70:42:8a:c6:56:80:64:9b:f1:71:b9:b5:26: f2:97:ac:1b:c4:72:7f:6e:10:00:80:83:f7:8e:5b:c3:c0:b8: 01:fd:3a:a5:7e:e6:e1:29:7f:44:74:c7:44:a9:af:b4:27:57: fa:22:98:dd:11:94:e3:b6:21:45:65:ad:6a:64:c2:1a:f4:56: dc:44:31:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWWcUepKX/o6OLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAyMVoXDTI1MTExMzIyMTAyMVowLzEtMCsGA1UEAxMk YWNlYWNlNGUtMTdjOS00MjUxLWI2YTMtMGFhZWVlNDliZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4HC4VZ0hxSKWEQCODlYm8wirwqVXrbNag8Q 6dYaTTk2fWp0Ag1XurV6eovBs2tV4GOoRydtfrHW0yNnJXg1i11+hpuQEoJZBR1U 3MF/QiHy5yFH1jhSBQbCFC5oodfx0fDqb37zgZqT2zqreNX6qBTxFC2NeWHTr6rm qFFtO/sRIX50METXelGwyBGtNmYt7XLLBM/GmEsLmlJobZ8itGZvpDRn/64MhPqf kkkbwyIwEUrgZ3I8pbxebJ19BVS3p+8nlf2aJ4q344qsw6uSXTf9qP226vNfXR/K SY4sfKp1J4B/+B/pwLNTKIFJqJffOXP/r1w8g4dvBDVTAAuFtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA8acC2S/PKIh7qJpHxn4CjBbRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTY1MWY1ZWEtNjA0NS0z NGQ3LWI5NzUtY2FmZmU0YTFjMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFjcS/rLSftbUNMtBvHVIADbA0D6jT+o0H+wbPaVfhIHC/P2flon36T xXVTWVgZh+lEqZqf8b957cNOi42jQE2NrGQ8dcS2gNWjqzIlNTnNNn3l3uLsrfTT T3MZwG+JWRSRRdlwparPACJk/ieZlsb40hhYyc4wcDan72THeRx2nW9f52fInT92 n6A5UdOfOx3WDwnWUU3Sb5Lierj30/duzERhXElOVX2StOw27Wd3NBj0COcU9yOf cEKKxlaAZJvxcbm1JvKXrBvEcn9uEACAg/eOW8PAuAH9OqV+5uEpf0R0x0Spr7Qn V/oimN0RlOO2IUVlrWpkwhr0VtxEMTw= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:14 2025 by rpki-client