$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa File: a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa (raw, json) Hash identifier: h74npxGJUk0flIi/5HpIqacPpKo0ucNcxoQHb6AaTX8= Subject key identifier: 8C:CC:9B:8C:BC:85:5E:B1:98:F0:93:CD:63:37:4A:DB:E8:DA:14:68 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91B70B5894E8531C4D85B40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa Signing time: Tue 19 Aug 2025 17:39:24 +0000 ROA not before: Tue 19 Aug 2025 17:39:24 +0000 ROA not after: Mon 17 Nov 2025 18:39:24 +0000 asID: 31898 IP address blocks: 134.70.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1b:70:b5:89:4e:85:31:c4:d8:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:39:24 2025 GMT Not After : Nov 17 18:39:24 2025 GMT Subject: CN=501fbea9-506f-46da-8c86-ac3bf07f8de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b0:92:c8:9e:d9:cc:f3:ae:b7:2e:b1:b1:11: b8:0a:be:0f:64:d2:66:bc:00:97:a0:5d:45:33:9f: be:2b:bc:f3:81:f9:30:3c:a7:92:a4:cd:2f:0a:10: 2c:7a:d8:2a:4f:6c:66:17:2d:7d:e2:58:d2:fc:72: a1:17:0e:dd:9a:4c:1f:86:7c:e8:26:1f:f9:e3:f6: a4:3b:69:e2:dc:05:20:5d:8e:a0:4c:fa:82:a8:09: 08:64:00:b0:b7:a0:ab:a4:0f:a8:3d:e4:18:25:20: 70:1e:5f:93:08:08:15:7e:5e:f4:e7:18:4a:16:84: 0f:d9:ea:02:4b:4f:5d:f6:fb:dd:d6:ee:9e:69:f5: 88:8c:d0:3e:aa:cb:f4:43:ee:b1:b3:1d:61:d8:22: d5:db:28:11:2e:7c:7e:06:05:55:4e:d4:84:af:db: 52:11:3d:b7:43:a2:18:96:b7:0d:01:bf:dc:33:b8: e3:3b:66:06:a9:c3:9f:25:54:79:98:b3:d3:36:2c: 6f:09:31:90:77:e2:e2:27:da:b4:73:cd:37:c6:a6: f1:e4:55:d8:b8:0a:20:21:8e:fa:c7:b6:01:81:a9: 37:bf:94:b1:dc:39:9c:63:aa:d5:b8:05:12:ca:7c: 77:53:c3:6d:1f:67:19:0e:29:b4:5f:29:96:f9:e4: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CC:9B:8C:BC:85:5E:B1:98:F0:93:CD:63:37:4A:DB:E8:DA:14:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8f7e660-fe04-3fb4-b8af-c0b56ed3bdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:11:f0:9e:67:f4:3c:7b:aa:cd:af:91:35:ed:c5:e6:02:90: 72:57:48:49:73:e9:75:0a:2b:4c:98:2e:28:e4:ec:13:3c:16: 3a:aa:6e:e1:47:25:fc:36:33:1d:ea:75:33:13:f3:30:78:1b: 85:59:05:b5:dc:ce:61:e3:1c:06:80:a9:1b:d6:49:03:61:42: 54:68:9d:cd:3c:3d:0e:c9:dc:d8:f5:27:95:bf:ed:4d:7a:28: 93:e0:7f:bc:33:99:2d:0c:61:68:47:0c:2d:d0:8e:0d:e7:63: 98:29:22:67:8e:38:f8:e2:ce:a2:4a:8e:c7:37:4d:c7:e5:96: af:0d:c1:07:1c:b5:9e:ac:d6:c9:a0:6d:4a:9e:09:73:4a:80: 2c:1f:80:cd:21:f7:a6:3d:df:11:d7:c0:61:c1:8f:f7:3a:66: f6:a5:51:28:df:62:f2:bb:28:9f:8b:b0:00:af:40:90:1d:50: e6:34:fc:8e:a1:79:07:4a:e7:6a:b2:d8:51:22:2e:1c:2f:cd: 16:0f:1e:4b:0a:25:6e:31:ba:34:7d:23:e5:73:52:42:15:f4: f3:aa:c7:7e:eb:be:d0:a8:e8:a9:99:aa:5d:61:8d:ed:04:52: 25:36:0c:7e:16:89:1b:2a:80:88:58:30:c0:91:2f:04:0e:b8: 97:af:fc:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpG3C1iU6FMcTYW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3MzkyNFoXDTI1MTExNzE4MzkyNFowLzEtMCsGA1UEAxMk NTAxZmJlYTktNTA2Zi00NmRhLThjODYtYWMzYmYwN2Y4ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbCSyJ7ZzPOuty6xsRG4Cr4PZNJmvACXoF1F M5++K7zzgfkwPKeSpM0vChAsetgqT2xmFy194ljS/HKhFw7dmkwfhnzoJh/54/ak O2ni3AUgXY6gTPqCqAkIZACwt6CrpA+oPeQYJSBwHl+TCAgVfl705xhKFoQP2eoC S09d9vvd1u6eafWIjNA+qsv0Q+6xsx1h2CLV2ygRLnx+BgVVTtSEr9tSET23Q6IY lrcNAb/cM7jjO2YGqcOfJVR5mLPTNixvCTGQd+LiJ9q0c803xqbx5FXYuAogIY76 x7YBgak3v5Sx3DmcY6rVuAUSynx3U8NtH2cZDim0XymW+eRBJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzMm4y8hV6xmPCTzWM3Stvo2hRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThmN2U2NjAtZmUwNC0z ZmI0LWI4YWYtYzBiNTZlZDNiZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgR8J5n9Dx7qs2vkTXtxeYCkHJXSElz6XUKK0yYLijk7BM8FjqqbuFH Jfw2Mx3qdTMT8zB4G4VZBbXczmHjHAaAqRvWSQNhQlRonc08PQ7J3Nj1J5W/7U16 KJPgf7wzmS0MYWhHDC3Qjg3nY5gpImeOOPjizqJKjsc3Tcfllq8NwQcctZ6s1smg bUqeCXNKgCwfgM0h96Y93xHXwGHBj/c6ZvalUSjfYvK7KJ+LsACvQJAdUOY0/I6h eQdK52qy2FEiLhwvzRYPHksKJW4xujR9I+VzUkIV9POqx37rvtCo6KmZql1hje0E UiU2DH4WiRsqgIhYMMCRLwQOuJev/G0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:22:54 2025 by rpki-client