$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9da47e8-35d6-371f-9d24-c5352f846da5.roa File: b9da47e8-35d6-371f-9d24-c5352f846da5.roa (raw, json) Hash identifier: Xoktk6TZ7wgH4d/1PCyBj8n0ccr380uq3wD2BHVP308= Subject key identifier: 90:D2:F7:87:DB:81:89:E5:A4:0A:1A:B8:43:93:51:8F:18:90:0C:48 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADBEB6574ABD295E806EE1A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9da47e8-35d6-371f-9d24-c5352f846da5.roa Signing time: Fri 15 Aug 2025 00:17:05 +0000 ROA not before: Fri 15 Aug 2025 00:17:05 +0000 ROA not after: Thu 13 Nov 2025 01:17:05 +0000 asID: 31898 IP address blocks: 134.70.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:eb:65:74:ab:d2:95:e8:06:ee:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 00:17:05 2025 GMT Not After : Nov 13 01:17:05 2025 GMT Subject: CN=06f6dcd2-7f8e-4d67-a790-617fdc24b80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:7d:12:75:e0:7b:86:1b:1c:22:04:b6:17: 11:df:ea:51:c7:d3:4d:e9:71:05:1c:62:33:94:e9: 91:72:91:e2:b6:a5:15:d4:9a:ff:63:25:db:ba:da: 49:44:59:ae:13:14:54:0a:05:0c:48:3f:2e:a2:25: f5:b6:8d:02:42:68:18:d2:52:03:a2:11:05:87:c1: 41:b0:4e:cd:0f:aa:14:6d:25:22:9b:7e:1b:b3:ce: 19:2c:3c:2e:df:bb:bb:88:f3:fd:c1:e1:59:aa:f0: 0e:81:bb:8c:b8:cb:4c:58:85:76:76:98:95:e7:93: f5:8c:a7:5d:3b:00:9a:fe:4f:e3:3f:ad:17:7f:c9: 15:9b:61:18:a0:7d:9b:76:ce:8a:32:82:cc:21:99: 8e:2f:88:1d:a8:cf:06:d0:fd:dc:58:f0:58:b1:78: f7:14:38:88:5d:00:4e:68:0f:3c:74:86:dd:86:60: f7:74:46:16:11:4f:e9:58:db:4c:e8:9c:30:a5:0a: d1:e6:b2:8c:ff:e7:10:6c:86:91:82:0c:72:b2:5f: fc:a9:b1:7d:9d:6c:4c:a8:48:6b:03:d2:2c:4d:4a: aa:4b:29:6a:ed:19:3f:98:f6:34:ff:51:f3:ba:d3: f9:00:bc:df:cf:08:c5:40:da:66:72:13:e6:15:f8: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D2:F7:87:DB:81:89:E5:A4:0A:1A:B8:43:93:51:8F:18:90:0C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9da47e8-35d6-371f-9d24-c5352f846da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:96:39:e0:81:59:b0:10:df:95:ad:b0:2a:ea:fc:ee:eb:8c: ff:be:19:07:ed:0a:4a:b3:f9:c6:f8:c1:17:84:e0:06:a7:a7: 9c:af:b7:c1:86:6b:a9:a8:b0:20:c9:ce:87:af:ee:ee:93:69: 57:56:26:e5:20:3b:5b:58:10:fa:be:4b:c4:b4:9e:81:b0:79: 77:20:6b:44:c2:5e:7f:cb:14:59:dc:d2:8b:67:28:49:58:98: fb:b7:7f:10:6b:37:5d:c2:62:b1:a7:bd:b4:b9:43:9e:08:f1: 0f:b1:c0:dd:f2:c7:fd:9d:67:0b:7e:bd:45:ae:a1:1b:a8:43: 59:36:b2:19:4e:5a:38:4d:8a:45:38:0b:04:84:88:49:50:7e: 7d:4f:bf:4e:3d:a7:a3:d1:8e:8d:ce:d0:d3:0d:59:3b:ba:15: 90:68:82:69:1d:1a:01:70:3b:9a:5e:8e:a4:09:17:86:48:88: 7b:2c:5e:ac:75:3c:30:98:0e:13:a6:c0:a3:41:96:fc:1d:e4: 91:05:a6:bc:b8:ad:84:ca:f6:1d:e4:37:c8:2f:69:1a:c8:94: db:be:90:fe:44:96:86:13:e9:19:e1:b3:fd:29:f4:dc:02:46: 36:ff:39:5b:4f:0c:35:b0:54:6f:77:38:c3:d8:85:19:a8:25: ff:9a:b6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErb62V0q9KV6AbuGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTAwMTcwNVoXDTI1MTExMzAxMTcwNVowLzEtMCsGA1UEAxMk MDZmNmRjZDItN2Y4ZS00ZDY3LWE3OTAtNjE3ZmRjMjRiODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoup9EnXge4YbHCIEthcR3+pRx9NN6XEFHGIz lOmRcpHitqUV1Jr/YyXbutpJRFmuExRUCgUMSD8uoiX1to0CQmgY0lIDohEFh8FB sE7ND6oUbSUim34bs84ZLDwu37u7iPP9weFZqvAOgbuMuMtMWIV2dpiV55P1jKdd OwCa/k/jP60Xf8kVm2EYoH2bds6KMoLMIZmOL4gdqM8G0P3cWPBYsXj3FDiIXQBO aA88dIbdhmD3dEYWEU/pWNtM6JwwpQrR5rKM/+cQbIaRggxysl/8qbF9nWxMqEhr A9IsTUqqSylq7Rk/mPY0/1HzutP5ALzfzwjFQNpmchPmFfivkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDS94fbgYnlpAoauEOTUY8YkAxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlkYTQ3ZTgtMzVkNi0z NzFmLTlkMjQtYzUzNTJmODQ2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWWOeCBWbAQ35WtsCrq/O7rjP++GQftCkqz+cb4wReE4Aanp5yvt8GG a6mosCDJzoev7u6TaVdWJuUgO1tYEPq+S8S0noGweXcga0TCXn/LFFnc0otnKElY mPu3fxBrN13CYrGnvbS5Q54I8Q+xwN3yx/2dZwt+vUWuoRuoQ1k2shlOWjhNikU4 CwSEiElQfn1Pv049p6PRjo3O0NMNWTu6FZBogmkdGgFwO5pejqQJF4ZIiHssXqx1 PDCYDhOmwKNBlvwd5JEFpry4rYTK9h3kN8gvaRrIlNu+kP5EloYT6Rnhs/0p9NwC Rjb/OVtPDDWwVG93OMPYhRmoJf+atrE= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:57 2025 by rpki-client