$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7dbf93-6db3-3c75-b528-13567d82429d.roa File: cc7dbf93-6db3-3c75-b528-13567d82429d.roa (raw, json) Hash identifier: EQcRKJ1yr+CeA/ltZRHgn5SNQ0F+tId3jIxwTpuznkk= Subject key identifier: 07:BE:44:8E:C6:D4:51:73:88:B9:F9:5B:11:25:C8:07:3C:99:F4:FB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE4373BF39FBE65FF9ABF180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7dbf93-6db3-3c75-b528-13567d82429d.roa Signing time: Fri 15 Aug 2025 20:26:07 +0000 ROA not before: Fri 15 Aug 2025 20:26:07 +0000 ROA not after: Thu 13 Nov 2025 21:26:07 +0000 asID: 31898 IP address blocks: 134.70.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:43:73:bf:39:fb:e6:5f:f9:ab:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 20:26:07 2025 GMT Not After : Nov 13 21:26:07 2025 GMT Subject: CN=528ef771-d6c8-4fce-85fa-a9ea2489af83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:17:f9:e0:72:9c:f9:75:9b:3e:e0:b0:80: 53:cc:3b:91:18:f4:3e:7c:10:20:92:c6:37:6e:f4: ef:57:8d:7c:6e:43:33:58:dc:47:ef:f2:c3:99:01: 19:b1:db:36:fb:33:c5:7d:66:be:d9:84:51:f9:a0: d3:9c:e5:20:4e:95:11:31:c9:66:c2:57:f0:80:60: 42:ba:5b:18:ab:4c:c7:2d:10:10:dc:39:53:b9:a8: 17:25:07:3e:e7:21:25:f3:d0:99:64:34:9d:42:db: f9:d2:be:d3:aa:89:c2:73:f1:15:3f:fd:85:9e:ca: 30:ed:9d:88:b4:36:c5:f0:99:f3:53:e5:67:93:0e: 7d:9e:b1:07:4e:37:31:f2:0b:2a:ed:90:0a:91:9a: 7b:57:98:8f:42:86:82:4d:1c:6c:9b:69:e3:d1:8d: 9d:f8:b6:e7:ee:aa:fb:86:4f:42:42:df:40:81:8e: b8:cb:12:04:6b:ac:22:65:82:e0:eb:2c:54:86:0b: bc:35:1d:88:6a:bc:b9:91:a7:70:50:a0:e6:a9:00: 6a:80:ee:83:90:db:33:2f:2b:4c:d9:a7:c1:79:e4: 7d:c2:9f:8a:6d:f4:12:1f:d0:88:7b:38:3e:8e:5e: 41:53:a2:9a:95:98:53:2c:f0:31:f7:ec:7e:1b:f6: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BE:44:8E:C6:D4:51:73:88:B9:F9:5B:11:25:C8:07:3C:99:F4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7dbf93-6db3-3c75-b528-13567d82429d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:13:9b:48:fb:b7:22:2d:3d:bb:92:38:2e:1d:8d:44:6e:1a: 3b:eb:2a:e1:9a:59:c0:95:c8:a3:4b:95:85:10:0d:17:52:43: 4a:94:bb:de:dc:44:8f:80:64:86:cb:93:fe:eb:ac:b2:71:36: f5:6a:5e:77:41:06:ab:9c:7f:b9:80:3d:c1:d0:81:0f:5d:3c: 5f:53:b1:b0:fc:e2:77:bf:e2:e6:ef:ac:2b:61:24:05:a3:d1: dc:6b:d3:86:50:33:19:39:47:56:06:38:76:1e:65:79:a0:ec: f0:c2:31:8b:22:b6:67:39:48:36:b8:b2:82:27:96:e2:18:53: bb:47:6d:b1:e8:4d:26:90:6f:74:c6:23:9a:2e:65:1e:c3:8d: 91:7c:3f:45:b3:db:0d:06:e7:74:01:bd:d8:ba:e1:43:a4:74: 50:d8:06:1b:03:f5:bd:26:c8:11:6b:c8:f7:74:07:7d:55:d2: 14:f6:bc:35:33:ab:ab:ec:04:11:9c:ec:aa:2f:27:e5:79:b4: a8:5c:0e:9a:4c:d7:3a:03:11:f3:83:7d:d5:a5:4e:67:fc:0b: 77:27:ea:58:e7:78:20:33:67:75:61:1d:c9:f7:35:ee:3a:ad: e2:94:a6:ef:f9:63:97:04:47:cd:5b:57:04:ef:0e:05:e9:54: 4d:ac:72:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreQ3O/OfvmX/mr8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIwMjYwN1oXDTI1MTExMzIxMjYwN1owLzEtMCsGA1UEAxMk NTI4ZWY3NzEtZDZjOC00ZmNlLTg1ZmEtYTllYTI0ODlhZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdAX+eBynPl1mz7gsIBTzDuRGPQ+fBAgksY3 bvTvV418bkMzWNxH7/LDmQEZsds2+zPFfWa+2YRR+aDTnOUgTpURMclmwlfwgGBC ulsYq0zHLRAQ3DlTuagXJQc+5yEl89CZZDSdQtv50r7TqonCc/EVP/2Fnsow7Z2I tDbF8JnzU+Vnkw59nrEHTjcx8gsq7ZAKkZp7V5iPQoaCTRxsm2nj0Y2d+Lbn7qr7 hk9CQt9AgY64yxIEa6wiZYLg6yxUhgu8NR2Iary5kadwUKDmqQBqgO6DkNszLytM 2afBeeR9wp+KbfQSH9CIezg+jl5BU6KalZhTLPAx9+x+G/YBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe+RI7G1FFziLn5WxElyAc8mfT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2M3ZGJmOTMtNmRiMy0z Yzc1LWI1MjgtMTM1NjdkODI0MjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsTm0j7tyItPbuSOC4djURuGjvrKuGaWcCVyKNLlYUQDRdSQ0qUu97c RI+AZIbLk/7rrLJxNvVqXndBBqucf7mAPcHQgQ9dPF9TsbD84ne/4ubvrCthJAWj 0dxr04ZQMxk5R1YGOHYeZXmg7PDCMYsitmc5SDa4soInluIYU7tHbbHoTSaQb3TG I5ouZR7DjZF8P0Wz2w0G53QBvdi64UOkdFDYBhsD9b0myBFryPd0B31V0hT2vDUz q6vsBBGc7KovJ+V5tKhcDppM1zoDEfODfdWlTmf8C3cn6ljneCAzZ3VhHcn3Ne46 reKUpu/5Y5cER81bVwTvDgXpVE2schI= -----END CERTIFICATE-----Generated at Wed Aug 20 03:31:31 2025 by rpki-client