$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebef63ed-0cbf-3472-a2b2-e50070a6eca5.roa File: ebef63ed-0cbf-3472-a2b2-e50070a6eca5.roa (raw, json) Hash identifier: qdP2y14eDuRVGTG1VISlKp+qOzZmRKD9XhLDGYW1Bm0= Subject key identifier: 0C:B9:C4:23:ED:86:08:44:B8:0D:43:C5:FE:45:2B:BC:54:CF:91:B2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE6B609138B09F9FFFA014D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebef63ed-0cbf-3472-a2b2-e50070a6eca5.roa Signing time: Mon 18 Aug 2025 21:03:28 +0000 ROA not before: Mon 18 Aug 2025 21:03:28 +0000 ROA not after: Sun 16 Nov 2025 22:03:28 +0000 asID: 31898 IP address blocks: 134.70.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:b6:09:13:8b:09:f9:ff:fa:01:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 18 21:03:28 2025 GMT Not After : Nov 16 22:03:28 2025 GMT Subject: CN=7941ee3b-5416-46a1-9c85-a5267021a6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:6f:17:74:51:24:fe:79:ce:40:ce:1e:7b: b3:0b:35:e1:7f:79:da:75:02:d5:40:90:90:9c:19: f4:c4:c2:0f:d0:9b:36:fa:4c:a5:c3:61:32:53:d7: 21:6a:c5:ab:ef:f0:92:df:50:06:61:26:64:ff:5b: 62:07:a1:f7:11:32:ac:de:b5:fa:21:40:f9:a3:0e: 51:4c:f1:d2:21:b2:3c:ae:43:f4:1c:03:bb:32:00: 2c:84:ad:34:b8:df:3e:ba:48:f5:9b:33:cf:6d:0d: 43:5b:5f:55:02:59:83:4d:3e:3f:0a:61:68:ef:d0: 35:24:55:77:bb:e9:a8:fc:fe:89:51:c1:0b:d3:04: 83:19:ac:67:51:96:dd:01:55:ac:48:ab:9c:cb:cc: 29:e5:9b:00:1d:04:cc:81:5d:a9:a8:94:e3:f4:23: d4:2b:00:b9:e6:ae:5d:cf:7b:0e:08:ec:ca:8f:9a: 39:14:e5:0a:4b:0e:9e:5a:02:7c:62:16:82:2a:6e: a5:9a:9f:75:66:f1:34:72:56:c7:58:24:86:26:4c: 1a:9e:4d:b8:3c:b4:63:48:79:30:09:df:53:9d:17: ac:71:39:e3:7f:78:35:22:c2:d0:64:1d:c9:d2:19: 68:31:9b:59:4e:5c:d1:f6:44:82:7a:fc:03:66:a9: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B9:C4:23:ED:86:08:44:B8:0D:43:C5:FE:45:2B:BC:54:CF:91:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebef63ed-0cbf-3472-a2b2-e50070a6eca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c3:a7:28:25:e0:87:f5:15:96:ad:90:40:ca:ff:b4:fc:5d: bb:ca:76:c5:88:19:6f:f7:de:2e:d8:32:0f:8b:bb:b0:83:94: 0d:97:f8:a1:b1:69:28:95:fd:bd:96:34:94:18:27:fd:14:42: 83:c5:dc:a6:64:16:ec:31:8f:f5:21:7f:a1:c5:fc:18:62:0c: e9:95:84:82:c9:e9:47:67:51:6d:aa:07:01:aa:21:27:e3:2f: fb:f4:95:71:f8:be:ec:75:73:a2:24:02:9b:be:7c:db:f6:4e: d9:e2:51:9e:a3:25:93:76:c9:8c:f5:74:2f:94:37:34:df:15: ad:a6:eb:37:43:3a:7e:fd:c8:6a:a1:f6:d3:fc:f4:2d:68:0c: b5:8e:b8:e5:c7:82:1f:12:9f:f2:f2:c5:ce:29:78:fa:3b:34: 6a:34:ce:ff:e1:4e:e2:f7:55:0c:56:c9:1d:ae:0b:8d:68:7a: af:b8:f3:12:2a:0c:d9:14:f5:41:87:39:01:13:0f:0f:08:31: f1:d1:4a:11:41:2f:22:a7:5a:1f:d1:ca:aa:64:28:b3:55:64: 68:7a:f2:53:39:2f:da:37:17:aa:e0:85:27:bc:6f:63:41:0b: 0d:cc:55:ca:33:16:7b:b0:79:a9:17:29:e3:1b:5d:81:56:95: 72:bd:5b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErmtgkTiwn5//oBTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxODIxMDMyOFoXDTI1MTExNjIyMDMyOFowLzEtMCsGA1UEAxMk Nzk0MWVlM2ItNTQxNi00NmExLTljODUtYTUyNjcwMjFhNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbZvF3RRJP55zkDOHnuzCzXhf3nadQLVQJCQ nBn0xMIP0Js2+kylw2EyU9chasWr7/CS31AGYSZk/1tiB6H3ETKs3rX6IUD5ow5R TPHSIbI8rkP0HAO7MgAshK00uN8+ukj1mzPPbQ1DW19VAlmDTT4/CmFo79A1JFV3 u+mo/P6JUcEL0wSDGaxnUZbdAVWsSKucy8wp5ZsAHQTMgV2pqJTj9CPUKwC55q5d z3sOCOzKj5o5FOUKSw6eWgJ8YhaCKm6lmp91ZvE0clbHWCSGJkwank24PLRjSHkw Cd9TnRescTnjf3g1IsLQZB3J0hloMZtZTlzR9kSCevwDZqkiFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAy5xCPthghEuA1Dxf5FK7xUz5GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWJlZjYzZWQtMGNiZi0z NDcyLWEyYjItZTUwMDcwYTZlY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhka0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfDpygl4If1FZatkEDK/7T8XbvKdsWIGW/33i7YMg+Lu7CDlA2X+KGx aSiV/b2WNJQYJ/0UQoPF3KZkFuwxj/Uhf6HF/BhiDOmVhILJ6UdnUW2qBwGqISfj L/v0lXH4vux1c6IkApu+fNv2TtniUZ6jJZN2yYz1dC+UNzTfFa2m6zdDOn79yGqh 9tP89C1oDLWOuOXHgh8Sn/Lyxc4pePo7NGo0zv/hTuL3VQxWyR2uC41oeq+48xIq DNkU9UGHOQETDw8IMfHRShFBLyKnWh/RyqpkKLNVZGh68lM5L9o3F6rghSe8b2NB Cw3MVcozFnuweakXKeMbXYFWlXK9W48= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:20 2025 by rpki-client