$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa File: 129596f2-d342-390e-83e7-2de9a0526aed.roa (raw, json) Hash identifier: j2dWOx57lLEIq+ZojpT1aqa3obY0QefZg7s8sSNxANM= Subject key identifier: 41:B7:AA:80:EC:A4:B1:04:EF:50:62:67:3A:A1:7A:71:6C:F1:9B:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDFC964BED4461CC067A4000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa Signing time: Thu 21 Aug 2025 11:36:16 +0000 ROA not before: Thu 21 Aug 2025 11:36:16 +0000 ROA not after: Wed 19 Nov 2025 12:36:16 +0000 asID: 31898 IP address blocks: 134.70.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:fc:96:4b:ed:44:61:cc:06:7a:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 11:36:16 2025 GMT Not After : Nov 19 12:36:16 2025 GMT Subject: CN=ca80d711-7516-4c00-97ec-a1cc42d78d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:5e:55:0e:b0:2b:2a:96:f0:61:b7:91:c0: 1c:40:d1:a5:9c:0b:db:f5:1e:c7:0c:9b:c0:af:6f: e6:f1:88:85:67:a0:07:57:16:ef:2b:a0:2b:8a:87: 58:8e:dc:a2:10:e4:00:04:85:d5:65:93:ad:ac:2f: 4f:94:dd:b5:1b:54:2b:7e:a0:a5:3b:f9:93:7b:48: f5:4b:6c:ab:97:8a:06:d3:4c:f7:6e:d2:d8:2c:75: cc:d7:32:3c:e9:c8:c6:38:f2:eb:e4:42:67:17:36: b7:99:aa:ee:66:a9:19:ef:ca:89:e1:08:a6:6f:c7: fa:61:1c:f0:c7:63:35:1c:0c:cf:9c:09:0a:82:09: cd:5f:fc:16:87:33:a2:4c:17:fc:db:43:29:36:6a: 5b:9b:51:1c:67:3b:14:4b:28:1b:fe:31:39:77:f6: 27:2f:69:84:8e:78:ea:e8:55:83:ca:4d:01:12:0a: 50:19:05:71:b0:56:5d:1f:99:99:ee:16:08:8d:b3: dd:fe:23:0f:5e:11:31:31:8f:9b:9b:93:f0:d7:35: cd:15:9f:4e:83:48:06:7e:bc:ad:a7:b8:55:79:32: 1e:18:59:af:54:b6:f5:a3:64:d9:80:ac:f9:84:2e: ef:97:7e:45:32:78:5b:33:e1:50:3e:55:ca:d2:fd: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B7:AA:80:EC:A4:B1:04:EF:50:62:67:3A:A1:7A:71:6C:F1:9B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/129596f2-d342-390e-83e7-2de9a0526aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:84:0c:83:63:5e:21:7a:45:af:f5:1b:2d:09:a1:ea:de:00: c8:ce:56:3a:d8:e4:d6:b6:80:f5:3f:76:0b:00:20:ca:60:37: 7f:6d:a6:52:0a:2b:16:0b:58:36:e5:6e:8a:3c:6d:0c:20:5f: b1:1f:da:49:91:ce:b3:a3:03:77:0b:6e:0e:81:13:72:02:f8: ad:2f:88:b4:49:2f:fa:7f:19:ee:58:90:45:1c:cb:3e:ec:a8: d7:74:82:56:90:d8:17:6c:fe:52:06:cb:c6:14:d3:a9:71:64: 6f:72:06:26:93:5d:5e:9d:a1:48:53:2c:8f:2d:cf:4c:ef:71: bf:39:f1:4a:09:fa:54:7d:7c:b4:fd:1f:46:39:96:21:2b:87: 34:fb:43:d0:30:82:85:03:82:f9:72:4f:d1:01:31:cf:02:78: 54:99:59:df:39:11:c9:46:a2:19:55:db:be:fd:af:e1:aa:33: 5e:1e:f7:5c:11:ed:3e:31:5a:53:d4:33:db:bc:55:6c:de:55: 55:ff:6b:1d:51:05:a9:75:39:bf:40:22:c5:df:6d:27:39:4a: 03:fb:a1:d6:7e:50:a7:3b:81:0a:64:12:d0:90:49:da:53:9e: 9a:d4:a4:47:04:b5:e3:c6:47:24:89:bf:26:9c:36:09:11:14: 53:f7:3c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt/JZL7URhzAZ6QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTExMzYxNloXDTI1MTExOTEyMzYxNlowLzEtMCsGA1UEAxMk Y2E4MGQ3MTEtNzUxNi00YzAwLTk3ZWMtYTFjYzQyZDc4ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65eVQ6wKyqW8GG3kcAcQNGlnAvb9R7HDJvA r2/m8YiFZ6AHVxbvK6AriodYjtyiEOQABIXVZZOtrC9PlN21G1QrfqClO/mTe0j1 S2yrl4oG00z3btLYLHXM1zI86cjGOPLr5EJnFza3maruZqkZ78qJ4Qimb8f6YRzw x2M1HAzPnAkKggnNX/wWhzOiTBf820MpNmpbm1EcZzsUSygb/jE5d/YnL2mEjnjq 6FWDyk0BEgpQGQVxsFZdH5mZ7hYIjbPd/iMPXhExMY+bm5Pw1zXNFZ9Og0gGfryt p7hVeTIeGFmvVLb1o2TZgKz5hC7vl35FMnhbM+FQPlXK0v3SyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG3qoDspLEE71BiZzqhenFs8Zt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTI5NTk2ZjItZDM0Mi0z OTBlLTgzZTctMmRlOWEwNTI2YWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGEDINjXiF6Ra/1Gy0JoereAMjOVjrY5Na2gPU/dgsAIMpgN39tplIK KxYLWDblboo8bQwgX7Ef2kmRzrOjA3cLbg6BE3IC+K0viLRJL/p/Ge5YkEUcyz7s qNd0glaQ2Bds/lIGy8YU06lxZG9yBiaTXV6doUhTLI8tz0zvcb858UoJ+lR9fLT9 H0Y5liErhzT7Q9AwgoUDgvlyT9EBMc8CeFSZWd85EclGohlV2779r+GqM14e91wR 7T4xWlPUM9u8VWzeVVX/ax1RBal1Ob9AIsXfbSc5SgP7odZ+UKc7gQpkEtCQSdpT nprUpEcEtePGRySJvyacNgkRFFP3PIE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:04 2025 by rpki-client