$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa File: 3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa (raw, json) Hash identifier: ryqMARsz0rHLG3MbkZaizjvBAntgd4a9tiNs5iQawYA= Subject key identifier: 82:1A:65:C5:91:C3:4D:95:59:4B:62:7A:B8:12:1B:3C:60:68:AA:78 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0EEFB050E44FF8DC6582BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa Signing time: Fri 22 Aug 2025 12:56:17 +0000 ROA not before: Fri 22 Aug 2025 12:56:17 +0000 ROA not after: Thu 20 Nov 2025 13:56:17 +0000 asID: 31898 IP address blocks: 134.70.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:ee:fb:05:0e:44:ff:8d:c6:58:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 12:56:17 2025 GMT Not After : Nov 20 13:56:17 2025 GMT Subject: CN=018ce8de-f4fd-42d9-9d88-e7c8a93030cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:cf:81:4c:c3:2e:be:a0:41:89:a6:8f:23: 46:d6:40:89:ee:d2:64:bb:1d:85:52:bb:d0:fc:65: a3:90:83:49:4c:d6:fe:ae:be:ee:78:de:a0:fa:42: e7:c3:e1:e5:db:be:da:e8:2c:0c:50:ec:35:bb:07: 66:3d:a8:8c:95:09:a4:34:31:d5:44:1c:1e:e8:83: c2:00:58:3e:b4:9d:cf:73:60:32:1a:4b:df:b3:fa: 20:06:28:df:67:fe:63:8e:d9:61:b8:5b:ad:66:57: 12:1b:a6:25:47:4f:f2:43:16:07:a9:72:48:80:a5: 5f:65:db:e8:e4:f1:6f:b8:2f:32:86:29:6a:20:0b: 14:27:8b:3d:61:82:b5:e9:8b:30:1d:f5:6c:51:93: a0:ca:ea:6f:79:3c:8c:f7:cd:aa:f6:15:86:4d:52: 46:58:af:5b:35:b1:e6:2e:6b:3f:db:92:4f:ae:80: f0:ab:72:04:50:eb:b5:d8:73:1d:5c:31:14:8e:f5: c1:1e:25:48:77:d6:c2:55:85:96:bc:3a:ec:fe:40: 6a:39:64:5a:cb:f6:6e:de:47:40:73:3f:ec:f5:89: b5:57:d3:7c:b2:a7:f0:1e:60:30:4d:4f:69:f7:7e: 54:09:2d:e1:34:68:3c:ff:b2:21:eb:f3:e5:17:9a: ec:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:65:C5:91:C3:4D:95:59:4B:62:7A:B8:12:1B:3C:60:68:AA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d0aac5c-c7c2-3a59-9ab8-11c82d1ffdca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f1:0d:5f:59:73:10:d2:8e:bb:d4:57:9a:d0:8e:13:68:f9: a1:4f:b1:9c:7b:84:97:4b:8f:fd:dc:99:b9:55:a7:6f:29:34: c5:26:35:72:b0:55:d9:49:f7:5f:4a:17:0a:43:3c:99:4a:20: 97:25:71:b7:be:5e:d7:7b:c4:76:e6:b1:77:98:aa:13:54:99: 52:f6:1b:20:28:7b:ca:a9:7f:ea:fb:bf:8e:e5:3a:fe:63:8e: 39:b1:42:69:e1:b2:02:fa:ed:fc:64:05:8c:1b:37:0b:4e:64: ab:b4:17:f0:1d:87:56:bc:a2:e2:03:7e:42:c1:3b:9f:10:c5: 0d:a8:42:7f:ce:2c:fa:9b:9c:6d:54:d9:4e:6a:33:85:33:64: 6b:cc:8b:53:f8:f8:51:5f:81:66:45:91:f7:ba:f2:28:29:bf: 42:5f:96:b9:eb:97:6b:58:22:46:63:59:0a:d4:b1:9a:bd:56: e7:c2:c2:ea:38:e2:4d:89:2b:e7:d2:0a:6e:f6:93:50:0b:07: 6d:ef:5f:da:cf:d4:98:c3:ed:25:0b:3f:ed:fc:8e:1c:d5:d9: 86:1d:09:18:63:19:57:d6:33:96:ef:2f:c5:f7:f5:a8:03:dd: 0e:f7:29:d3:cb:85:71:48:b8:cd:d7:4c:f6:a5:82:dd:17:3f: 93:0f:45:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw7vsFDkT/jcZYK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjEyNTYxN1oXDTI1MTEyMDEzNTYxN1owLzEtMCsGA1UEAxMk MDE4Y2U4ZGUtZjRmZC00MmQ5LTlkODgtZTdjOGE5MzAzMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb7PgUzDLr6gQYmmjyNG1kCJ7tJkux2FUrvQ /GWjkINJTNb+rr7ueN6g+kLnw+Hl277a6CwMUOw1uwdmPaiMlQmkNDHVRBwe6IPC AFg+tJ3Pc2AyGkvfs/ogBijfZ/5jjtlhuFutZlcSG6YlR0/yQxYHqXJIgKVfZdvo 5PFvuC8yhilqIAsUJ4s9YYK16YswHfVsUZOgyupveTyM982q9hWGTVJGWK9bNbHm Lms/25JProDwq3IEUOu12HMdXDEUjvXBHiVId9bCVYWWvDrs/kBqOWRay/Zu3kdA cz/s9Ym1V9N8sqfwHmAwTU9p935UCS3hNGg8/7Ih6/PlF5rsfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIaZcWRw02VWUtiergSGzxgaKp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2QwYWFjNWMtYzdjMi0z YTU5LTlhYjgtMTFjODJkMWZmZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTxDV9ZcxDSjrvUV5rQjhNo+aFPsZx7hJdLj/3cmblVp28pNMUmNXKw VdlJ919KFwpDPJlKIJclcbe+Xtd7xHbmsXeYqhNUmVL2GyAoe8qpf+r7v47lOv5j jjmxQmnhsgL67fxkBYwbNwtOZKu0F/Adh1a8ouIDfkLBO58QxQ2oQn/OLPqbnG1U 2U5qM4UzZGvMi1P4+FFfgWZFkfe68igpv0Jflrnrl2tYIkZjWQrUsZq9VufCwuo4 4k2JK+fSCm72k1ALB23vX9rP1JjD7SULP+38jhzV2YYdCRhjGVfWM5bvL8X39agD 3Q73KdPLhXFIuM3XTPalgt0XP5MPRWI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:44:32 2025 by rpki-client