$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa56d9a-1de7-3056-aa42-07d2b470234d.roa File: 3fa56d9a-1de7-3056-aa42-07d2b470234d.roa (raw, json) Hash identifier: WUwmbgOg0oaPKMZTbMbugjwp0/oCVpdRYDJMkPzq9Mg= Subject key identifier: 4C:64:01:F8:E1:E5:31:B7:04:48:64:23:0B:EB:0B:00:9D:76:7C:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF14DDB30E2E56D95DBB4800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa56d9a-1de7-3056-aa42-07d2b470234d.roa Signing time: Thu 21 Aug 2025 21:01:00 +0000 ROA not before: Thu 21 Aug 2025 21:01:00 +0000 ROA not after: Wed 19 Nov 2025 22:01:00 +0000 asID: 31898 IP address blocks: 134.70.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:14:dd:b3:0e:2e:56:d9:5d:bb:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 21:01:00 2025 GMT Not After : Nov 19 22:01:00 2025 GMT Subject: CN=7cf93945-ff9e-4b1e-aa84-797e37a7d947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:14:e5:6d:86:27:fa:75:28:31:34:4e:ff: ab:92:6f:7a:5c:b8:2e:97:52:bb:b6:20:c2:ea:fd: 0d:b8:f5:65:40:ef:2b:ea:01:97:65:aa:a6:a6:e8: 75:d0:87:c8:f9:80:0d:fe:b8:c9:aa:21:23:c9:ae: 6c:c2:a7:ac:b9:5a:99:f9:83:77:4e:88:b4:c4:3e: 3d:66:d2:26:e9:05:5a:86:f7:aa:c5:30:0a:73:a5: 72:bf:84:d3:1d:c5:f5:ad:d8:b3:f8:5d:f7:51:f3: c9:06:00:6e:cc:6f:26:7f:e6:ea:c2:66:3d:e5:b3: 03:28:e2:92:e3:54:96:1c:7d:34:53:78:3d:ea:81: 3e:a9:3f:7c:26:ea:6a:e9:34:24:e2:8b:3e:35:fb: 73:e1:8e:b5:a9:3f:84:b8:25:8d:27:7e:42:95:06: f1:ea:0c:63:58:0d:d8:ec:dd:06:8d:c1:89:83:61: 71:c1:77:99:19:b7:da:a3:e3:e3:5d:d7:4f:47:70: e6:22:3a:7c:8d:9a:b1:aa:c3:27:41:db:90:f3:3d: 9a:46:66:06:9c:d7:fe:0c:99:8c:6e:6a:46:42:d5: 74:67:22:a7:89:2a:10:0f:3d:85:14:e8:91:c1:e9: 7d:ba:a6:65:ad:e7:1d:85:bc:34:12:20:2c:fe:2c: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:64:01:F8:E1:E5:31:B7:04:48:64:23:0B:EB:0B:00:9D:76:7C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fa56d9a-1de7-3056-aa42-07d2b470234d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2c:53:71:62:ac:fb:a9:52:18:ad:86:e7:6b:af:79:b4:1f: fb:05:85:b0:f6:96:e9:4e:9c:a9:4d:33:92:c8:45:92:88:57: a2:12:fc:ee:9a:a0:e2:c8:99:a3:1c:cc:70:34:b9:48:ff:7b: 54:b5:7c:ed:e0:e0:f2:ce:a9:e5:f0:d7:31:5c:bc:9c:59:5d: a4:a0:cc:bc:74:ac:0a:ea:58:db:a0:2f:f5:8b:f6:6f:ca:78: 32:89:f8:79:b2:28:63:17:3d:c0:e5:a3:4f:d3:b7:af:88:1d: 28:01:a6:4f:30:5f:05:58:a6:a4:f3:77:a3:ba:00:7d:79:72: 5c:39:6b:a0:36:c3:a5:f6:f0:f3:03:69:12:8c:a5:e9:61:7b: 3b:51:86:0e:42:3e:6a:e2:db:a6:e0:11:14:cb:08:35:17:f1: 07:97:81:73:08:dc:b3:72:22:6e:f8:9b:9d:70:79:fe:a9:3a: 57:aa:87:9d:24:81:e3:b5:84:71:62:a7:af:2d:e3:ca:00:39: 0d:c4:c8:59:cc:06:a3:06:ea:3e:29:18:91:0a:6e:d6:6d:33: a3:e9:b7:91:1d:f6:cd:25:f5:99:d5:af:b8:9e:01:75:e9:17: 01:db:ed:61:84:d1:64:32:2f:72:46:80:3f:c8:14:24:ba:7c: fe:5c:1d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvFN2zDi5W2V27SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIxMDEwMFoXDTI1MTExOTIyMDEwMFowLzEtMCsGA1UEAxMk N2NmOTM5NDUtZmY5ZS00YjFlLWFhODQtNzk3ZTM3YTdkOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv8U5W2GJ/p1KDE0Tv+rkm96XLgul1K7tiDC 6v0NuPVlQO8r6gGXZaqmpuh10IfI+YAN/rjJqiEjya5swqesuVqZ+YN3Toi0xD49 ZtIm6QVahveqxTAKc6Vyv4TTHcX1rdiz+F33UfPJBgBuzG8mf+bqwmY95bMDKOKS 41SWHH00U3g96oE+qT98Jupq6TQk4os+Nftz4Y61qT+EuCWNJ35ClQbx6gxjWA3Y 7N0GjcGJg2FxwXeZGbfao+PjXddPR3DmIjp8jZqxqsMnQduQ8z2aRmYGnNf+DJmM bmpGQtV0ZyKniSoQDz2FFOiRwel9uqZlrecdhbw0EiAs/iwnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExkAfjh5TG3BEhkIwvrCwCddnwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2ZhNTZkOWEtMWRlNy0z MDU2LWFhNDItMDdkMmI0NzAyMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0sU3FirPupUhithudrr3m0H/sFhbD2lulOnKlNM5LIRZKIV6IS/O6a oOLImaMczHA0uUj/e1S1fO3g4PLOqeXw1zFcvJxZXaSgzLx0rArqWNugL/WL9m/K eDKJ+HmyKGMXPcDlo0/Tt6+IHSgBpk8wXwVYpqTzd6O6AH15clw5a6A2w6X28PMD aRKMpelheztRhg5CPmri26bgERTLCDUX8QeXgXMI3LNyIm74m51wef6pOleqh50k geO1hHFip68t48oAOQ3EyFnMBqMG6j4pGJEKbtZtM6Ppt5Ed9s0l9ZnVr7ieAXXp FwHb7WGE0WQyL3JGgD/IFCS6fP5cHe0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:42 2025 by rpki-client