$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/464badd6-355f-3fdd-81bc-7f59acff2139.roa File: 464badd6-355f-3fdd-81bc-7f59acff2139.roa (raw, json) Hash identifier: KRk5W6Z/eLHgn3RrOkuFwBkeVyYu9RXMKYQBZhr7PZA= Subject key identifier: 29:3B:7A:1C:68:DF:2B:71:0B:1E:FF:09:D0:68:38:0B:B2:1D:38:88 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF14E0A14C4D53838BE53620 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/464badd6-355f-3fdd-81bc-7f59acff2139.roa Signing time: Thu 21 Aug 2025 21:01:01 +0000 ROA not before: Thu 21 Aug 2025 21:01:01 +0000 ROA not after: Wed 19 Nov 2025 22:01:01 +0000 asID: 31898 IP address blocks: 134.70.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:14:e0:a1:4c:4d:53:83:8b:e5:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 21:01:01 2025 GMT Not After : Nov 19 22:01:01 2025 GMT Subject: CN=75ab999d-bc2a-4142-88d1-f202c11887c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:c2:f7:24:86:04:99:a4:6c:ed:3d:98:6a: a9:8d:ae:45:6c:30:d5:aa:c5:01:29:7f:85:63:4c: 69:69:eb:ee:a4:26:04:a9:2b:c6:bf:13:2f:ad:77: 79:89:8c:af:25:e9:9c:4e:29:b1:8c:ac:f6:0f:86: 15:40:25:50:f9:53:5c:87:b2:34:ff:f3:70:f6:4a: 48:2e:9a:ae:0b:87:63:41:6c:c6:23:d5:c9:1f:3b: 9a:d2:97:3e:d5:88:f8:8d:92:86:c6:ba:c6:c6:00: c3:e5:63:6a:c6:62:e7:9a:8b:f1:01:7e:8a:ea:59: 5f:88:80:43:4f:8b:91:32:c4:24:90:40:5f:8d:dc: 3a:92:55:fa:04:18:a5:89:b9:64:d7:b9:7d:e3:2e: d4:7d:03:8b:50:86:63:43:eb:d9:c7:6c:8e:b1:59: 42:58:46:ff:ae:81:54:67:89:e4:b4:5b:82:d8:77: 70:72:0c:93:8c:33:49:fc:28:3f:71:dd:54:33:68: 7c:4f:e6:f2:7c:28:80:30:a3:4a:c5:fa:ee:4b:d2: aa:2b:dc:f9:63:2d:1b:04:13:e1:eb:20:28:fb:c8: f6:9f:68:01:a3:77:55:0e:97:10:e2:30:12:0c:1c: 2f:dc:78:81:28:e6:f4:c6:4e:4c:4f:c6:81:ea:78: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3B:7A:1C:68:DF:2B:71:0B:1E:FF:09:D0:68:38:0B:B2:1D:38:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/464badd6-355f-3fdd-81bc-7f59acff2139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2d:a3:b9:e7:e0:32:73:10:fe:8e:62:c5:be:64:ca:78:ef: 69:5d:c3:19:b4:eb:4e:86:c0:5b:50:e2:04:68:e7:59:a7:61: 92:7e:46:00:65:f9:94:db:c7:8e:71:20:1c:33:19:6a:ea:03: e7:fb:56:58:10:53:3b:23:45:ce:5a:dd:be:ff:80:b4:8f:7e: 8b:31:a6:22:b5:59:45:d7:9a:63:12:29:d5:a2:41:05:62:02: 36:70:d2:98:04:3d:5c:47:21:c4:1a:88:85:89:bc:f4:a3:e0: 70:d0:53:67:2b:df:ef:f8:87:de:c3:b5:d8:8a:0d:cd:a5:97: 25:a8:67:35:98:6a:b4:94:9f:1e:07:03:81:61:6a:73:5b:0a: 53:c5:aa:fc:01:20:4d:81:21:31:65:52:61:bd:22:9f:04:23: 06:a3:57:4e:d8:fa:c7:0a:7b:ac:e0:64:32:de:c5:ea:26:f5: 30:fa:18:6d:4c:4e:04:f7:06:58:87:8a:85:0c:7b:89:28:1d: b5:80:5a:ac:bb:ce:61:00:78:b4:12:83:be:39:83:87:f9:e6: cf:3e:5c:dc:4a:f1:d7:fd:5e:46:3e:b6:4d:e5:be:4d:69:bf: 7e:e3:69:cd:59:47:7f:c2:83:d7:37:ca:3b:48:67:63:ff:6a: ba:20:e9:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvFOChTE1Tg4vlNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIxMDEwMVoXDTI1MTExOTIyMDEwMVowLzEtMCsGA1UEAxMk NzVhYjk5OWQtYmMyYS00MTQyLTg4ZDEtZjIwMmMxMTg4N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7vC9ySGBJmkbO09mGqpja5FbDDVqsUBKX+F Y0xpaevupCYEqSvGvxMvrXd5iYyvJemcTimxjKz2D4YVQCVQ+VNch7I0//Nw9kpI LpquC4djQWzGI9XJHzua0pc+1Yj4jZKGxrrGxgDD5WNqxmLnmovxAX6K6llfiIBD T4uRMsQkkEBfjdw6klX6BBiliblk17l94y7UfQOLUIZjQ+vZx2yOsVlCWEb/roFU Z4nktFuC2HdwcgyTjDNJ/Cg/cd1UM2h8T+byfCiAMKNKxfruS9KqK9z5Yy0bBBPh 6yAo+8j2n2gBo3dVDpcQ4jASDBwv3HiBKOb0xk5MT8aB6nhC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk7ehxo3ytxCx7/CdBoOAuyHTiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDY0YmFkZDYtMzU1Zi0z ZmRkLTgxYmMtN2Y1OWFjZmYyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAto7nn4DJzEP6OYsW+ZMp472ldwxm0606GwFtQ4gRo51mnYZJ+RgBl +ZTbx45xIBwzGWrqA+f7VlgQUzsjRc5a3b7/gLSPfosxpiK1WUXXmmMSKdWiQQVi AjZw0pgEPVxHIcQaiIWJvPSj4HDQU2cr3+/4h97DtdiKDc2llyWoZzWYarSUnx4H A4FhanNbClPFqvwBIE2BITFlUmG9Ip8EIwajV07Y+scKe6zgZDLexeom9TD6GG1M TgT3BliHioUMe4koHbWAWqy7zmEAeLQSg745g4f55s8+XNxK8df9XkY+tk3lvk1p v37jac1ZR3/Cg9c3yjtIZ2P/arog6es= -----END CERTIFICATE-----Generated at Sat Aug 23 15:44:45 2025 by rpki-client