$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5582a624-75f7-33f3-a5f5-7a699e4856dc.roa File: 5582a624-75f7-33f3-a5f5-7a699e4856dc.roa (raw, json) Hash identifier: nCG6oDDS+KKbC4RqjejCCylAuFJgzJg2AxJ31Z28zQE= Subject key identifier: CB:E9:23:0C:ED:17:48:E0:6E:9E:C4:12:02:28:DD:44:6E:A0:0B:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD8E11D40D1D672E804AC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5582a624-75f7-33f3-a5f5-7a699e4856dc.roa Signing time: Thu 21 Aug 2025 17:32:50 +0000 ROA not before: Thu 21 Aug 2025 17:32:50 +0000 ROA not after: Wed 19 Nov 2025 18:32:50 +0000 asID: 31898 IP address blocks: 134.70.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:8e:11:d4:0d:1d:67:2e:80:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:50 2025 GMT Not After : Nov 19 18:32:50 2025 GMT Subject: CN=24a614b9-1da6-47c2-aabb-a28c43b281db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:88:ad:23:2c:5f:97:12:82:ee:36:4c:32: 1d:87:32:08:cb:e9:53:3f:4f:e1:1f:d1:e0:e0:a9: d0:9f:38:50:02:40:2d:8e:8b:32:17:84:db:15:14: b4:66:58:2e:1c:ba:70:01:13:3d:79:77:0a:90:0e: 9e:18:17:c7:e3:c9:5f:2a:a0:22:ce:a9:16:c8:d9: a8:f0:a4:bd:cf:8d:57:15:9a:c9:0b:bb:ba:1d:87: 60:fd:66:ed:df:02:58:25:90:86:38:b9:8e:bc:bd: 6d:3e:db:f6:86:84:49:8c:73:36:01:ff:24:b2:dc: 57:75:47:af:74:c4:4b:ec:5f:59:94:b4:d6:79:bf: a6:b8:49:73:1f:fe:57:ef:3b:9c:41:3c:88:f1:23: 4a:16:b0:47:87:19:47:f5:4c:b3:78:47:48:89:44: 68:38:f6:9b:9f:64:91:68:16:0a:f6:a5:2d:b3:fe: cf:e0:fc:fb:87:a8:12:5d:7d:d3:40:08:ee:f8:d3: 53:bd:0d:0d:c6:d1:84:fe:52:d1:06:7f:b9:89:dd: 53:d4:7a:84:82:3a:2e:ed:e1:a6:b8:49:b1:50:fd: 16:9a:6f:a2:a5:16:2a:66:f6:59:dc:bf:13:9c:b4: c8:60:78:cc:dc:46:f0:f7:63:72:dc:e8:b6:03:ae: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E9:23:0C:ED:17:48:E0:6E:9E:C4:12:02:28:DD:44:6E:A0:0B:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5582a624-75f7-33f3-a5f5-7a699e4856dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:15:70:b4:d8:e1:92:01:ae:5f:39:1d:66:28:0c:ea:4c:90: 45:65:f8:d7:94:a4:9d:4e:ba:dd:70:c7:4d:29:f4:12:39:a9: 57:34:8c:be:cb:ca:85:cf:ce:3e:44:e2:86:aa:9f:ec:a7:b6: ac:9a:58:9a:cd:51:9d:f4:f2:90:cd:98:4c:f7:d3:bc:c3:15: a0:cf:fc:0d:4a:81:94:d0:3b:6c:b7:6b:a4:a1:ce:6a:87:73: b2:95:42:b7:41:de:cf:bd:77:a1:04:8e:fc:f6:72:eb:bd:ce: 1c:ba:ad:50:d8:c6:d3:b6:d0:5f:da:39:88:cd:f8:03:bb:fc: bc:1b:dd:5c:fa:6b:36:d5:28:d4:74:4c:ce:bc:8c:b6:a1:d5: 7d:ab:5c:3e:18:3a:dd:99:29:b3:ae:6b:8d:77:b9:c5:d2:1f: 93:3f:60:0d:b9:7c:1a:dc:dc:0f:e8:b3:2a:88:bd:ac:4e:62: e6:53:47:16:81:49:92:1e:d6:57:b3:fe:fd:1a:df:47:04:5d: dd:72:30:b3:76:e5:5d:89:3e:1b:21:a9:32:b1:30:60:e7:1e: 60:f7:64:8a:36:c1:95:b5:78:4f:ce:37:49:70:28:ca:6a:ba: 4a:a6:df:4e:ad:b9:e0:4f:f7:ff:7f:e2:f9:f5:dd:a2:d6:12: 6f:bc:81:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurY4R1A0dZy6ASsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzI1MFoXDTI1MTExOTE4MzI1MFowLzEtMCsGA1UEAxMk MjRhNjE0YjktMWRhNi00N2MyLWFhYmItYTI4YzQzYjI4MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWyIrSMsX5cSgu42TDIdhzIIy+lTP0/hH9Hg 4KnQnzhQAkAtjosyF4TbFRS0ZlguHLpwARM9eXcKkA6eGBfH48lfKqAizqkWyNmo 8KS9z41XFZrJC7u6HYdg/Wbt3wJYJZCGOLmOvL1tPtv2hoRJjHM2Af8kstxXdUev dMRL7F9ZlLTWeb+muElzH/5X7zucQTyI8SNKFrBHhxlH9UyzeEdIiURoOPabn2SR aBYK9qUts/7P4Pz7h6gSXX3TQAju+NNTvQ0NxtGE/lLRBn+5id1T1HqEgjou7eGm uEmxUP0Wmm+ipRYqZvZZ3L8TnLTIYHjM3Ebw92Ny3Oi2A64LfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvpIwztF0jgbp7EEgIo3URuoAuqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTU4MmE2MjQtNzVmNy0z M2YzLWE1ZjUtN2E2OTllNDg1NmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQVcLTY4ZIBrl85HWYoDOpMkEVl+NeUpJ1Out1wx00p9BI5qVc0jL7L yoXPzj5E4oaqn+yntqyaWJrNUZ308pDNmEz307zDFaDP/A1KgZTQO2y3a6ShzmqH c7KVQrdB3s+9d6EEjvz2cuu9zhy6rVDYxtO20F/aOYjN+AO7/Lwb3Vz6azbVKNR0 TM68jLah1X2rXD4YOt2ZKbOua413ucXSH5M/YA25fBrc3A/osyqIvaxOYuZTRxaB SZIe1lez/v0a30cEXd1yMLN25V2JPhshqTKxMGDnHmD3ZIo2wZW1eE/ON0lwKMpq ukqm306tueBP9/9/4vn13aLWEm+8gSc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:27 2025 by rpki-client