$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/651ab430-baf8-3a4b-a308-1df0dd600ef6.roa File: 651ab430-baf8-3a4b-a308-1df0dd600ef6.roa (raw, json) Hash identifier: wOsHKnNXPgezvVmTOjermReTxkwWvr/rftl7cPtUVqE= Subject key identifier: 66:BD:20:F1:0C:57:10:33:03:A6:30:34:40:6B:AE:32:CE:E1:07:C5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF55B20DE39C1D9064310540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/651ab430-baf8-3a4b-a308-1df0dd600ef6.roa Signing time: Thu 21 Aug 2025 23:11:37 +0000 ROA not before: Thu 21 Aug 2025 23:11:37 +0000 ROA not after: Thu 20 Nov 2025 00:11:37 +0000 asID: 31898 IP address blocks: 134.70.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:b2:0d:e3:9c:1d:90:64:31:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:11:37 2025 GMT Not After : Nov 20 00:11:37 2025 GMT Subject: CN=191550f9-8fd0-4287-bcd2-d30e4130e04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:4f:67:03:cf:4b:d9:e8:14:39:aa:b8:ca: 22:4a:30:a2:c9:de:cd:75:ce:35:44:6f:fd:c3:5d: ea:cc:10:53:f3:16:1c:44:42:5a:5a:35:92:b2:ba: 96:16:8d:b0:73:c0:dc:66:02:aa:87:84:38:f0:26: 50:e5:c5:1e:c0:c9:4b:c8:74:4b:d7:58:af:6c:b4: fa:a8:8b:13:24:bc:7c:f9:87:93:85:24:b8:e0:5b: 37:6b:f1:c8:61:b6:02:a0:9b:32:c5:d7:eb:c1:6c: 92:a4:2a:71:34:9a:f4:dc:e8:56:87:1a:80:08:3d: 11:d1:3f:64:f0:da:6e:ab:73:74:5e:5b:eb:b5:85: 78:93:09:18:62:cb:21:da:1c:e8:74:f1:e6:98:2b: 26:1a:8d:99:0c:37:c7:c9:a0:f3:36:80:5d:74:f1: 95:4f:86:50:58:44:5e:7c:e1:65:55:83:93:55:46: 4f:8a:ac:5d:f3:4f:f5:05:ab:cf:12:ce:2e:ac:b1: be:b8:a1:34:04:27:7e:6f:2b:1e:f4:27:84:6f:ee: 9e:ef:90:39:a8:06:29:af:c5:35:70:ec:ad:a8:52: 3e:a5:e1:fd:c6:f0:9d:a3:f2:8d:3b:ee:c9:65:12: 71:76:be:26:a8:89:2a:f5:5c:4e:fc:7d:97:88:90: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BD:20:F1:0C:57:10:33:03:A6:30:34:40:6B:AE:32:CE:E1:07:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/651ab430-baf8-3a4b-a308-1df0dd600ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b5:2f:71:bb:e7:c7:d5:37:44:be:3e:23:3d:2f:ab:6e:a4: 4e:8c:fc:dd:c8:1b:1b:3f:e5:9f:7a:79:61:13:28:55:48:e6: 48:2d:88:a3:96:00:df:36:ea:3a:1a:a1:63:84:48:3f:21:c6: 64:5f:a1:df:34:68:dc:79:b3:d9:52:0d:08:dc:36:51:f9:24: 43:91:fd:94:35:42:a4:7a:dd:9a:53:4e:ed:ca:2c:70:2f:40: 94:02:ab:95:ab:24:9c:47:6c:d0:d6:05:dd:f0:e6:1e:3d:e6: 99:87:de:a5:d6:e9:c9:0f:bb:2f:6c:9f:24:4b:46:99:20:75: a7:b8:ab:36:99:4e:08:e4:5a:1e:d0:17:25:6b:d4:04:d8:06: d2:ff:ec:2a:ee:40:41:a2:6d:06:58:1f:1f:bb:a4:ee:10:74: 5c:be:99:17:ab:ed:6a:ce:54:1e:a0:dd:9f:08:06:31:89:60: 82:cc:66:67:37:81:a0:aa:47:b4:cb:cd:2d:5f:7e:80:6d:dd: b8:f3:b6:48:8a:0b:25:ee:8d:b0:50:ff:f1:78:42:69:1d:fb: 78:89:a8:23:cb:5c:70:90:cf:49:8b:88:7e:71:ae:a8:ef:68: 2a:be:7d:cd:41:94:cd:73:e8:b8:b5:04:f9:13:e9:17:8b:5a: 30:80:e4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVbIN45wdkGQxBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTEzN1oXDTI1MTEyMDAwMTEzN1owLzEtMCsGA1UEAxMk MTkxNTUwZjktOGZkMC00Mjg3LWJjZDItZDMwZTQxMzBlMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXJPZwPPS9noFDmquMoiSjCiyd7Ndc41RG/9 w13qzBBT8xYcREJaWjWSsrqWFo2wc8DcZgKqh4Q48CZQ5cUewMlLyHRL11ivbLT6 qIsTJLx8+YeThSS44Fs3a/HIYbYCoJsyxdfrwWySpCpxNJr03OhWhxqACD0R0T9k 8Npuq3N0XlvrtYV4kwkYYssh2hzodPHmmCsmGo2ZDDfHyaDzNoBddPGVT4ZQWERe fOFlVYOTVUZPiqxd80/1BavPEs4urLG+uKE0BCd+byse9CeEb+6e75A5qAYpr8U1 cOytqFI+peH9xvCdo/KNO+7JZRJxdr4mqIkq9VxO/H2XiJDwGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa9IPEMVxAzA6YwNEBrrjLO4QfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjUxYWI0MzAtYmFmOC0z YTRiLWEzMDgtMWRmMGRkNjAwZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkY+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm1L3G758fVN0S+PiM9L6tupE6M/N3IGxs/5Z96eWETKFVI5kgtiKOW AN826joaoWOESD8hxmRfod80aNx5s9lSDQjcNlH5JEOR/ZQ1QqR63ZpTTu3KLHAv QJQCq5WrJJxHbNDWBd3w5h495pmH3qXW6ckPuy9snyRLRpkgdae4qzaZTgjkWh7Q FyVr1ATYBtL/7CruQEGibQZYHx+7pO4QdFy+mRer7WrOVB6g3Z8IBjGJYILMZmc3 gaCqR7TLzS1ffoBt3bjztkiKCyXujbBQ//F4Qmkd+3iJqCPLXHCQz0mLiH5xrqjv aCq+fc1BlM1z6Li1BPkT6ReLWjCA5PE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:20 2025 by rpki-client