$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa File: 825bd0b3-8b81-36b6-a918-a3192e7058dc.roa (raw, json) Hash identifier: LATa0pzu2g8rU3yd2N6ybpZ8geLqdeEMI37CKDa5d0c= Subject key identifier: 37:99:A2:9E:3E:22:D6:27:B7:D8:F3:42:EC:B5:A9:52:C3:16:B1:95 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEC4C7C2391A8AF9C56289880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa Signing time: Wed 20 Aug 2025 21:05:38 +0000 ROA not before: Wed 20 Aug 2025 21:05:38 +0000 ROA not after: Tue 18 Nov 2025 22:05:38 +0000 asID: 31898 IP address blocks: 134.70.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:4c:7c:23:91:a8:af:9c:56:28:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 21:05:38 2025 GMT Not After : Nov 18 22:05:38 2025 GMT Subject: CN=ea90b177-6126-4d18-bcd7-b453a090bb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:cd:36:ac:d6:d9:93:e5:56:99:28:60:43: 58:d5:cb:88:f5:78:b5:20:0e:43:40:74:7b:62:91: 36:ed:91:a8:7b:9e:66:97:24:43:91:8c:92:20:69: f1:91:5b:e3:80:99:76:48:b7:06:38:a7:d9:97:da: 8b:cf:0b:19:b1:79:1f:d4:3a:57:8c:fe:31:e2:2d: f7:2c:5f:ed:6c:25:9c:62:31:6c:99:c2:f8:f4:b6: 39:d9:5c:65:50:3e:7c:00:67:9c:78:37:8e:e9:fb: 2a:94:bd:9b:67:94:32:2f:14:70:44:53:1a:27:36: 98:90:a5:55:d1:24:3e:59:df:c8:37:71:0c:b4:0f: 2d:5f:b9:df:09:35:3b:09:e9:09:71:1b:4e:99:ae: a9:9f:8c:fa:85:c8:7d:47:5b:4d:d0:09:45:44:cd: 85:53:5d:69:6c:e9:11:b8:35:b4:ed:85:47:fe:41: ac:1f:2e:cb:f3:c4:76:aa:2f:72:a4:ea:57:45:e2: 5b:34:84:77:1f:32:46:05:71:5f:b6:40:00:94:18: 8d:00:da:0b:b2:14:6d:17:da:77:3d:aa:0a:74:56: ee:7d:09:98:7d:4c:55:6b:ac:fd:3d:69:1b:49:e2: e8:e2:c4:ba:7d:f3:d1:c4:6e:a5:25:13:e7:5f:5a: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:A2:9E:3E:22:D6:27:B7:D8:F3:42:EC:B5:A9:52:C3:16:B1:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/825bd0b3-8b81-36b6-a918-a3192e7058dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:40:4b:35:4a:b4:23:44:ad:3f:09:e3:99:b6:0e:d9:ef:f1: 09:29:10:11:89:fe:d1:23:70:df:53:60:27:f8:be:55:27:63: 42:39:7f:dc:0a:2f:77:b0:04:e2:10:d0:a4:ed:2b:c0:d2:1f: ba:7d:22:ce:eb:cf:6a:91:bd:08:1e:eb:30:08:81:68:6c:d3: d5:f0:a4:dd:6e:68:25:9c:1b:0b:3f:a9:5c:29:9f:92:23:1f: ef:bb:30:5c:4f:1e:ef:1b:0e:ff:b2:86:9e:0c:6c:c0:5e:c8: 61:51:d0:00:8c:7d:94:61:b6:4a:07:57:2d:92:30:16:f9:8c: bc:c4:06:0c:01:64:ac:23:f1:dd:6f:41:0c:af:05:2f:eb:a2: 0c:ef:1a:cf:d9:33:3a:e1:95:ea:ea:a9:40:e2:0f:49:e5:64: a7:56:11:1f:eb:5c:71:bf:0a:ef:de:14:74:0e:15:e4:fd:a2: d6:a0:5c:ca:bc:87:8c:38:fb:39:7f:41:b4:b0:7b:12:c4:a1: 0d:82:47:14:ee:fd:54:98:52:43:b1:58:65:25:81:b2:42:59: 02:54:f5:c3:f7:32:85:59:90:72:7e:e4:d7:10:59:a9:0a:c1: ce:fb:dd:90:a6:89:fb:86:12:0b:d4:77:b2:7e:96:c7:12:d7: 22:ce:d3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsTHwjkaivnFYomIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDIxMDUzOFoXDTI1MTExODIyMDUzOFowLzEtMCsGA1UEAxMk ZWE5MGIxNzctNjEyNi00ZDE4LWJjZDctYjQ1M2EwOTBiYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdLNNqzW2ZPlVpkoYENY1cuI9Xi1IA5DQHR7 YpE27ZGoe55mlyRDkYySIGnxkVvjgJl2SLcGOKfZl9qLzwsZsXkf1DpXjP4x4i33 LF/tbCWcYjFsmcL49LY52VxlUD58AGeceDeO6fsqlL2bZ5QyLxRwRFMaJzaYkKVV 0SQ+Wd/IN3EMtA8tX7nfCTU7CekJcRtOma6pn4z6hch9R1tN0AlFRM2FU11pbOkR uDW07YVH/kGsHy7L88R2qi9ypOpXReJbNIR3HzJGBXFftkAAlBiNANoLshRtF9p3 PaoKdFbufQmYfUxVa6z9PWkbSeLo4sS6ffPRxG6lJRPnX1r9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeZop4+ItYnt9jzQuy1qVLDFrGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODI1YmQwYjMtOGI4MS0z NmI2LWE5MTgtYTMxOTJlNzA1OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5ASzVKtCNErT8J45m2Dtnv8QkpEBGJ/tEjcN9TYCf4vlUnY0I5f9wK L3ewBOIQ0KTtK8DSH7p9Is7rz2qRvQge6zAIgWhs09XwpN1uaCWcGws/qVwpn5Ij H++7MFxPHu8bDv+yhp4MbMBeyGFR0ACMfZRhtkoHVy2SMBb5jLzEBgwBZKwj8d1v QQyvBS/rogzvGs/ZMzrhlerqqUDiD0nlZKdWER/rXHG/Cu/eFHQOFeT9otagXMq8 h4w4+zl/QbSwexLEoQ2CRxTu/VSYUkOxWGUlgbJCWQJU9cP3MoVZkHJ+5NcQWakK wc773ZCmifuGEgvUd7J+lscS1yLO0/g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:18 2025 by rpki-client