$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa File: db9df24f-e518-3142-aced-9dbaf6b43f10.roa (raw, json) Hash identifier: R4IXX4Ik2CR8epaFAm7NxDUQ1opmpiagMxiRq453ojo= Subject key identifier: E7:AF:77:65:99:E1:9B:51:84:75:31:6D:42:46:A3:17:3B:B0:55:5B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF014951B4A5B58579D6EC580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa Signing time: Fri 22 Aug 2025 05:36:14 +0000 ROA not before: Fri 22 Aug 2025 05:36:14 +0000 ROA not after: Thu 20 Nov 2025 06:36:14 +0000 asID: 31898 IP address blocks: 134.70.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:95:1b:4a:5b:58:57:9d:6e:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:36:14 2025 GMT Not After : Nov 20 06:36:14 2025 GMT Subject: CN=e9674ed9-9046-4e15-84b8-1ed19cc4b4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:27:7c:86:57:97:b2:25:e3:5d:d4:6a:1d: 58:b2:3b:9b:cc:c4:b0:27:1a:e3:92:8d:13:4d:68: 3b:b5:15:04:33:7b:d2:12:88:5e:c4:14:28:e8:e8: df:22:df:e0:86:f3:d0:de:6c:4e:0d:3a:a4:c7:83: 26:04:b8:c0:d3:1b:32:e4:5e:eb:d0:1a:97:35:19: 42:f6:c8:81:04:0e:6c:07:9d:7a:2d:35:d2:9a:aa: 4c:b7:b4:48:31:9d:41:89:89:8f:d9:09:6d:72:ce: cf:13:8b:fb:8f:b6:fa:3e:33:21:c7:e0:10:d2:55: 16:86:66:64:8a:87:37:0b:6e:87:3a:aa:0c:d3:3c: b2:f5:9f:f1:2c:89:13:ce:46:7f:80:77:bd:53:19: 73:0f:c0:f8:56:6a:27:1c:73:f3:75:77:58:7d:48: 9a:a6:73:6e:08:22:09:2d:c0:f0:42:0b:36:bf:63: df:5d:90:2e:db:8f:6b:ab:47:3a:74:87:0e:b1:ac: b2:e3:6b:45:fc:5b:e0:bb:38:29:61:3f:04:42:e8: d1:d1:e9:ff:15:e0:f2:85:6e:ae:81:b6:23:d9:65: 35:50:ec:da:a1:77:ba:98:a2:8f:bb:bb:cf:ff:ac: 4c:d6:36:b7:4e:4f:34:1b:8a:97:f7:d3:c1:fa:76: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:77:65:99:E1:9B:51:84:75:31:6D:42:46:A3:17:3B:B0:55:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c4:60:8f:d3:c9:94:67:ca:8c:25:b4:d3:37:87:e0:91:73: 5e:da:46:95:30:52:52:df:dc:a3:95:d6:61:d9:c2:1b:5b:13: 1a:80:8b:d9:4c:69:ca:56:d1:06:73:1f:a0:27:3f:a6:3a:61: 06:82:66:67:70:b6:3c:85:0d:a6:48:f4:14:f7:d8:fc:86:e9: 75:31:2e:15:02:d5:8d:4a:b6:25:dd:ec:6d:0f:13:d7:bb:39: 1c:3b:0a:59:bb:b2:19:a7:60:46:5f:06:92:6b:a9:c3:a4:cf: 51:24:28:4e:cb:3c:a6:b8:dd:cd:48:70:54:0c:12:62:81:87: 26:9d:46:8a:6b:b9:ee:79:7b:e4:fa:c7:55:b7:73:95:81:2f: dc:8a:a4:f3:a2:93:8c:a3:89:3b:8d:3f:21:03:a3:b2:d5:9a: e2:9d:da:29:37:1e:4a:2f:ff:ba:88:73:0d:e7:e6:03:43:20: 81:38:29:f5:7c:cb:c8:fb:fe:10:b9:cf:c2:6e:2c:73:b4:4d: 3c:9f:0b:b7:6b:7a:cb:10:d2:ac:dd:69:5d:b7:2a:17:db:01: 99:e3:8b:cb:1e:6a:76:41:03:58:4e:bd:0d:83:b4:8c:73:f4: 29:ad:74:32:14:2e:c6:c8:c7:15:eb:74:b3:d9:3e:d4:a2:f6: 95:8a:f9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFJUbSltYV51uxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzYxNFoXDTI1MTEyMDA2MzYxNFowLzEtMCsGA1UEAxMk ZTk2NzRlZDktOTA0Ni00ZTE1LTg0YjgtMWVkMTljYzRiNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha0nfIZXl7Il413Uah1YsjubzMSwJxrjko0T TWg7tRUEM3vSEohexBQo6OjfIt/ghvPQ3mxODTqkx4MmBLjA0xsy5F7r0BqXNRlC 9siBBA5sB516LTXSmqpMt7RIMZ1BiYmP2Qltcs7PE4v7j7b6PjMhx+AQ0lUWhmZk ioc3C26HOqoM0zyy9Z/xLIkTzkZ/gHe9UxlzD8D4VmonHHPzdXdYfUiapnNuCCIJ LcDwQgs2v2PfXZAu249rq0c6dIcOsayy42tF/FvguzgpYT8EQujR0en/FeDyhW6u gbYj2WU1UOzaoXe6mKKPu7vP/6xM1ja3Tk80G4qX99PB+nZdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOevd2WZ4ZtRhHUxbUJGoxc7sFVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGI5ZGYyNGYtZTUxOC0z MTQyLWFjZWQtOWRiYWY2YjQzZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXEYI/TyZRnyowltNM3h+CRc17aRpUwUlLf3KOV1mHZwhtbExqAi9lM acpW0QZzH6AnP6Y6YQaCZmdwtjyFDaZI9BT32PyG6XUxLhUC1Y1KtiXd7G0PE9e7 ORw7Clm7shmnYEZfBpJrqcOkz1EkKE7LPKa43c1IcFQMEmKBhyadRoprue55e+T6 x1W3c5WBL9yKpPOik4yjiTuNPyEDo7LVmuKd2ik3Hkov/7qIcw3n5gNDIIE4KfV8 y8j7/hC5z8JuLHO0TTyfC7dressQ0qzdaV23KhfbAZnji8seanZBA1hOvQ2DtIxz 9CmtdDIULsbIxxXrdLPZPtSi9pWK+bA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:17 2025 by rpki-client