$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2664a42-e5b3-3377-b887-d7199ea7d899.roa File: e2664a42-e5b3-3377-b887-d7199ea7d899.roa (raw, json) Hash identifier: vXbejAINuQawiZbYAapbHKO1ed9kO+k0p8fGh5Jo380= Subject key identifier: 3D:3F:1F:48:4C:F2:3B:5F:71:B1:F3:EB:E5:93:B4:20:53:2F:CF:F7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA38138F946215C5CD4980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2664a42-e5b3-3377-b887-d7199ea7d899.roa Signing time: Thu 21 Aug 2025 10:27:02 +0000 ROA not before: Thu 21 Aug 2025 10:27:02 +0000 ROA not after: Wed 19 Nov 2025 11:27:02 +0000 asID: 31898 IP address blocks: 134.70.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:38:13:8f:94:62:15:c5:cd:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:27:02 2025 GMT Not After : Nov 19 11:27:02 2025 GMT Subject: CN=5d612617-6c1e-4594-814f-8b39a99abbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3c:68:f8:7b:0e:94:9e:25:20:7d:5b:43:af: 9d:ad:01:70:8f:57:54:fb:4e:ae:a6:04:59:10:32: 01:5f:9d:d1:97:55:28:ea:3a:43:c4:8f:11:ba:b4: 84:08:dd:7f:e0:cc:5c:54:d6:03:48:6d:d5:ae:75: 86:38:13:39:5f:8d:a8:54:31:6c:26:16:31:9d:27: 1b:fa:f5:c0:f0:1d:8e:4b:f8:3a:35:85:77:34:6c: 8f:03:d5:5b:d3:ed:a4:2f:5d:2a:8b:8f:db:46:f3: 08:d3:09:d4:ea:99:2b:d8:c2:31:ec:44:ba:90:17: 80:b4:e8:0a:5a:9c:b8:00:ee:73:01:09:49:7c:f9: 6f:f3:bf:6d:e6:6e:4b:fc:b7:79:6f:54:08:21:03: 63:80:c9:34:4f:f0:f3:fe:41:91:cb:11:da:80:02: 58:84:49:46:f2:5e:4a:45:cd:93:a5:e8:0f:6f:8f: b8:75:77:2c:e4:eb:38:17:14:d8:4f:59:20:36:13: 01:0f:27:b1:72:64:29:44:81:97:e7:52:4f:1e:27: 13:05:b4:4d:2e:3c:7a:f6:e7:fd:98:bd:8c:55:5c: d7:18:82:34:08:d5:57:18:fc:3e:d2:3a:03:f3:10: 19:dd:72:6d:a3:8c:c8:02:3a:6b:4c:ed:7c:85:bf: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3F:1F:48:4C:F2:3B:5F:71:B1:F3:EB:E5:93:B4:20:53:2F:CF:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2664a42-e5b3-3377-b887-d7199ea7d899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a1:e0:db:7d:54:ae:c0:b7:36:ea:01:2e:c5:ce:30:17:16: 49:a6:f1:7f:af:bd:e0:96:d6:c4:8b:34:c5:4e:f2:1b:2c:04: c2:4b:94:1e:98:2b:7f:ae:7e:2b:0a:64:39:02:31:e9:ee:50: 30:02:4f:93:91:53:ba:30:00:e2:04:53:8d:94:5b:7c:a6:11: dc:da:88:88:de:b0:61:aa:75:ef:44:d4:72:50:ed:c8:ac:0c: 43:82:64:6e:a1:3d:0a:fc:de:51:ac:84:00:2f:52:66:36:68: de:d1:7a:04:92:ad:2c:0e:5d:a3:a3:a9:d8:60:11:24:1a:53: c6:c8:e9:12:e7:b4:c2:2a:ab:b6:9d:87:0f:82:85:ce:18:7c: 80:49:ae:8c:9e:63:9d:93:7a:8c:49:c7:8d:c6:4d:3f:c4:e0: eb:0d:f9:0a:ee:44:09:8a:f8:90:0a:37:4d:a6:8c:8a:77:4b: be:bb:89:88:50:6f:13:ae:af:95:b5:89:ce:a9:dd:01:97:3d: fc:6c:ad:98:4c:57:77:30:d9:69:39:6b:a4:a4:fd:80:8f:16: 49:7a:f1:e2:ff:19:ae:c9:9a:21:3a:5f:fc:4f:63:a1:83:f6: 16:00:5d:6b:b1:4e:93:56:71:d0:16:ce:13:a8:1d:f3:2a:43: c0:ec:f6:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2jgTj5RiFcXNSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjcwMloXDTI1MTExOTExMjcwMlowLzEtMCsGA1UEAxMk NWQ2MTI2MTctNmMxZS00NTk0LTgxNGYtOGIzOWE5OWFiYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDxo+HsOlJ4lIH1bQ6+drQFwj1dU+06upgRZ EDIBX53Rl1Uo6jpDxI8RurSECN1/4MxcVNYDSG3VrnWGOBM5X42oVDFsJhYxnScb +vXA8B2OS/g6NYV3NGyPA9Vb0+2kL10qi4/bRvMI0wnU6pkr2MIx7ES6kBeAtOgK Wpy4AO5zAQlJfPlv879t5m5L/Ld5b1QIIQNjgMk0T/Dz/kGRyxHagAJYhElG8l5K Rc2TpegPb4+4dXcs5Os4FxTYT1kgNhMBDyexcmQpRIGX51JPHicTBbRNLjx69uf9 mL2MVVzXGII0CNVXGPw+0joD8xAZ3XJto4zIAjprTO18hb/vKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0/H0hM8jtfcbHz6+WTtCBTL8/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTI2NjRhNDItZTViMy0z Mzc3LWI4ODctZDcxOTllYTdkODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6h4Nt9VK7AtzbqAS7FzjAXFkmm8X+vveCW1sSLNMVO8hssBMJLlB6Y K3+ufisKZDkCMenuUDACT5ORU7owAOIEU42UW3ymEdzaiIjesGGqde9E1HJQ7cis DEOCZG6hPQr83lGshAAvUmY2aN7RegSSrSwOXaOjqdhgESQaU8bI6RLntMIqq7ad hw+Chc4YfIBJroyeY52TeoxJx43GTT/E4OsN+QruRAmK+JAKN02mjIp3S767iYhQ bxOur5W1ic6p3QGXPfxsrZhMV3cw2Wk5a6Sk/YCPFkl68eL/Ga7JmiE6X/xPY6GD 9hYAXWuxTpNWcdAWzhOoHfMqQ8Ds9mA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:06 2025 by rpki-client