$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa File: e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa (raw, json) Hash identifier: ERdsR4cayInUbm4TdfxdG+KJRJEg4gid88GYguKXaTU= Subject key identifier: A5:C0:D0:5B:E4:49:0B:5D:BE:08:EA:1C:34:1F:7C:CD:EA:98:FA:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF014A64C9A6048ED90F3C3C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa Signing time: Fri 22 Aug 2025 05:36:22 +0000 ROA not before: Fri 22 Aug 2025 05:36:22 +0000 ROA not after: Thu 20 Nov 2025 06:36:22 +0000 asID: 31898 IP address blocks: 134.70.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:a6:4c:9a:60:48:ed:90:f3:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:36:22 2025 GMT Not After : Nov 20 06:36:22 2025 GMT Subject: CN=76b2cf26-47cf-4a55-8cdd-d44b00cd17f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:94:cc:7e:03:d6:d5:ec:25:df:2d:69:5b: e0:63:9b:21:f2:3d:d4:5a:f9:41:44:0e:9d:04:c7: 65:14:cc:80:f0:77:8d:59:a6:2d:02:cb:34:58:8b: 15:05:00:14:26:26:54:9f:4e:e2:5d:a9:10:eb:58: c9:53:99:88:be:45:6e:8f:be:3f:e0:fa:c6:ac:7b: 58:75:01:d3:71:38:2b:41:ed:3a:4e:b0:79:4a:62: b2:01:a9:1c:10:c1:82:91:d8:21:f1:13:b7:eb:55: 9c:e7:88:fd:86:a6:49:42:1a:e9:2b:9b:2e:a2:d0: a8:4e:15:95:94:bf:a1:cc:5b:3c:44:98:a0:e3:84: 55:b6:82:d4:49:f2:fe:9d:f8:c8:ad:14:09:b1:00: 82:6a:88:a8:55:ad:95:db:aa:62:7b:77:cf:a8:21: f5:9d:a4:ff:51:04:d5:2a:81:fd:13:15:f5:94:06: 2e:2d:7f:00:5a:7f:b9:88:ca:c9:a1:d8:11:d5:7a: a3:11:f0:97:36:81:54:7d:bd:61:bc:78:f6:4b:b8: aa:e5:0a:22:f7:33:fa:1e:05:5d:20:3c:7a:53:ed: 20:30:01:b2:4d:3d:03:5e:2a:c8:a0:ac:d9:04:8f: 20:fa:43:e7:23:8d:17:0a:74:0e:0a:44:64:59:94: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:D0:5B:E4:49:0B:5D:BE:08:EA:1C:34:1F:7C:CD:EA:98:FA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8315f57-16b8-33a3-a6d2-7b2855a20a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2c:f1:bd:67:bb:2e:77:e5:19:fb:40:54:83:ac:0e:80:cc: 47:35:79:08:d6:3a:e8:6b:b7:6b:93:81:54:0a:fd:a2:17:7c: 2b:ea:19:71:d4:1b:12:74:9b:90:81:ed:f6:77:73:d9:a8:4c: 80:55:3f:14:72:64:ab:e8:3e:0e:58:83:40:9d:4a:c5:8c:88: d8:7b:e8:00:13:da:4d:1b:a4:a4:0b:43:9c:05:db:58:6b:ad: 90:b3:8b:8b:c4:ef:97:ca:03:08:4a:b8:a6:30:1b:ee:1f:a5: 8a:4e:e9:35:d6:58:ce:70:9c:b9:57:d6:5a:5b:82:d4:1a:e9: b2:8a:7f:52:ec:d5:2e:c7:d8:28:2a:fe:7c:cf:ba:d0:1a:0f: af:04:b4:f8:58:e7:18:e3:d4:02:95:7f:6f:f7:04:04:18:eb: c6:7b:79:0a:41:9c:fc:73:c8:c2:cc:08:65:e9:f8:1b:bb:88: c2:ce:d2:cb:d3:21:33:6e:3e:c7:92:55:f6:9c:b2:32:83:aa: 07:c7:a7:69:89:79:34:f2:60:23:69:1b:ba:cd:90:09:aa:97: fa:46:c8:76:be:d0:a4:90:7b:cb:8f:37:74:a8:88:86:ad:8a: 20:23:3b:44:68:60:a2:81:b4:bb:82:b8:76:36:a0:1c:f3:a7: a1:0f:c3:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFKZMmmBI7ZDzw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzYyMloXDTI1MTEyMDA2MzYyMlowLzEtMCsGA1UEAxMk NzZiMmNmMjYtNDdjZi00YTU1LThjZGQtZDQ0YjAwY2QxN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn16UzH4D1tXsJd8taVvgY5sh8j3UWvlBRA6d BMdlFMyA8HeNWaYtAss0WIsVBQAUJiZUn07iXakQ61jJU5mIvkVuj74/4PrGrHtY dQHTcTgrQe06TrB5SmKyAakcEMGCkdgh8RO361Wc54j9hqZJQhrpK5suotCoThWV lL+hzFs8RJig44RVtoLUSfL+nfjIrRQJsQCCaoioVa2V26pie3fPqCH1naT/UQTV KoH9ExX1lAYuLX8AWn+5iMrJodgR1XqjEfCXNoFUfb1hvHj2S7iq5Qoi9zP6HgVd IDx6U+0gMAGyTT0DXirIoKzZBI8g+kPnI40XCnQOCkRkWZRtMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXA0FvkSQtdvgjqHDQffM3qmPphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTgzMTVmNTctMTZiOC0z M2EzLWE2ZDItN2IyODU1YTIwYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEs8b1nuy535Rn7QFSDrA6AzEc1eQjWOuhrt2uTgVQK/aIXfCvqGXHU GxJ0m5CB7fZ3c9moTIBVPxRyZKvoPg5Yg0CdSsWMiNh76AAT2k0bpKQLQ5wF21hr rZCzi4vE75fKAwhKuKYwG+4fpYpO6TXWWM5wnLlX1lpbgtQa6bKKf1Ls1S7H2Cgq /nzPutAaD68EtPhY5xjj1AKVf2/3BAQY68Z7eQpBnPxzyMLMCGXp+Bu7iMLO0svT ITNuPseSVfacsjKDqgfHp2mJeTTyYCNpG7rNkAmql/pGyHa+0KSQe8uPN3SoiIat iiAjO0RoYKKBtLuCuHY2oBzzp6EPw3o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:37 2025 by rpki-client