$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa File: 23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa (raw, json) Hash identifier: 60LQz/JQN4VbzY4EJ2lVBxn1yb6BdY3WDpyDZ3VXHyM= Subject key identifier: 7C:F6:57:BD:62:9B:D5:42:D8:71:29:30:67:C0:C3:53:10:A3:0D:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F02423EC6496405868F060E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 31898 IP address blocks: 134.70.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:3e:c6:49:64:05:86:8f:06:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=05d1710d-8171-4912-ac0e-de06b216cfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:1f:71:60:6c:fe:99:23:c9:0e:86:00:a1: 8d:e0:36:24:fa:0b:58:ef:47:84:f5:3b:49:98:59: 8b:a2:fb:c4:d2:a7:a4:c7:14:dc:0f:b6:13:51:04: 1a:02:6f:d1:53:62:4f:be:b8:67:75:9d:4c:a9:f5: c2:5d:37:2c:45:4e:f3:a7:81:97:b4:9f:15:29:37: 48:7e:c5:c8:d0:7c:d4:2b:8b:0c:d4:08:60:58:82: c9:e2:88:7a:87:4f:e6:b6:bc:c8:0e:76:f0:0c:74: 4f:bb:31:53:0d:37:46:6c:61:42:67:c4:f0:b4:97: 3c:6f:3c:ce:f2:89:39:33:8b:49:e8:09:1f:8f:ea: 6b:b1:57:60:bd:d1:bd:72:17:60:4a:66:81:c3:da: 8f:6e:38:d4:c4:49:36:08:35:7f:33:13:33:fb:09: 23:8c:93:fa:93:ad:96:92:64:0a:c9:61:32:e6:8e: a8:5d:ab:ea:6b:cd:1f:d8:c2:61:86:35:18:05:97: e1:a2:25:36:7d:66:f7:c6:9d:cc:1a:a5:77:e4:02: 75:f7:7c:36:a0:db:d4:50:6b:43:b8:39:57:76:3f: 89:e1:7d:5b:af:e7:29:1e:c0:a9:61:29:cf:22:44: 68:e3:ce:bd:64:1d:4d:5b:40:80:f2:a7:c2:8e:7c: bf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F6:57:BD:62:9B:D5:42:D8:71:29:30:67:C0:C3:53:10:A3:0D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23f6c139-65b5-3ab2-a3a6-62fb03503a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:59:cf:22:97:ff:a6:85:4c:5d:c3:c8:5c:4f:88:db:f7:c5: 64:62:98:5e:78:9c:cc:ff:cf:eb:18:6a:17:31:eb:89:52:72: 08:e7:e1:38:f7:53:45:02:57:61:8c:54:82:42:33:64:1a:ab: af:4c:bb:10:af:5e:fe:83:a8:36:f4:cc:74:a1:1c:43:3b:be: 8e:e3:59:95:0d:87:be:e3:da:aa:84:42:cc:d9:b1:91:fa:fc: c7:30:f8:10:3c:32:29:bc:65:4b:45:e8:1a:88:93:5c:d0:36: f2:39:8d:56:53:50:5f:d0:ca:b1:1d:3b:c5:90:13:fc:27:3b: fd:cb:fd:ef:02:e8:c5:78:40:21:42:f8:84:c3:4d:43:f7:10: 1c:7e:fd:bb:ad:6d:1b:99:a1:22:9c:22:a0:e7:9e:2d:d2:f1: 00:bc:17:c5:3e:69:68:65:7f:66:5f:f2:52:1c:5b:f0:b8:55: 20:1d:77:2e:3a:2f:1a:e8:09:83:0b:46:60:64:bb:4a:89:41: aa:0e:91:e7:84:55:70:40:c7:18:ca:ae:e3:0e:54:da:a7:d5: d8:a4:bc:2c:e4:67:b8:49:d3:f3:10:23:92:11:10:fa:da:fd: 45:59:ba:03:58:fc:cf:b8:ea:00:e1:67:4c:6c:55:8b:a4:f1: 4f:52:5c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQj7GSWQFho8GDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MDVkMTcxMGQtODE3MS00OTEyLWFjMGUtZGUwNmIyMTZjZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtogfcWBs/pkjyQ6GAKGN4DYk+gtY70eE9TtJ mFmLovvE0qekxxTcD7YTUQQaAm/RU2JPvrhndZ1MqfXCXTcsRU7zp4GXtJ8VKTdI fsXI0HzUK4sM1AhgWILJ4oh6h0/mtrzIDnbwDHRPuzFTDTdGbGFCZ8TwtJc8bzzO 8ok5M4tJ6Akfj+prsVdgvdG9chdgSmaBw9qPbjjUxEk2CDV/MxMz+wkjjJP6k62W kmQKyWEy5o6oXavqa80f2MJhhjUYBZfhoiU2fWb3xp3MGqV35AJ193w2oNvUUGtD uDlXdj+J4X1br+cpHsCpYSnPIkRo4869ZB1NW0CA8qfCjny/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz2V71im9VC2HEpMGfAw1MQow1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNmNmMxMzktNjViNS0z YWIyLWEzYTYtNjJmYjAzNTAzYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5ZzyKX/6aFTF3DyFxPiNv3xWRimF54nMz/z+sYahcx64lScgjn4Tj3 U0UCV2GMVIJCM2Qaq69MuxCvXv6DqDb0zHShHEM7vo7jWZUNh77j2qqEQszZsZH6 /Mcw+BA8Mim8ZUtF6BqIk1zQNvI5jVZTUF/QyrEdO8WQE/wnO/3L/e8C6MV4QCFC +ITDTUP3EBx+/butbRuZoSKcIqDnni3S8QC8F8U+aWhlf2Zf8lIcW/C4VSAddy46 LxroCYMLRmBku0qJQaoOkeeEVXBAxxjKruMOVNqn1dikvCzkZ7hJ0/MQI5IREPra /UVZugNY/M+46gDhZ0xsVYuk8U9SXEs= -----END CERTIFICATE-----Generated at Sat Sep 26 04:27:37 2026 by rpki-client