$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa File: 4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa (raw, json) Hash identifier: JNOAJqWhGMCqz+GcX8fozZX8sX7bWAHvK+S8D0xKLMA= Subject key identifier: 2B:76:06:48:F5:F2:5B:D6:47:27:2B:25:5C:49:99:C1:36:F4:09:5E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B9F6CDD6D9D91B31873B545C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 46558 IP address blocks: 134.70.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:dd:6d:9d:91:b3:18:73:b5:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=14ad005f-9d39-4638-914e-ce6ae265d6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:eb:78:f4:50:5d:6a:9f:59:c6:6a:65:4b: f1:41:8e:12:3e:9e:dc:f1:9d:19:40:15:95:ca:29: 7f:4c:a3:af:0f:9a:07:ff:16:eb:a2:f0:f8:98:2c: 9f:91:ee:8b:4f:e5:12:08:d3:e7:53:df:74:5f:2e: 35:bc:0b:df:09:0a:44:0a:69:77:5e:75:09:1a:08: c4:a8:84:08:c0:b5:c4:10:8a:74:2a:b8:e1:71:9b: 27:f7:0a:cc:5e:e5:92:dd:fd:23:b7:1d:e1:24:9b: 49:41:95:88:5f:7a:2b:61:fc:ce:5c:bf:3d:a7:6a: f9:73:1a:77:d0:50:97:bb:e4:a2:62:e2:f9:01:dd: 6c:f3:f0:ea:5a:19:be:65:55:d3:34:74:46:3e:ad: 36:94:8d:66:ee:25:13:e8:87:59:6b:dc:ff:fc:d7: b4:13:c2:9b:34:c7:fe:48:7e:54:0d:3a:81:f9:3d: 39:f9:01:dc:a2:3f:eb:4a:fd:b1:64:ef:59:c9:22: f0:9b:d1:ae:40:fc:cc:f9:7f:78:cd:87:43:f0:23: 36:6b:bc:a6:b1:30:d2:8d:7e:61:67:e9:9f:89:9c: 1d:f9:47:8b:e4:48:d5:c1:3e:27:5b:82:fc:19:c1: 37:4d:07:ba:a3:51:6b:08:6a:48:c6:e5:d3:b8:d1: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:76:06:48:F5:F2:5B:D6:47:27:2B:25:5C:49:99:C1:36:F4:09:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:15:25:4a:0c:ff:d5:21:c6:0f:ef:22:1a:6c:9a:49:43:97: 15:40:71:8c:22:db:9a:43:87:7c:b2:79:49:44:68:b9:1a:f3: 33:ad:ce:bb:ba:95:8f:42:e2:27:eb:0a:69:ac:f4:68:db:ce: b0:50:1c:68:b7:50:b4:25:ba:99:d4:74:ea:01:ff:4c:1f:0f: 97:3f:dc:e1:10:39:0c:3e:06:cd:8d:1a:af:59:89:f2:af:90: e9:e0:01:4b:e7:58:9f:59:c0:b3:83:37:c7:55:bd:86:8a:74: d3:bf:3a:75:57:f9:d1:43:6f:6a:52:68:22:a3:3a:6d:16:5c: 7b:a0:16:3a:d5:8b:cd:83:92:40:5f:ae:af:0a:df:d1:96:4a: c2:ee:de:17:e8:5e:a9:0a:e6:75:15:02:94:17:7e:05:00:9f: 79:fa:53:73:e0:6c:9a:6f:cc:0a:bc:83:96:25:67:18:aa:1c: ea:bf:7b:52:f3:0d:ff:20:f4:7e:3c:c6:c9:bb:06:06:07:aa: 66:c9:02:e8:33:bc:73:0e:89:02:d0:3a:16:2a:14:af:6c:ae: cc:cd:d2:c3:5a:bd:71:55:ed:4f:e3:1a:02:0c:e2:0f:2a:67: b1:ce:4f:ca:a7:b7:82:bd:3c:6c:9c:df:14:c2:34:58:89:39: a3:44:23:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbN1tnZGzGHO1RcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk MTRhZDAwNWYtOWQzOS00NjM4LTkxNGUtY2U2YWUyNjVkNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOfrePRQXWqfWcZqZUvxQY4SPp7c8Z0ZQBWV yil/TKOvD5oH/xbrovD4mCyfke6LT+USCNPnU990Xy41vAvfCQpECml3XnUJGgjE qIQIwLXEEIp0KrjhcZsn9wrMXuWS3f0jtx3hJJtJQZWIX3orYfzOXL89p2r5cxp3 0FCXu+SiYuL5Ad1s8/DqWhm+ZVXTNHRGPq02lI1m7iUT6IdZa9z//Ne0E8KbNMf+ SH5UDTqB+T05+QHcoj/rSv2xZO9ZySLwm9GuQPzM+X94zYdD8CM2a7ymsTDSjX5h Z+mfiZwd+UeL5EjVwT4nW4L8GcE3TQe6o1FrCGpIxuXTuNEqCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt2Bkj18lvWRycrJVxJmcE29AleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGQ3Zjc2YjAtYzRhMS0z NzFiLTk5ZjktMzQ3Y2E3Mzc0M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUVJUoM/9Uhxg/vIhpsmklDlxVAcYwi25pDh3yyeUlEaLka8zOtzru6 lY9C4ifrCmms9GjbzrBQHGi3ULQlupnUdOoB/0wfD5c/3OEQOQw+Bs2NGq9ZifKv kOngAUvnWJ9ZwLODN8dVvYaKdNO/OnVX+dFDb2pSaCKjOm0WXHugFjrVi82DkkBf rq8K39GWSsLu3hfoXqkK5nUVApQXfgUAn3n6U3PgbJpvzAq8g5YlZxiqHOq/e1Lz Df8g9H48xsm7BgYHqmbJAugzvHMOiQLQOhYqFK9srszN0sNavXFV7U/jGgIM4g8q Z7HOT8qnt4K9PGyc3xTCNFiJOaNEI14= -----END CERTIFICATE-----Generated at Wed Nov 5 04:50:46 2025 by rpki-client