$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa File: 4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa (raw, json) Hash identifier: 9IM9KTzhYKovJiekHHQNC5pxytjFaCzNSwYnvupiv6k= Subject key identifier: 2C:67:45:D6:0E:94:0F:26:35:04:F2:B3:87:31:6A:96:D3:4E:19:6E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ABF4FF4D19B664D05E0B72100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa Signing time: Mon 04 Aug 2025 18:21:16 +0000 ROA not before: Mon 04 Aug 2025 18:21:16 +0000 ROA not after: Sun 02 Nov 2025 19:21:16 +0000 asID: 46558 IP address blocks: 134.70.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:4f:f4:d1:9b:66:4d:05:e0:b7:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 4 18:21:16 2025 GMT Not After : Nov 2 19:21:16 2025 GMT Subject: CN=cb1bb1d8-76ff-4b9d-a2f7-8d16c138a3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:1c:be:27:69:08:91:b9:d3:1c:d3:d3:56: bd:f6:75:82:80:c4:78:ae:9d:7f:29:6d:59:ca:48: da:54:83:37:e3:bf:f7:de:96:c3:b5:5b:5d:27:73: 6b:b7:31:dc:bc:f1:49:b6:ba:47:3e:4c:da:af:b8: 5e:4b:16:09:55:49:d3:48:70:66:24:d2:8f:93:1f: 49:bc:d4:f5:e3:d2:20:0b:86:67:2f:44:64:2d:f2: 87:97:79:f0:1d:f2:55:3c:01:2b:be:26:72:fc:d5: 6f:cd:5c:af:b6:97:11:f8:bf:38:51:63:19:fb:ac: eb:8d:42:e8:1a:56:e0:74:6c:c4:0e:1f:f4:3d:1b: ac:4a:9f:e7:e3:48:80:13:d6:a5:9d:8f:fc:35:95: 18:e6:fa:c7:b5:61:62:b5:7d:19:2e:c2:95:56:f7: ad:0e:59:bd:4f:88:c7:f9:6b:7e:24:85:d0:b7:07: 99:e2:74:95:8c:9d:0d:28:34:ea:ec:ea:dc:5c:ed: a6:78:60:51:75:24:29:30:2e:10:3f:d8:ea:fd:af: 68:10:26:ec:3e:7b:56:dd:2b:9a:fc:89:99:c3:5d: 86:ba:6f:df:b5:b3:53:fa:f5:c8:b7:6e:c0:1c:12: fb:47:1c:be:4b:21:07:83:ba:c2:6e:9e:42:4d:ea: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:67:45:D6:0E:94:0F:26:35:04:F2:B3:87:31:6A:96:D3:4E:19:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4d7f76b0-c4a1-371b-99f9-347ca73743cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:47:3c:78:c8:6e:f4:d0:00:47:ce:d0:50:37:ec:c7:be:db: a7:07:20:41:5d:68:57:ee:c4:7c:7f:c7:38:2b:81:57:10:bf: db:ca:f2:a5:57:2a:c9:05:58:8d:77:21:e3:9a:54:35:94:3e: 82:d8:05:4f:a4:d5:71:17:79:b4:c0:cd:72:d4:24:8a:64:f9: 82:12:9d:f5:6b:ad:99:60:11:c8:3a:93:8a:bb:7c:08:44:cf: b8:c4:8c:7a:9b:a2:74:92:91:89:5b:16:3f:58:cf:bb:5c:c8: 79:15:6e:3e:ce:54:38:3d:a9:27:bd:68:d9:08:6e:bb:3e:55: 82:22:9f:d3:60:72:35:6a:77:d6:16:c4:31:ff:39:69:5b:75: 26:aa:fc:85:c5:7c:f3:10:4e:67:10:3b:51:de:fd:68:70:68: 37:07:6c:63:86:73:4d:91:a6:11:ea:a7:2c:6d:ef:62:be:80: 55:d2:69:b1:1d:2c:ce:4e:c1:e7:8c:a8:30:6e:5e:d7:a1:7e: f4:fc:f0:aa:67:80:00:72:cd:ca:5f:b6:ab:5a:62:ed:ab:d8: f3:9a:ce:df:b3:49:0e:cc:c9:75:6f:0d:7e:95:ff:67:85:86: 54:fc:ea:e1:eb:6d:7a:99:6f:d3:f3:09:9b:82:87:e7:11:c6: e3:fb:d7:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/T/TRm2ZNBeC3IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwNDE4MjExNloXDTI1MTEwMjE5MjExNlowLzEtMCsGA1UEAxMk Y2IxYmIxZDgtNzZmZi00YjlkLWEyZjctOGQxNmMxMzhhM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuEcvidpCJG50xzT01a99nWCgMR4rp1/KW1Z ykjaVIM347/33pbDtVtdJ3NrtzHcvPFJtrpHPkzar7heSxYJVUnTSHBmJNKPkx9J vNT149IgC4ZnL0RkLfKHl3nwHfJVPAErviZy/NVvzVyvtpcR+L84UWMZ+6zrjULo GlbgdGzEDh/0PRusSp/n40iAE9alnY/8NZUY5vrHtWFitX0ZLsKVVvetDlm9T4jH +Wt+JIXQtweZ4nSVjJ0NKDTq7OrcXO2meGBRdSQpMC4QP9jq/a9oECbsPntW3Sua /ImZw12Gum/ftbNT+vXIt27AHBL7Rxy+SyEHg7rCbp5CTeohzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxnRdYOlA8mNQTys4cxapbTThluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGQ3Zjc2YjAtYzRhMS0z NzFiLTk5ZjktMzQ3Y2E3Mzc0M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5HPHjIbvTQAEfO0FA37Me+26cHIEFdaFfuxHx/xzgrgVcQv9vK8qVX KskFWI13IeOaVDWUPoLYBU+k1XEXebTAzXLUJIpk+YISnfVrrZlgEcg6k4q7fAhE z7jEjHqbonSSkYlbFj9Yz7tcyHkVbj7OVDg9qSe9aNkIbrs+VYIin9NgcjVqd9YW xDH/OWlbdSaq/IXFfPMQTmcQO1He/WhwaDcHbGOGc02RphHqpyxt72K+gFXSabEd LM5OweeMqDBuXtehfvT88KpngAByzcpftqtaYu2r2POazt+zSQ7MyXVvDX6V/2eF hlT86uHrbXqZb9PzCZuCh+cRxuP71yk= -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:04 2025 by rpki-client