$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5247b006-a9b9-37ec-a914-4970aca4da43.roa File: 5247b006-a9b9-37ec-a914-4970aca4da43.roa (raw, json) Hash identifier: XbKluWblgpMFWUSOK8N7xQB7unOTIR+Mhm5/7sxZvoI= Subject key identifier: AC:6E:12:07:BB:EA:61:44:DC:10:4F:DC:57:E4:2A:BC:16:E6:2E:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF0149DBABDC5EE33F3F1AB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5247b006-a9b9-37ec-a914-4970aca4da43.roa Signing time: Fri 22 Aug 2025 05:36:18 +0000 ROA not before: Fri 22 Aug 2025 05:36:18 +0000 ROA not after: Thu 20 Nov 2025 06:36:18 +0000 asID: 31898 IP address blocks: 134.70.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:14:9d:ba:bd:c5:ee:33:f3:f1:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:36:18 2025 GMT Not After : Nov 20 06:36:18 2025 GMT Subject: CN=311bfcbe-f066-4a2b-b238-65a4ee4f1960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:a3:18:a6:93:33:4d:5b:1f:9d:75:6d:63: 13:2c:93:03:57:67:cb:51:06:0c:97:0e:50:30:6e: 96:6e:58:74:ca:eb:c1:7d:b0:96:df:c8:6a:a5:eb: ca:49:d7:f0:af:6e:7e:d2:47:fb:7b:41:8e:1f:c5: 6c:9e:37:6f:bc:bc:93:f1:0e:9b:0e:60:be:6a:47: 66:00:ab:1a:a1:5c:98:b1:11:e7:32:2f:f8:c9:d9: 19:57:6e:94:e1:00:39:94:71:16:90:46:f7:de:1e: 93:bd:09:d2:04:e0:7d:4a:5e:88:50:97:35:75:53: fe:a9:a6:c5:7b:ae:e8:de:09:99:20:aa:6c:14:a4: fc:83:2d:10:bc:14:54:b1:44:ab:9c:1d:aa:af:1d: 27:07:92:9c:56:00:29:d3:4c:37:88:7e:d0:01:df: 9b:59:1f:de:9b:9e:ba:fb:71:cd:48:22:4f:5e:4b: 2b:c9:b6:d1:c6:e2:8a:af:8a:a0:75:31:0c:6b:a7: 24:3c:da:5f:45:c1:03:0d:5a:71:be:1a:00:e2:02: 09:9e:6d:b0:61:c6:9b:1f:fb:9e:1c:9f:0f:b0:44: f6:63:39:cd:87:bb:c2:a2:45:18:d8:95:d1:38:74: c3:3a:13:c4:dd:b1:34:0a:55:5b:18:5e:77:b6:0a: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6E:12:07:BB:EA:61:44:DC:10:4F:DC:57:E4:2A:BC:16:E6:2E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5247b006-a9b9-37ec-a914-4970aca4da43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b2:aa:de:d3:e7:5c:6a:e1:b9:f5:34:f3:5c:98:8f:00:cd: b7:b2:96:47:87:6d:41:e7:32:61:12:8b:6a:8a:5e:49:82:98: 00:69:fc:60:01:fa:e5:3b:90:e4:7e:fa:b4:18:c8:30:2c:eb: e4:91:ff:42:6d:b9:56:5a:cf:03:a4:d0:59:37:ca:55:ac:af: 5b:07:c1:43:ee:1a:ce:6d:b7:cd:0b:73:10:61:50:50:16:7f: 53:90:7f:7b:f7:11:a6:97:4d:d2:f2:e9:79:7c:38:c0:c4:0e: 5a:25:64:0d:4b:9f:ab:f6:da:13:49:6d:ae:e6:be:b4:71:62: c5:1c:fa:59:69:c2:81:34:b9:0d:42:aa:25:63:7f:ad:f8:31: e6:72:4b:bf:f1:6d:56:1d:0d:70:9b:ab:fe:f9:f3:33:cb:6f: 27:97:d4:97:07:2b:bb:b6:e1:e7:64:bb:81:e9:f9:9c:65:24: 11:6c:16:30:2c:72:dd:1f:01:84:21:a0:57:f3:23:b5:92:f2: 18:67:0f:7b:5b:88:13:83:87:48:11:98:c8:2a:4a:be:0f:34: 87:f7:f7:fa:5e:4d:e6:c0:95:da:e3:6a:ce:52:ee:92:b5:9a: a2:db:1b:38:37:9f:cc:7c:c9:f2:8e:a7:cc:6a:a9:63:d9:d9: ca:51:f2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwFJ26vcXuM/Pxq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzYxOFoXDTI1MTEyMDA2MzYxOFowLzEtMCsGA1UEAxMk MzExYmZjYmUtZjA2Ni00YTJiLWIyMzgtNjVhNGVlNGYxOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KOjGKaTM01bH511bWMTLJMDV2fLUQYMlw5Q MG6Wblh0yuvBfbCW38hqpevKSdfwr25+0kf7e0GOH8VsnjdvvLyT8Q6bDmC+akdm AKsaoVyYsRHnMi/4ydkZV26U4QA5lHEWkEb33h6TvQnSBOB9Sl6IUJc1dVP+qabF e67o3gmZIKpsFKT8gy0QvBRUsUSrnB2qrx0nB5KcVgAp00w3iH7QAd+bWR/em566 +3HNSCJPXksrybbRxuKKr4qgdTEMa6ckPNpfRcEDDVpxvhoA4gIJnm2wYcabH/ue HJ8PsET2YznNh7vCokUY2JXROHTDOhPE3bE0ClVbGF53tgrt1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxuEge76mFE3BBP3FfkKrwW5i74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTI0N2IwMDYtYTliOS0z N2VjLWE5MTQtNDk3MGFjYTRkYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuyqt7T51xq4bn1NPNcmI8AzbeylkeHbUHnMmESi2qKXkmCmABp/GAB +uU7kOR++rQYyDAs6+SR/0JtuVZazwOk0Fk3ylWsr1sHwUPuGs5tt80LcxBhUFAW f1OQf3v3EaaXTdLy6Xl8OMDEDlolZA1Ln6v22hNJba7mvrRxYsUc+llpwoE0uQ1C qiVjf634MeZyS7/xbVYdDXCbq/758zPLbyeX1JcHK7u24edku4Hp+ZxlJBFsFjAs ct0fAYQhoFfzI7WS8hhnD3tbiBODh0gRmMgqSr4PNIf39/peTebAldrjas5S7pK1 mqLbGzg3n8x8yfKOp8xqqWPZ2cpR8n0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:50 2025 by rpki-client