$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a289dde-1865-3fde-9547-e57db2f52da4.roa File: 5a289dde-1865-3fde-9547-e57db2f52da4.roa (raw, json) Hash identifier: 2qtjDLmnZ5PsolnxaWEBRMKmwYV3l0WeT2mzgqBxs1o= Subject key identifier: 99:05:24:D5:EA:85:3A:54:7B:77:3C:69:23:AF:06:75:27:E0:C0:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C342284B2E5848F769E180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a289dde-1865-3fde-9547-e57db2f52da4.roa Signing time: Mon 25 Aug 2025 08:14:39 +0000 ROA not before: Mon 25 Aug 2025 08:14:39 +0000 ROA not after: Sun 23 Nov 2025 09:14:39 +0000 asID: 31898 IP address blocks: 134.70.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c3:42:28:4b:2e:58:48:f7:69:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:14:39 2025 GMT Not After : Nov 23 09:14:39 2025 GMT Subject: CN=ad17e298-587f-4769-a2be-34faeb5b1c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e1:af:1d:5f:1f:89:f5:9d:9a:48:0d:0a:3d: d0:6b:e9:89:3b:b7:c0:f0:81:42:72:ff:de:b5:ef: 61:15:a4:4f:a0:8d:49:24:e1:fc:1b:5e:23:e8:96: f1:ff:fa:f6:cc:7b:91:cd:05:e8:b1:5f:7e:04:f2: 94:53:83:5c:d2:34:bf:f2:19:1b:53:3a:b6:4b:c8: cc:77:76:e2:43:66:7a:60:91:f4:2e:db:1b:5f:07: c3:1b:e7:1a:9e:08:f5:7f:75:af:56:76:1b:ef:20: 35:06:1d:0a:c8:c5:50:e5:25:bd:72:b3:1a:3b:26: 08:4f:af:fb:a5:ba:90:f1:29:dc:ea:d8:57:62:08: f4:f6:b5:96:31:2b:15:c8:eb:4d:ee:58:5e:bd:39: fb:73:d9:5d:a0:16:6b:f7:ed:87:5e:30:61:44:0a: 92:ff:66:aa:da:2c:ea:af:01:16:34:bc:1f:88:4a: 39:07:d9:49:e0:a6:e9:6d:fd:51:53:1a:4c:2c:58: a3:5d:e8:48:ad:6b:c1:c1:51:12:d6:91:a9:c7:41: 5e:2c:74:f4:77:72:ef:dc:ce:6f:00:5f:1a:ea:5d: b3:4e:09:ec:51:53:f9:9c:d9:88:0e:ee:2d:eb:56: af:3e:50:24:cf:50:07:fc:45:eb:2b:94:05:fc:81: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:05:24:D5:EA:85:3A:54:7B:77:3C:69:23:AF:06:75:27:E0:C0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a289dde-1865-3fde-9547-e57db2f52da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5a:8b:9c:1d:c4:48:bd:ae:94:38:df:44:db:65:09:32:67: 89:32:b2:51:3e:ae:7d:29:24:36:0a:43:21:2b:28:e5:07:fb: 38:1c:18:4b:b5:c8:f1:7c:df:0d:42:37:58:18:c7:07:0a:6b: ab:a0:46:85:5b:ac:55:9c:17:f9:19:f4:91:c8:84:12:af:78: 6a:a4:a9:33:9d:48:9c:bb:c2:24:11:bf:5c:17:09:67:2c:54: ba:dc:10:4e:a2:44:4b:9a:c0:e6:37:12:ee:1b:77:47:32:9a: bc:e7:2d:39:3b:1a:43:b9:dc:c4:44:b4:54:23:f9:78:69:12: 5c:b9:f0:37:98:79:29:4b:65:b3:3c:10:4e:ce:36:30:d9:d2: 65:1a:fd:1a:e7:65:90:e3:03:10:e8:ff:10:bd:99:eb:5f:f4: e3:be:e1:e1:65:20:d1:fd:57:20:f2:2d:8a:0b:1a:e6:a5:bb: b4:5c:04:e8:f5:a3:c4:6f:47:76:b1:a9:be:34:06:d2:1a:c4: 30:83:7f:7f:37:42:3c:3f:18:d6:3f:de:d9:e3:94:eb:2c:18: c5:8c:23:62:37:6b:f9:28:25:2d:41:9f:03:f5:46:8c:f7:09: 75:16:2d:22:2b:6c:5a:8f:20:72:ff:59:8d:4c:ff:82:c7:d3: 0a:e2:cf:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4w0IoSy5YSPdp4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MTQzOVoXDTI1MTEyMzA5MTQzOVowLzEtMCsGA1UEAxMk YWQxN2UyOTgtNTg3Zi00NzY5LWEyYmUtMzRmYWViNWIxYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+GvHV8fifWdmkgNCj3Qa+mJO7fA8IFCcv/e te9hFaRPoI1JJOH8G14j6Jbx//r2zHuRzQXosV9+BPKUU4Nc0jS/8hkbUzq2S8jM d3biQ2Z6YJH0LtsbXwfDG+cangj1f3WvVnYb7yA1Bh0KyMVQ5SW9crMaOyYIT6/7 pbqQ8Snc6thXYgj09rWWMSsVyOtN7lhevTn7c9ldoBZr9+2HXjBhRAqS/2aq2izq rwEWNLwfiEo5B9lJ4Kbpbf1RUxpMLFijXehIrWvBwVES1pGpx0FeLHT0d3Lv3M5v AF8a6l2zTgnsUVP5nNmIDu4t61avPlAkz1AH/EXrK5QF/IHnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkFJNXqhTpUe3c8aSOvBnUn4MDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWEyODlkZGUtMTg2NS0z ZmRlLTk1NDctZTU3ZGIyZjUyZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlai5wdxEi9rpQ430TbZQkyZ4kyslE+rn0pJDYKQyErKOUH+zgcGEu1 yPF83w1CN1gYxwcKa6ugRoVbrFWcF/kZ9JHIhBKveGqkqTOdSJy7wiQRv1wXCWcs VLrcEE6iREuawOY3Eu4bd0cymrznLTk7GkO53MREtFQj+XhpEly58DeYeSlLZbM8 EE7ONjDZ0mUa/RrnZZDjAxDo/xC9metf9OO+4eFlINH9VyDyLYoLGualu7RcBOj1 o8RvR3axqb40BtIaxDCDf383Qjw/GNY/3tnjlOssGMWMI2I3a/koJS1BnwP1Roz3 CXUWLSIrbFqPIHL/WY1M/4LH0wriz7U= -----END CERTIFICATE-----Generated at Wed Nov 5 08:45:17 2025 by rpki-client