$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa File: 83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa (raw, json) Hash identifier: uVdQxV+R+WJwXITxnB0cUJp+FADBkWFsf0OqwzTxQJs= Subject key identifier: 0F:03:5E:0E:16:E9:3D:B2:37:A6:B8:B5:92:4A:21:DC:18:67:EB:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A64082B0E5918E1EE8060 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa Signing time: Thu 21 Aug 2025 13:08:34 +0000 ROA not before: Thu 21 Aug 2025 13:08:34 +0000 ROA not after: Wed 19 Nov 2025 14:08:34 +0000 asID: 31898 IP address blocks: 134.70.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:64:08:2b:0e:59:18:e1:ee:80:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:34 2025 GMT Not After : Nov 19 14:08:34 2025 GMT Subject: CN=f24edc73-ad95-4d5b-85c7-0efa689c01e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:39:ee:ce:2d:56:15:d9:21:69:44:b1:4f: 78:a1:ae:61:e1:5d:3a:d4:9c:23:3a:ff:48:2d:29: 16:85:ce:0b:1f:c7:23:25:2e:38:24:8c:1d:89:d2: d1:55:9e:60:fe:02:dc:89:37:09:aa:65:91:b3:ff: ca:b6:3d:0b:a9:fd:16:b3:cc:08:3f:eb:94:a3:fc: 7f:a6:b2:a0:54:5d:4d:d1:87:3e:0b:22:5a:24:99: ab:bb:d5:9e:7d:bf:7a:e0:20:61:f9:e1:67:f5:bc: a0:14:d8:79:9d:80:67:73:bb:79:58:d4:25:ed:16: 71:32:7f:d9:b7:d1:fa:94:c2:09:e9:1d:b7:b4:4a: 66:25:6d:b1:30:44:20:4b:7b:e0:48:5a:ec:35:be: d0:fe:19:71:15:71:7b:ac:9b:08:30:17:6c:50:87: c0:55:2f:16:b4:51:11:3a:27:99:03:68:b8:cf:0d: 08:3a:21:bf:f4:a2:28:bb:86:ba:5c:d9:ce:43:75: c4:dc:8d:a9:81:e3:e4:13:27:72:29:04:2f:9f:f4: e0:31:f0:4c:0d:e3:f0:0a:06:45:43:a5:de:82:55: a7:1b:b4:26:00:58:c2:0b:28:dd:d0:98:d6:0a:54: 7e:37:dd:5f:f3:c0:ee:16:e2:af:ba:ab:d3:46:29: 20:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:03:5E:0E:16:E9:3D:B2:37:A6:B8:B5:92:4A:21:DC:18:67:EB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/83a66ae9-b3ba-31fb-8a56-e29b953384c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:85:4d:36:c4:63:35:12:40:8f:ab:40:77:e3:d4:21:67:44: 0e:fe:3c:d6:23:85:a7:5b:8a:97:b4:ca:ab:ce:b1:59:68:f0: ae:ed:88:91:24:92:88:c7:bc:42:a3:bb:be:b8:14:21:43:13: 37:5e:04:b7:89:f0:a3:16:3f:cc:c3:f9:17:ed:44:ec:5f:1b: 3d:80:82:12:5f:fa:77:7a:23:02:62:ed:a3:9c:04:d3:21:e5: 87:7a:0c:60:84:b6:20:d5:db:fd:01:86:d3:a0:44:53:3e:2c: 35:24:b0:62:a3:37:c2:51:4b:f9:10:c5:70:d1:c6:5d:42:24: 1b:59:7d:0f:7d:59:84:4c:ca:a0:86:ff:44:a2:36:a1:18:22: 50:c7:b3:63:f1:2b:11:af:50:32:94:f4:1b:2a:44:de:de:f1: 1a:54:9a:5e:42:b0:ed:f4:bb:fd:a6:96:19:0d:2e:fe:bd:b5: 16:06:d7:1e:f8:dd:5d:b2:ff:5c:26:29:b4:ff:44:bb:ca:f2: 08:85:1f:de:c6:62:0a:7a:05:b2:2e:b1:ab:73:71:19:95:00: b1:ef:26:de:22:04:90:e6:bb:4b:17:b3:c0:99:17:1d:5d:d1: e2:78:64:8a:af:8d:90:f7:58:c5:a3:7e:af:f5:f9:26:c3:19: 99:b3:7b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKmQIKw5ZGOHugGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDgzNFoXDTI1MTExOTE0MDgzNFowLzEtMCsGA1UEAxMk ZjI0ZWRjNzMtYWQ5NS00ZDViLTg1YzctMGVmYTY4OWMwMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S457s4tVhXZIWlEsU94oa5h4V061JwjOv9I LSkWhc4LH8cjJS44JIwdidLRVZ5g/gLciTcJqmWRs//Ktj0Lqf0Ws8wIP+uUo/x/ prKgVF1N0Yc+CyJaJJmru9Wefb964CBh+eFn9bygFNh5nYBnc7t5WNQl7RZxMn/Z t9H6lMIJ6R23tEpmJW2xMEQgS3vgSFrsNb7Q/hlxFXF7rJsIMBdsUIfAVS8WtFER OieZA2i4zw0IOiG/9KIou4a6XNnOQ3XE3I2pgePkEydyKQQvn/TgMfBMDePwCgZF Q6XeglWnG7QmAFjCCyjd0JjWClR+N91f88DuFuKvuqvTRikgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8DXg4W6T2yN6a4tZJKIdwYZ+spMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODNhNjZhZTktYjNiYS0z MWZiLThhNTYtZTI5Yjk1MzM4NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+FTTbEYzUSQI+rQHfj1CFnRA7+PNYjhadbipe0yqvOsVlo8K7tiJEk kojHvEKju764FCFDEzdeBLeJ8KMWP8zD+RftROxfGz2AghJf+nd6IwJi7aOcBNMh 5Yd6DGCEtiDV2/0BhtOgRFM+LDUksGKjN8JRS/kQxXDRxl1CJBtZfQ99WYRMyqCG /0SiNqEYIlDHs2PxKxGvUDKU9BsqRN7e8RpUml5CsO30u/2mlhkNLv69tRYG1x74 3V2y/1wmKbT/RLvK8giFH97GYgp6BbIusatzcRmVALHvJt4iBJDmu0sXs8CZFx1d 0eJ4ZIqvjZD3WMWjfq/1+SbDGZmzey0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:14 2025 by rpki-client