$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8be318fa-dcb2-30d0-a57d-8ea31c4607ea.roa File: 8be318fa-dcb2-30d0-a57d-8ea31c4607ea.roa (raw, json) Hash identifier: G/p3yDHKyGqlj9jXxVAiDTPOb2r9RP93MtEtTpB1uIQ= Subject key identifier: 83:C4:8B:AB:56:0D:5F:6B:CF:41:FE:08:D5:EA:D3:16:B9:09:D3:81 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF9C82B92D295CAAD994D2900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8be318fa-dcb2-30d0-a57d-8ea31c4607ea.roa Signing time: Mon 25 Aug 2025 17:00:22 +0000 ROA not before: Mon 25 Aug 2025 17:00:22 +0000 ROA not after: Sun 23 Nov 2025 18:00:22 +0000 asID: 31898 IP address blocks: 134.70.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:2b:92:d2:95:ca:ad:99:4d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 17:00:22 2025 GMT Not After : Nov 23 18:00:22 2025 GMT Subject: CN=f661816b-a2dd-4355-b2cf-e8336e813de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:02:d4:c0:c2:92:c4:8a:8f:ce:ae:a6:b2: 5d:88:2c:e4:b2:86:f1:a1:fe:83:42:12:80:f3:6b: a5:40:5d:f8:8c:b4:5e:ef:75:95:3f:e0:e3:d6:bd: 34:db:ba:91:3f:f8:72:67:43:bb:78:6b:a3:c6:d4: e8:c3:30:fd:75:18:b6:c5:8a:71:5c:80:41:0f:33: e6:96:e0:73:f3:79:43:f7:56:38:c4:87:26:69:1a: 6f:4e:4d:5a:eb:8e:57:b3:17:4c:d8:1d:f6:c9:97: 38:28:ae:83:60:26:6e:3b:da:40:0c:53:de:35:bc: 70:35:7c:6d:ed:2d:06:3a:3b:2d:78:7b:e4:6f:bd: 2d:de:a4:98:80:d3:ac:17:ce:5a:41:e1:3c:ba:bf: 38:fa:4d:a2:b1:2f:10:e4:ae:d4:30:8e:68:a7:29: 60:48:f5:1a:70:a4:d9:88:77:eb:77:1f:8f:23:da: 5f:60:9c:fa:f4:25:45:5f:29:67:f5:60:2d:d9:ef: fb:40:a0:df:f6:f7:cb:b3:af:ff:cb:fa:97:66:b5: d7:37:49:ec:51:c1:5d:9b:39:f5:9e:7e:c0:23:36: 20:f0:50:54:50:ff:ae:85:e9:c0:f1:39:5b:2d:cc: 9c:cf:de:1d:75:3e:9d:b8:76:0b:8d:ca:15:85:ca: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C4:8B:AB:56:0D:5F:6B:CF:41:FE:08:D5:EA:D3:16:B9:09:D3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8be318fa-dcb2-30d0-a57d-8ea31c4607ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ff:b5:47:cb:0b:eb:12:2a:80:27:86:38:d7:81:f0:31:a9: 22:11:7c:6d:01:2a:fb:44:bb:6d:52:5b:68:ae:e9:ca:4e:a8: 9f:da:d5:58:66:6e:4d:6d:7a:b1:f8:5a:92:b3:94:13:a1:ec: fd:50:5f:e8:68:59:ae:b8:46:cd:74:38:fe:64:ee:78:e7:71: 9e:96:47:83:b6:13:6c:54:f8:04:9e:84:4d:dc:6c:b9:8d:fb: f5:51:42:a0:c3:6d:b5:df:89:80:e4:a3:2a:7d:17:29:45:e1: c3:17:0f:05:2c:fd:b3:aa:21:79:ec:34:bc:62:14:e0:7f:94: c9:43:74:2b:82:62:e0:30:04:a5:09:59:c8:8f:2f:b0:28:d5: 9b:2b:96:39:55:b4:95:c2:26:fe:bf:0f:e2:b5:95:00:7f:c8: 13:04:68:84:8c:5d:0a:34:fb:87:c6:66:c8:07:f6:17:b6:fb: 21:3f:5a:51:a3:19:74:30:87:e7:92:9c:2f:f7:2f:ce:8d:97: 5c:e0:91:b4:87:34:12:a2:9b:e0:20:2e:6e:53:07:25:74:6a: 43:2c:38:b4:a5:d5:cc:d8:d7:bd:3a:eb:cf:ad:f4:e9:18:28: 86:19:d5:0c:67:ba:29:8b:46:62:bf:33:34:83:06:ee:09:77: 98:68:74:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5yCuS0pXKrZlNKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTE3MDAyMloXDTI1MTEyMzE4MDAyMlowLzEtMCsGA1UEAxMk ZjY2MTgxNmItYTJkZC00MzU1LWIyY2YtZTgzMzZlODEzZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaUC1MDCksSKj86uprJdiCzksobxof6DQhKA 82ulQF34jLRe73WVP+Dj1r0027qRP/hyZ0O7eGujxtTowzD9dRi2xYpxXIBBDzPm luBz83lD91Y4xIcmaRpvTk1a645XsxdM2B32yZc4KK6DYCZuO9pADFPeNbxwNXxt 7S0GOjsteHvkb70t3qSYgNOsF85aQeE8ur84+k2isS8Q5K7UMI5opylgSPUacKTZ iHfrdx+PI9pfYJz69CVFXyln9WAt2e/7QKDf9vfLs6//y/qXZrXXN0nsUcFdmzn1 nn7AIzYg8FBUUP+uhenA8TlbLcycz94ddT6duHYLjcoVhcoKmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPEi6tWDV9rz0H+CNXq0xa5CdOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGJlMzE4ZmEtZGNiMi0z MGQwLWE1N2QtOGVhMzFjNDYwN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhka8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKn/tUfLC+sSKoAnhjjXgfAxqSIRfG0BKvtEu21SW2iu6cpOqJ/a1Vhm bk1terH4WpKzlBOh7P1QX+hoWa64Rs10OP5k7njncZ6WR4O2E2xU+ASehE3cbLmN +/VRQqDDbbXfiYDkoyp9FylF4cMXDwUs/bOqIXnsNLxiFOB/lMlDdCuCYuAwBKUJ WciPL7Ao1ZsrljlVtJXCJv6/D+K1lQB/yBMEaISMXQo0+4fGZsgH9he2+yE/WlGj GXQwh+eSnC/3L86Nl1zgkbSHNBKim+AgLm5TByV0akMsOLSl1czY170668+t9OkY KIYZ1QxnuimLRmK/MzSDBu4Jd5hodBw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:10 2025 by rpki-client