$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e559e703-1140-35fc-bfde-e4b7075c81f9.roa File: e559e703-1140-35fc-bfde-e4b7075c81f9.roa (raw, json) Hash identifier: bIx/G2m6ep6VJCNq+F4wPnyoZjAV9FTKE2PsAVM1MCc= Subject key identifier: 11:53:3F:50:B8:3F:D1:B8:A0:93:91:E6:9E:25:40:91:55:6A:D5:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AECB009768632A5E2D0A1FB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e559e703-1140-35fc-bfde-e4b7075c81f9.roa Signing time: Thu 21 Aug 2025 00:26:14 +0000 ROA not before: Thu 21 Aug 2025 00:26:14 +0000 ROA not after: Wed 19 Nov 2025 01:26:14 +0000 asID: 31898 IP address blocks: 134.70.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:b0:09:76:86:32:a5:e2:d0:a1:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 00:26:14 2025 GMT Not After : Nov 19 01:26:14 2025 GMT Subject: CN=85cb7a94-30c0-4d32-931d-fc8de884d9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:6f:02:14:44:2f:85:e4:dc:94:16:ba:1d: 6c:89:3a:f8:63:ea:fa:ef:a3:f5:00:5a:93:e2:a7: b4:39:81:9f:02:10:6b:5c:35:a8:1d:fb:3c:17:b2: 70:91:cf:f4:28:c5:bc:0f:7e:e1:31:2e:8b:e8:ef: 2a:dd:50:03:ca:b3:46:1a:53:9a:a8:4b:1c:c3:2a: 69:64:5d:8b:dc:72:1e:48:2b:b7:fd:a7:36:cb:83: 7b:2b:01:88:05:59:66:3d:21:53:88:90:17:61:a4: 9e:ac:c4:c5:0f:06:f9:e4:e9:ba:de:aa:db:e6:01: ec:bb:6c:da:0e:6d:06:57:07:7b:9b:8f:6f:e8:ed: 2b:ee:4d:f1:99:45:b1:5a:8c:e0:98:54:22:ab:a2: 2d:4c:8c:e7:a8:08:ea:b1:ff:d8:8b:ff:a6:02:0a: 28:8d:74:2c:e4:2f:20:7c:ec:ef:77:6e:dd:ec:96: 02:ac:92:68:6d:bc:c8:7f:eb:0d:95:8a:83:01:05: 1e:ae:67:3e:77:ed:02:6c:e5:f2:1c:a2:2e:85:8b: 4e:23:22:87:c4:04:af:7e:1b:3c:81:44:8f:1e:a0: 4c:30:a5:9e:02:76:5a:ff:1a:a1:ef:f6:38:2b:5a: 9e:d8:e8:da:1e:ce:5e:09:08:7c:d6:48:a9:dc:43: 40:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:3F:50:B8:3F:D1:B8:A0:93:91:E6:9E:25:40:91:55:6A:D5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e559e703-1140-35fc-bfde-e4b7075c81f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:47:a1:3c:36:8c:4c:75:71:1a:a0:d8:8a:94:23:7b:53:0d: 36:d0:92:67:e4:65:09:57:b7:cb:25:cc:c5:b3:b1:a5:41:fd: ab:8b:30:73:c5:c7:44:21:6e:26:1e:c1:79:f4:99:c0:40:25: 75:4d:f3:60:29:2e:06:dd:ae:9e:26:be:4b:4d:ed:2f:8d:e0: 8e:4c:12:22:a5:68:47:90:91:23:fb:80:8b:93:bb:4c:3f:0d: 62:ca:47:0f:c4:48:4e:b3:89:0c:6c:00:69:35:23:dd:4d:69: 41:1f:ca:6f:63:f6:f4:33:af:e6:fa:58:40:7d:c7:56:16:5a: 21:5e:a8:60:d7:cf:59:2a:91:42:d8:4e:94:84:67:3e:52:6a: 03:fb:40:2a:23:d9:2f:fa:49:37:5d:95:7d:8b:02:c8:33:16: 1b:e0:3c:7c:8b:93:a4:36:a4:a9:3e:bf:2e:c4:86:cc:cf:82: 94:a6:bd:f5:31:cf:b8:05:f8:8d:81:18:3b:ba:56:e6:61:08: 48:d3:91:93:50:f7:88:fb:0c:f3:41:1f:57:8b:ad:a3:65:63: 77:68:6b:3d:fc:eb:6a:e4:cb:a2:7c:8b:cc:23:38:73:af:be: 8d:15:3d:47:f1:26:49:65:cb:10:e2:d7:54:87:f6:21:25:61: ee:6b:33:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErssAl2hjKl4tCh+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTAwMjYxNFoXDTI1MTExOTAxMjYxNFowLzEtMCsGA1UEAxMk ODVjYjdhOTQtMzBjMC00ZDMyLTkzMWQtZmM4ZGU4ODRkOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA679vAhREL4Xk3JQWuh1siTr4Y+r676P1AFqT 4qe0OYGfAhBrXDWoHfs8F7Jwkc/0KMW8D37hMS6L6O8q3VADyrNGGlOaqEscwypp ZF2L3HIeSCu3/ac2y4N7KwGIBVlmPSFTiJAXYaSerMTFDwb55Om63qrb5gHsu2za Dm0GVwd7m49v6O0r7k3xmUWxWozgmFQiq6ItTIznqAjqsf/Yi/+mAgoojXQs5C8g fOzvd27d7JYCrJJobbzIf+sNlYqDAQUermc+d+0CbOXyHKIuhYtOIyKHxASvfhs8 gUSPHqBMMKWeAnZa/xqh7/Y4K1qe2OjaHs5eCQh81kip3ENAZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFTP1C4P9G4oJOR5p4lQJFVatVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTU1OWU3MDMtMTE0MC0z NWZjLWJmZGUtZTRiNzA3NWM4MWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNHoTw2jEx1cRqg2IqUI3tTDTbQkmfkZQlXt8slzMWzsaVB/auLMHPF x0QhbiYewXn0mcBAJXVN82ApLgbdrp4mvktN7S+N4I5MEiKlaEeQkSP7gIuTu0w/ DWLKRw/ESE6ziQxsAGk1I91NaUEfym9j9vQzr+b6WEB9x1YWWiFeqGDXz1kqkULY TpSEZz5SagP7QCoj2S/6STddlX2LAsgzFhvgPHyLk6Q2pKk+vy7EhszPgpSmvfUx z7gF+I2BGDu6VuZhCEjTkZNQ94j7DPNBH1eLraNlY3doaz3862rky6J8i8wjOHOv vo0VPUfxJkllyxDi11SH9iElYe5rMz8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:44 2025 by rpki-client