$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f7a10e01-258b-3cc8-8e01-1d9c6e68aa8b.roa File: f7a10e01-258b-3cc8-8e01-1d9c6e68aa8b.roa (raw, json) Hash identifier: 0bdZTgEJW3EOqVPFj32HslHfjS8PjUfNtSbA3mgcSpc= Subject key identifier: 8B:68:0C:EA:10:47:C7:10:02:77:19:9A:8B:63:EB:02:A0:64:19:F2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE4060C5D80E84F399B66900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f7a10e01-258b-3cc8-8e01-1d9c6e68aa8b.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 134.70.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:60:c5:d8:0e:84:f3:99:b6:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=9838f61d-2ae0-4697-b1ef-57e0960ca5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:cb:75:4f:0b:8b:c7:00:31:21:6c:a8:2f: 0b:39:65:94:20:95:ae:79:95:7a:c6:b7:c7:62:61: 02:f7:a9:80:68:93:a4:c9:ff:77:54:cd:3b:b0:4b: 6a:c3:19:fe:6d:8f:88:3b:ac:89:44:ee:96:79:2d: 24:84:65:fe:32:ac:94:9f:e5:7c:58:ad:98:da:da: f1:88:42:7b:6c:96:5b:78:d2:75:37:45:9c:31:d0: 27:97:05:1d:d9:37:67:21:14:96:e6:f7:b6:90:17: 47:dd:4f:26:83:e8:91:05:38:db:a6:f1:1d:96:34: 03:e4:35:d7:5c:bc:27:84:61:54:9e:cb:c7:4b:0a: 29:4a:ed:10:5e:74:1b:df:33:0c:d3:92:b9:fb:9a: 2e:8b:4a:a2:1c:62:66:c8:93:54:58:f2:59:25:0c: d3:6c:2d:62:0f:8a:fa:9f:46:29:3d:36:3b:6c:dd: d2:ae:ce:8a:36:25:ee:d9:8c:a7:a0:08:77:6b:0f: 7a:94:3b:0b:46:a5:a4:82:b7:d5:49:5b:be:46:2c: 6a:9f:65:6c:1c:da:74:00:6a:48:7f:82:5d:7f:1a: b9:87:a7:83:5b:7e:9b:3c:43:33:90:e3:f5:d1:6c: 3a:44:ac:0e:00:95:19:e1:69:a7:80:33:90:a0:04: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:68:0C:EA:10:47:C7:10:02:77:19:9A:8B:63:EB:02:A0:64:19:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f7a10e01-258b-3cc8-8e01-1d9c6e68aa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:7b:ab:c9:a2:58:78:41:8d:95:94:49:55:10:90:b6:b0:24: 8f:53:f1:c5:55:68:14:4d:ec:26:a9:b0:ea:d0:e8:b1:f4:16: 37:38:3d:d6:7d:97:ca:b7:d9:af:c4:85:e5:6d:15:4d:a4:69: 96:6b:5d:1f:0a:2f:f8:87:e4:7d:9c:02:7c:14:40:1d:df:55: d5:e4:27:44:12:77:3c:99:a2:ba:3e:a9:f2:3b:92:2c:e6:81: bd:b0:79:81:b2:89:58:98:8f:14:81:27:7f:74:cf:c2:1b:42: 6f:58:1d:6c:a5:36:05:93:b1:d9:72:e7:41:2c:d4:8b:d8:4f: 86:68:5e:b2:91:2b:98:31:ba:6b:4a:95:02:cc:d6:10:e4:6c: 85:17:e4:40:15:a5:98:ad:ef:5d:c6:24:5c:84:a6:30:f2:4c: 7f:bd:69:91:f0:c5:84:c9:64:c6:1a:2b:29:c1:40:d5:2a:5e: ad:e0:45:54:8e:27:ae:a6:57:d5:cf:bd:e3:04:da:f3:21:08: 44:6d:aa:cb:b3:e6:9c:ba:a4:d7:6a:58:4e:44:77:28:d7:e7: 09:da:30:e9:d2:48:23:d4:ba:db:d8:8c:a6:db:d2:7e:a1:67: a4:c4:d6:ab:3c:02:6d:d5:c9:95:44:7e:54:d0:83:a1:99:4e: 9d:30:fd:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGDF2A6E85m2aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OTgzOGY2MWQtMmFlMC00Njk3LWIxZWYtNTdlMDk2MGNhNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPvLdU8Li8cAMSFsqC8LOWWUIJWueZV6xrfH YmEC96mAaJOkyf93VM07sEtqwxn+bY+IO6yJRO6WeS0khGX+MqyUn+V8WK2Y2trx iEJ7bJZbeNJ1N0WcMdAnlwUd2TdnIRSW5ve2kBdH3U8mg+iRBTjbpvEdljQD5DXX XLwnhGFUnsvHSwopSu0QXnQb3zMM05K5+5oui0qiHGJmyJNUWPJZJQzTbC1iD4r6 n0YpPTY7bN3Srs6KNiXu2YynoAh3aw96lDsLRqWkgrfVSVu+Rixqn2VsHNp0AGpI f4Jdfxq5h6eDW36bPEMzkOP10Ww6RKwOAJUZ4WmngDOQoARkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItoDOoQR8cQAncZmotj6wKgZBnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjdhMTBlMDEtMjU4Yi0z Y2M4LThlMDEtMWQ5YzZlNjhhYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ7q8miWHhBjZWUSVUQkLawJI9T8cVVaBRN7CapsOrQ6LH0Fjc4PdZ9 l8q32a/EheVtFU2kaZZrXR8KL/iH5H2cAnwUQB3fVdXkJ0QSdzyZoro+qfI7kizm gb2weYGyiViYjxSBJ390z8IbQm9YHWylNgWTsdly50Es1IvYT4ZoXrKRK5gxumtK lQLM1hDkbIUX5EAVpZit713GJFyEpjDyTH+9aZHwxYTJZMYaKynBQNUqXq3gRVSO J66mV9XPveME2vMhCERtqsuz5py6pNdqWE5EdyjX5wnaMOnSSCPUutvYjKbb0n6h Z6TE1qs8Am3VyZVEflTQg6GZTp0w/cU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:27 2025 by rpki-client