$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01678d2f-e860-36d8-a956-cc14fe23a1b3.roa File: 01678d2f-e860-36d8-a956-cc14fe23a1b3.roa (raw, json) Hash identifier: s9XbuquknGfgJmAZPF+CxDtGjtWIyGpJxhABUc0LC1k= Subject key identifier: A1:11:0E:5C:B8:D7:4E:19:AA:97:69:63:44:A9:2B:DD:FB:EE:F0:D3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00B9E6AC35C432A7B5E40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01678d2f-e860-36d8-a956-cc14fe23a1b3.roa Signing time: Sun 03 Aug 2025 02:35:49 +0000 ROA not before: Sun 03 Aug 2025 02:35:49 +0000 ROA not after: Sat 01 Nov 2025 02:35:49 +0000 asID: 22616 IP address blocks: 170.85.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:0b:9e:6a:c3:5c:43:2a:7b:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:49 2025 GMT Not After : Nov 1 02:35:49 2025 GMT Subject: CN=6535363c-21a9-464f-9a75-5c32bf2d6848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:d8:31:00:a1:73:19:7e:e5:f3:ce:13:26: a9:18:03:bd:a6:1a:76:ec:5d:46:fd:da:fb:46:41: 14:c8:3c:83:57:a7:19:40:b9:4f:78:a6:d9:7e:14: 2f:ed:07:33:a1:c4:fc:2d:15:f9:4d:11:e7:32:8a: ff:1d:3f:66:77:c0:31:48:b0:e5:df:94:24:c4:d6: 68:d8:2d:29:9f:16:11:de:50:b7:4d:38:59:67:70: 7e:c4:f9:da:d8:6e:75:b4:d1:fb:39:c0:55:6f:35: bf:44:e5:d7:c6:85:61:6b:27:89:f1:7b:e3:08:4f: 8f:3e:d8:14:a1:2f:07:53:e3:43:f4:34:c3:31:e6: a3:1f:b6:40:be:14:9d:88:5a:fb:eb:f1:f4:46:2b: 14:82:f7:87:77:83:73:28:41:8d:54:66:2b:11:67: a6:97:55:98:ad:44:04:14:06:0d:ac:16:14:e0:5c: df:95:e3:eb:5b:77:60:14:88:49:ca:51:12:43:9f: ff:7c:40:e3:40:b3:ad:cc:5f:12:b0:fb:e0:af:0a: 51:e7:e8:63:9a:79:fe:1f:75:a4:45:14:14:2a:32: 55:fe:a6:bf:14:97:4d:12:20:e8:aa:ac:06:f4:b3: ac:6e:1d:6f:32:97:a0:d8:93:e2:fe:9c:a5:11:fe: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:11:0E:5C:B8:D7:4E:19:AA:97:69:63:44:A9:2B:DD:FB:EE:F0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01678d2f-e860-36d8-a956-cc14fe23a1b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f3:7a:a7:7a:6b:5e:97:68:5a:62:1e:9b:64:64:fe:ff:ad: 58:03:b1:99:74:4c:db:86:cd:75:a8:13:63:e2:e8:5c:9f:5a: 20:74:1f:05:e5:a6:07:27:5a:03:f3:49:44:b5:f5:2a:18:18: 43:ad:06:8d:ba:79:e6:7f:58:99:11:60:bc:fd:01:78:29:8d: 5f:a8:b7:3e:93:ab:14:e8:80:e4:e2:19:ba:14:29:c7:0b:23: c2:45:e2:76:68:77:41:95:5e:20:1c:f4:69:63:de:79:3b:8b: a2:fc:b5:36:01:57:c2:c5:95:ad:8d:c4:a0:0a:db:1c:2b:d6: 93:ac:8a:a0:c8:35:f7:93:3d:9a:44:9f:14:88:ee:ae:12:0b: b9:56:f6:2c:a9:a5:39:9f:ea:68:6c:a1:04:f5:f9:7b:be:c0: 76:f3:89:75:e7:98:7c:cc:7e:16:47:3f:7c:74:7c:91:6a:b7: 09:61:e6:c9:8b:28:90:8b:41:a7:3d:35:fe:2f:bc:76:29:6d: 7b:5b:49:da:a7:68:22:e1:41:9d:d0:e8:ed:8e:01:3a:0f:26: c4:d5:f3:22:43:a6:3a:ac:88:8a:c1:11:9b:49:05:16:9d:e9: 4b:d1:ba:4e:8f:87:81:be:9d:a2:54:c7:e8:32:7a:44:f2:0b: 4d:50:c0:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAueasNcQyp7XkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OVoXDTI1MTEwMTAyMzU0OVowLzEtMCsGA1UEAxMk NjUzNTM2M2MtMjFhOS00NjRmLTlhNzUtNWMzMmJmMmQ2ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tHYMQChcxl+5fPOEyapGAO9php27F1G/dr7 RkEUyDyDV6cZQLlPeKbZfhQv7QczocT8LRX5TRHnMor/HT9md8AxSLDl35QkxNZo 2C0pnxYR3lC3TThZZ3B+xPna2G51tNH7OcBVbzW/ROXXxoVhayeJ8XvjCE+PPtgU oS8HU+ND9DTDMeajH7ZAvhSdiFr76/H0RisUgveHd4NzKEGNVGYrEWeml1WYrUQE FAYNrBYU4FzflePrW3dgFIhJylESQ5//fEDjQLOtzF8SsPvgrwpR5+hjmnn+H3Wk RRQUKjJV/qa/FJdNEiDoqqwG9LOsbh1vMpeg2JPi/pylEf7XJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKERDly4104ZqpdpY0SpK9377vDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDE2NzhkMmYtZTg2MC0z NmQ4LWE5NTYtY2MxNGZlMjNhMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDzeqd6a16XaFpiHptkZP7/rVgDsZl0TNuGzXWoE2Pi6FyfWiB0HwXl pgcnWgPzSUS19SoYGEOtBo26eeZ/WJkRYLz9AXgpjV+otz6TqxTogOTiGboUKccL I8JF4nZod0GVXiAc9Glj3nk7i6L8tTYBV8LFla2NxKAK2xwr1pOsiqDINfeTPZpE nxSI7q4SC7lW9iyppTmf6mhsoQT1+Xu+wHbziXXnmHzMfhZHP3x0fJFqtwlh5smL KJCLQac9Nf4vvHYpbXtbSdqnaCLhQZ3Q6O2OAToPJsTV8yJDpjqsiIrBEZtJBRad 6UvRuk6Ph4G+naJUx+gyekTyC01QwNY= -----END CERTIFICATE-----Generated at Wed Aug 6 04:13:18 2025 by rpki-client