$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa File: 0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa (raw, json) Hash identifier: 4UdlO1lByVE2w+VR8bPaNdM2CDHmt1klz2Nr5SvQ02c= Subject key identifier: 35:BF:54:AA:28:EB:8E:06:68:33:5E:8F:C1:DE:B0:56:9D:31:15:08 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB006AF529A108B77973F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa Signing time: Sun 03 Aug 2025 02:35:47 +0000 ROA not before: Sun 03 Aug 2025 02:35:47 +0000 ROA not after: Sat 01 Nov 2025 02:35:47 +0000 asID: 22616 IP address blocks: 170.85.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:06:af:52:9a:10:8b:77:97:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:47 2025 GMT Not After : Nov 1 02:35:47 2025 GMT Subject: CN=3dcd60b8-5a6c-4dab-89ef-3ad19dc1fedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:96:bb:55:55:6d:32:69:6a:18:4e:a6:29: be:a2:ee:1b:ed:8a:f6:00:c5:f4:be:ba:b9:69:a3: c0:0f:45:3b:35:6f:0a:9e:84:14:84:db:15:a6:ef: 61:d5:c0:45:b5:e8:74:be:12:9e:92:63:55:b4:1c: b1:78:96:d9:ed:da:f4:2a:f9:3f:0c:d8:5b:1e:13: 55:53:ae:cc:03:4e:40:32:61:5b:b2:73:79:94:45: 29:b0:ee:ae:a4:85:f5:e3:0b:2a:f8:d9:6c:89:19: 71:82:4a:e0:6d:9c:bd:34:f8:d4:6a:45:2b:f9:ac: a7:a2:97:54:eb:9d:89:3b:ea:5d:7b:f0:b4:3c:a5: c2:98:14:f3:04:ba:6d:49:86:52:5a:69:62:68:f9: 74:cf:5c:ab:2b:36:35:f2:29:ca:13:62:84:ba:1a: 6a:e8:a0:c6:b3:f3:d4:8a:88:5d:5f:aa:8a:24:af: 20:35:61:1d:f6:39:00:89:06:09:e6:e5:3f:93:2a: 19:de:6d:c4:f5:20:81:e7:3e:3a:d5:f3:36:77:07: c0:ca:f8:82:48:0e:40:89:53:c6:25:51:07:2b:42: d0:10:f3:b5:a7:20:c2:7f:ca:82:c8:5e:71:23:55: 66:e9:fe:44:f1:c4:40:ee:4d:b9:8f:43:2c:e2:11: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BF:54:AA:28:EB:8E:06:68:33:5E:8F:C1:DE:B0:56:9D:31:15:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b4d9667-f82f-3c3e-906a-0f67b951d71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b5:2d:78:b9:e4:8e:37:88:27:38:d8:11:05:72:2d:1a:7a: 94:bc:4c:56:25:ed:b0:74:22:7c:27:0d:73:b6:df:c4:e9:5b: 32:36:71:2e:b0:7e:4e:01:29:4a:86:70:de:f1:38:d9:cd:e5: 6d:35:f6:54:bc:ba:53:77:f7:d6:84:c9:60:34:21:47:11:2b: 18:75:d2:21:23:e1:b2:f1:3b:f0:50:be:9e:f7:f8:6b:a1:db: 28:05:59:d5:97:08:c6:8f:39:23:ef:4b:88:e1:b1:04:ce:3c: 0e:05:9b:d9:af:0b:d9:7c:7d:83:7b:6e:eb:0b:4d:c6:3a:eb: ed:95:2d:4d:98:47:72:89:91:10:1b:7e:9f:35:58:bb:55:15: 60:0d:fd:9f:16:e0:c9:08:38:fe:d9:5b:c4:0a:01:a3:72:7f: 07:7d:6c:be:07:40:a2:02:7a:d5:3c:56:fb:64:6a:1f:46:66: a9:fb:96:72:1c:5c:21:3d:6e:4b:8d:29:d8:ca:d0:48:92:4e: 74:50:39:5a:f1:62:35:e5:d9:46:f3:dc:7a:e1:6d:d5:5f:5b: 54:e8:d0:46:b7:e5:6b:e7:d2:49:8a:a7:b1:13:f5:28:30:94: 5f:e1:ba:fb:6f:79:5c:da:da:c2:07:33:c4:eb:46:97:b8:08: 93:bd:16:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAavUpoQi3eXP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0N1oXDTI1MTEwMTAyMzU0N1owLzEtMCsGA1UEAxMk M2RjZDYwYjgtNWE2Yy00ZGFiLTg5ZWYtM2FkMTlkYzFmZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21mWu1VVbTJpahhOpim+ou4b7Yr2AMX0vrq5 aaPAD0U7NW8KnoQUhNsVpu9h1cBFteh0vhKekmNVtByxeJbZ7dr0Kvk/DNhbHhNV U67MA05AMmFbsnN5lEUpsO6upIX14wsq+NlsiRlxgkrgbZy9NPjUakUr+aynopdU 652JO+pde/C0PKXCmBTzBLptSYZSWmliaPl0z1yrKzY18inKE2KEuhpq6KDGs/PU iohdX6qKJK8gNWEd9jkAiQYJ5uU/kyoZ3m3E9SCB5z461fM2dwfAyviCSA5AiVPG JVEHK0LQEPO1pyDCf8qCyF5xI1Vm6f5E8cRA7k25j0Ms4hGJHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW/VKoo644GaDNej8HesFadMRUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGI0ZDk2NjctZjgyZi0z YzNlLTkwNmEtMGY2N2I5NTFkNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW1LXi55I43iCc42BEFci0aepS8TFYl7bB0InwnDXO238TpWzI2cS6w fk4BKUqGcN7xONnN5W019lS8ulN399aEyWA0IUcRKxh10iEj4bLxO/BQvp73+Guh 2ygFWdWXCMaPOSPvS4jhsQTOPA4Fm9mvC9l8fYN7busLTcY66+2VLU2YR3KJkRAb fp81WLtVFWAN/Z8W4MkIOP7ZW8QKAaNyfwd9bL4HQKICetU8Vvtkah9GZqn7lnIc XCE9bkuNKdjK0EiSTnRQOVrxYjXl2Ubz3HrhbdVfW1To0Ea35Wvn0kmKp7ET9Sgw lF/huvtveVza2sIHM8TrRpe4CJO9FmI= -----END CERTIFICATE-----Generated at Mon Aug 4 22:19:49 2025 by rpki-client