$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa File: 261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa (raw, json) Hash identifier: GuRNcjrX1WdAmLHaysCFYJulo8iEXksbo06gXKZmZg4= Subject key identifier: D9:F6:44:34:25:A6:B7:E0:AA:B4:F0:D9:74:2A:78:DD:75:45:81:96 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849E91F9B2665CFF46422AAEB00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9b:26:65:cf:f4:64:22:aa:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=0bed08cd-a34a-40d4-9ec8-1632240cdb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:64:0c:50:67:57:ad:3d:03:6b:22:0e:99: 9e:8b:39:68:8d:81:eb:3e:66:15:63:8c:b9:ca:a7: 95:21:47:e1:9e:81:cb:ff:d2:61:71:74:ed:1d:7e: 4d:65:f0:62:68:de:9f:70:ff:3e:61:de:05:55:1d: d1:9f:4e:62:43:ab:b3:33:68:0d:32:92:06:fb:ce: 8a:7f:d3:dd:66:74:d1:f5:05:49:df:17:57:1b:16: a0:d8:db:a9:a3:93:f4:22:50:7f:bc:cf:a6:75:4c: 63:ed:3b:a3:86:b1:a7:27:e4:35:b0:ea:a0:a5:97: 09:bc:12:62:ff:d0:39:9b:6b:75:84:65:48:4a:44: 0a:a0:d8:50:a3:81:a2:cf:3e:3a:e4:7c:08:94:b4: b0:ab:41:15:d7:f9:16:19:b9:d0:d1:59:3d:cd:f9: f1:fe:51:ad:68:85:b7:f1:d3:16:f5:cc:c2:aa:10: 16:fd:f4:b1:9d:ca:3b:8f:d7:4a:84:5b:5d:ba:72: e6:d8:12:2b:3f:51:5c:47:55:fa:f2:d6:98:d3:52: 77:76:60:a1:c1:cc:f1:0a:23:ed:7d:48:4b:d4:6d: 62:85:7b:e5:05:0c:e1:3f:bd:23:31:26:d9:73:95: 1b:5c:3b:72:5c:e7:47:36:6a:ae:8a:e9:9c:f1:17: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F6:44:34:25:A6:B7:E0:AA:B4:F0:D9:74:2A:78:DD:75:45:81:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:cf:d4:38:d7:0f:fb:82:e4:80:59:d8:2a:18:46:85:c6:9e: 67:e1:85:cb:c4:e9:de:0f:50:08:38:3a:f8:0e:17:94:2d:24: 1b:c2:d1:54:46:6c:1a:32:a8:58:90:66:b6:93:e3:65:9d:b3: 0f:d6:f4:fa:8c:bb:62:39:68:8d:92:70:03:2e:d1:52:d2:57: 4e:85:e7:cb:e4:ad:4e:93:da:69:32:70:6c:c9:46:01:b4:7b: 14:45:fe:9f:ac:6d:7f:8f:0c:07:d6:4c:c4:1f:4b:09:5f:07: 26:9d:a4:82:24:60:99:40:26:1e:6a:fa:8f:32:cb:a4:07:41: b5:76:85:05:50:84:f5:6f:2f:0e:a2:c1:fc:18:2a:24:18:5b: a4:e0:90:af:37:f1:32:cc:f8:f4:0b:f3:28:48:64:fe:21:ab: 97:3a:05:08:fb:46:6d:d7:eb:18:ed:18:25:53:3d:6a:0c:d5: f0:f6:06:d9:3a:dd:e5:e9:4f:f7:b8:ca:18:99:a8:e9:bb:44: eb:aa:a6:5c:e4:70:1c:e0:66:13:2f:6d:ed:33:2e:bf:d4:99: 1f:43:94:fc:1d:5d:d6:d1:1d:a8:53:1e:6e:3a:ae:40:9d:c2: 05:1f:14:72:ac:f5:19:ad:11:f7:30:78:75:e4:35:76:af:a5: d4:b5:b7:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH5smZc/0ZCKq6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk MGJlZDA4Y2QtYTM0YS00MGQ0LTllYzgtMTYzMjI0MGNkYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgtkDFBnV609A2siDpmeizlojYHrPmYVY4y5 yqeVIUfhnoHL/9JhcXTtHX5NZfBiaN6fcP8+Yd4FVR3Rn05iQ6uzM2gNMpIG+86K f9PdZnTR9QVJ3xdXGxag2Nupo5P0IlB/vM+mdUxj7TujhrGnJ+Q1sOqgpZcJvBJi /9A5m2t1hGVISkQKoNhQo4Gizz465HwIlLSwq0EV1/kWGbnQ0Vk9zfnx/lGtaIW3 8dMW9czCqhAW/fSxnco7j9dKhFtdunLm2BIrP1FcR1X68taY01J3dmChwczxCiPt fUhL1G1ihXvlBQzhP70jMSbZc5UbXDtyXOdHNmquiumc8RfjgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn2RDQlprfgqrTw2XQqeN11RYGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjYxZjNmMjMtYTJmZS0z YWJkLWI3ZTMtMjQ5YjBjZTI4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXP1DjXD/uC5IBZ2CoYRoXGnmfhhcvE6d4PUAg4OvgOF5QtJBvC0VRG bBoyqFiQZraT42Wdsw/W9PqMu2I5aI2ScAMu0VLSV06F58vkrU6T2mkycGzJRgG0 exRF/p+sbX+PDAfWTMQfSwlfByadpIIkYJlAJh5q+o8yy6QHQbV2hQVQhPVvLw6i wfwYKiQYW6TgkK838TLM+PQL8yhIZP4hq5c6BQj7Rm3X6xjtGCVTPWoM1fD2Btk6 3eXpT/e4yhiZqOm7ROuqplzkcBzgZhMvbe0zLr/UmR9DlPwdXdbRHahTHm46rkCd wgUfFHKs9RmtEfcweHXkNXavpdS1t0A= -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:43 2025 by rpki-client