$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa File: 2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa (raw, json) Hash identifier: x8jkHeIfeqzl9gA0MLwsNjLknsbb59AyDrKx79oF5kQ= Subject key identifier: BE:14:02:03:F3:05:B4:9A:95:E1:4E:8A:48:5B:3A:55:D1:0F:7E:CC Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB009CC3D4BB488D196D000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa Signing time: Sun 03 Aug 2025 02:35:49 +0000 ROA not before: Sun 03 Aug 2025 02:35:49 +0000 ROA not after: Sat 01 Nov 2025 02:35:49 +0000 asID: 22616 IP address blocks: 170.85.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:09:cc:3d:4b:b4:88:d1:96:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:49 2025 GMT Not After : Nov 1 02:35:49 2025 GMT Subject: CN=85d9949b-01bc-4b0c-991b-621d0bcdd41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:6f:64:e9:aa:39:29:a5:86:93:be:44:58: 89:d9:d8:95:7c:44:3a:d2:76:50:7f:a2:b8:b8:ca: ec:b0:72:bd:b2:8d:0a:5f:20:84:7d:b7:38:3a:bc: d4:33:b0:59:42:18:56:b7:d1:e1:7d:be:9b:9d:6d: f2:80:38:28:ca:4d:b1:ae:97:fc:12:a0:80:fa:d3: f5:97:35:f3:f7:d1:a7:d2:4f:0e:2c:06:e6:d7:96: 08:3c:2b:56:e1:b0:e8:39:67:7f:18:7a:7b:3c:18: 1f:c2:bc:c3:4e:00:90:c9:c5:ed:64:43:58:7e:99: 62:72:1a:1c:4c:c1:0a:97:a9:39:85:31:e6:e4:1c: 5a:d1:9b:96:95:35:72:33:8d:c4:26:4c:bf:f9:55: 5d:fc:bb:ac:fd:ce:54:52:6f:98:69:74:52:62:74: b9:36:e8:04:1b:44:ec:b0:b1:2a:5e:4a:2a:31:b8: a8:ad:9b:51:02:77:37:57:27:53:85:d8:1b:73:04: a7:0f:93:88:ce:b1:f6:c8:cb:e0:29:1c:d8:69:66: f4:23:be:10:69:c5:91:08:ac:b6:82:53:eb:cd:bb: 6b:29:f6:76:d1:bb:a9:9e:da:92:36:b4:80:63:ac: 3e:4a:5c:15:20:86:53:ce:0f:90:13:1f:0f:97:e1: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:02:03:F3:05:B4:9A:95:E1:4E:8A:48:5B:3A:55:D1:0F:7E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2888b7f7-bbc8-364a-b3bc-9b9efc19aad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7f:ba:99:44:05:1a:bb:e5:94:59:e2:c7:ba:ae:34:51:92: 75:47:f8:eb:0d:36:1f:81:96:2a:62:c2:ae:01:1a:9e:e5:df: f8:68:ed:46:cc:67:b1:04:24:02:17:3d:60:7c:18:0f:ac:97: cc:eb:52:25:1f:95:dd:37:db:13:61:79:91:ed:ed:a2:52:d4: c7:a8:db:3c:53:f7:ce:e2:73:a6:1d:fa:d7:a9:4c:8f:b7:1a: 14:92:7b:a3:e3:d8:42:b1:cd:52:fd:68:fd:4a:a3:d8:b2:41: 50:d3:42:d2:cd:38:5c:a4:e3:94:0f:bb:87:99:eb:1c:bd:a3: 6c:c8:5a:7d:84:9c:9f:f7:5a:4d:e1:63:99:06:96:c4:1a:61: 95:2b:9d:6b:a4:63:51:ae:b6:68:0f:8f:8e:75:9b:4b:db:76: d7:77:9f:b7:f4:5c:f8:a0:1e:2c:2d:4b:cd:60:5b:d7:7e:e7: 8a:f5:b0:b1:d5:9f:4a:81:a4:58:3d:0f:cb:cb:ae:0b:56:a7: eb:e8:bd:cf:41:41:2b:51:9e:75:0b:0d:1a:ca:71:82:d3:20: 23:e5:1b:97:c8:78:29:74:cf:0e:62:d4:82:3c:db:fd:ea:37: 07:7f:e9:bb:bf:ed:7c:6e:f1:bb:ce:a7:7e:34:f8:2f:3b:f8: 4e:4c:3a:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAnMPUu0iNGW0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OVoXDTI1MTEwMTAyMzU0OVowLzEtMCsGA1UEAxMk ODVkOTk0OWItMDFiYy00YjBjLTk5MWItNjIxZDBiY2RkNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PJvZOmqOSmlhpO+RFiJ2diVfEQ60nZQf6K4 uMrssHK9so0KXyCEfbc4OrzUM7BZQhhWt9Hhfb6bnW3ygDgoyk2xrpf8EqCA+tP1 lzXz99Gn0k8OLAbm15YIPCtW4bDoOWd/GHp7PBgfwrzDTgCQycXtZENYfplichoc TMEKl6k5hTHm5Bxa0ZuWlTVyM43EJky/+VVd/Lus/c5UUm+YaXRSYnS5NugEG0Ts sLEqXkoqMbiorZtRAnc3VydThdgbcwSnD5OIzrH2yMvgKRzYaWb0I74QacWRCKy2 glPrzbtrKfZ20bupntqSNrSAY6w+SlwVIIZTzg+QEx8Pl+E7jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4UAgPzBbSaleFOikhbOlXRD37MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjg4OGI3ZjctYmJjOC0z NjRhLWIzYmMtOWI5ZWZjMTlhYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5/uplEBRq75ZRZ4se6rjRRknVH+OsNNh+Blipiwq4BGp7l3/ho7UbM Z7EEJAIXPWB8GA+sl8zrUiUfld032xNheZHt7aJS1Meo2zxT987ic6Yd+tepTI+3 GhSSe6Pj2EKxzVL9aP1Ko9iyQVDTQtLNOFyk45QPu4eZ6xy9o2zIWn2EnJ/3Wk3h Y5kGlsQaYZUrnWukY1GutmgPj451m0vbdtd3n7f0XPigHiwtS81gW9d+54r1sLHV n0qBpFg9D8vLrgtWp+vovc9BQStRnnULDRrKcYLTICPlG5fIeCl0zw5i1II82/3q Nwd/6bu/7Xxu8bvOp340+C87+E5MOhI= -----END CERTIFICATE-----Generated at Wed Aug 6 12:37:33 2025 by rpki-client