$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa File: 2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa (raw, json) Hash identifier: JwKFu9QBQ5NW9hoISTqeeetnSk6vxAwZyxFmcKEfpB4= Subject key identifier: 4F:82:EB:AD:3D:BE:86:15:EA:92:9D:44:FB:7B:21:26:2C:2B:6D:24 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A0C0560CC217774F79B82B280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 170.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:60:cc:21:77:74:f7:9b:82:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4047e62d-ffd4-47e9-9bb5-e5b295e25c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:4f:71:ba:7d:a9:02:bb:05:87:48:e8:6d: 54:0d:2e:59:cd:3e:4a:e6:3b:25:82:88:35:f1:47: d5:fa:f9:0d:22:80:31:8c:41:f0:d5:43:55:52:5e: 7f:d7:c3:70:4c:80:50:4b:1f:f3:f3:11:94:7c:e2: 28:02:75:0f:05:0a:7e:a8:78:22:20:5d:ac:6d:8f: 1e:f3:dd:b4:50:1f:c9:4f:80:00:8b:98:5a:a9:38: 1f:9e:81:e7:be:01:fb:e2:1a:48:a7:d2:23:db:50: 7b:e7:93:d1:32:93:bf:08:de:bb:44:9e:3c:b2:7b: 62:1a:8d:3a:28:c3:93:d9:60:25:e8:ac:2b:e2:f4: d2:9e:35:9a:c2:36:90:29:58:f4:f9:aa:54:e5:23: 01:a4:dc:72:97:68:1d:e9:b8:44:47:43:59:19:39: 32:2c:2d:aa:0a:2f:50:56:da:13:7c:40:20:ef:df: b5:40:4a:01:88:8c:a7:6f:54:0e:6d:0e:b4:c8:ee: 9f:06:3a:c3:4b:1e:d3:1e:96:05:a1:f8:f5:f6:05: 8a:5c:2f:ca:35:62:81:fc:c3:7e:52:d9:d8:f6:25: 35:cc:ec:63:25:ea:c1:d2:4a:3e:84:17:5c:5d:86: 7f:2f:3e:53:1d:4b:b0:f7:2f:68:dd:27:96:6e:e4: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:EB:AD:3D:BE:86:15:EA:92:9D:44:FB:7B:21:26:2C:2B:6D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:99:62:bd:11:a2:28:15:23:69:33:91:70:9e:78:17:02:64: c7:36:0e:a2:58:12:7d:8a:f5:d1:db:dc:a1:7b:2d:69:21:9a: f1:ab:2f:51:59:57:cf:eb:b6:ea:40:49:00:f8:c7:c4:9d:1b: 3f:25:62:2f:ba:4f:24:de:b3:26:e0:e1:22:ba:a0:78:42:55: 19:f4:28:67:d5:5c:ee:7a:ed:4e:b9:9a:e2:b3:5e:20:35:4e: fe:7c:22:4f:b0:07:bd:43:ab:ea:ed:d3:b4:4d:ac:f4:3f:b3: ba:aa:48:2e:03:4c:30:4d:06:c6:96:cf:87:d9:93:1a:7a:4d: 8f:db:f5:95:93:0a:b5:1e:75:5a:fb:99:c9:81:cb:0e:b3:15: 77:99:80:b5:93:02:91:73:5b:d4:59:e4:fb:3c:16:ad:b5:ca: 76:85:62:e2:0d:21:32:df:af:83:dd:b3:7b:41:2c:b3:f3:97: 86:c3:c3:9c:fc:0c:73:b0:f5:ec:f4:01:5a:1e:d9:1e:cd:22: 8d:50:17:06:a6:79:f2:bf:d9:4a:6a:e7:59:28:19:ba:65:f0: b7:a8:a9:85:57:ed:3e:a5:20:ec:90:69:49:e3:4b:3f:ba:02: e2:c1:3d:3c:f0:a6:bd:5f:59:07:1d:2b:ec:da:0f:07:c9:2d: 4d:34:2d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWDMIXd095uCsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDA0N2U2MmQtZmZkNC00N2U5LTliYjUtZTViMjk1ZTI1YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkxPcbp9qQK7BYdI6G1UDS5ZzT5K5jslgog1 8UfV+vkNIoAxjEHw1UNVUl5/18NwTIBQSx/z8xGUfOIoAnUPBQp+qHgiIF2sbY8e 8920UB/JT4AAi5haqTgfnoHnvgH74hpIp9Ij21B755PRMpO/CN67RJ48sntiGo06 KMOT2WAl6Kwr4vTSnjWawjaQKVj0+apU5SMBpNxyl2gd6bhER0NZGTkyLC2qCi9Q VtoTfEAg79+1QEoBiIynb1QObQ60yO6fBjrDSx7THpYFofj19gWKXC/KNWKB/MN+ UtnY9iU1zOxjJerB0ko+hBdcXYZ/Lz5THUuw9y9o3SeWbuTDTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+C6609voYV6pKdRPt7ISYsK20kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmM5OTAyZWYtNmQzMy0z ZTM0LWFlM2YtNDNiN2EwMmMxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGZYr0RoigVI2kzkXCeeBcCZMc2DqJYEn2K9dHb3KF7LWkhmvGrL1FZ V8/rtupASQD4x8SdGz8lYi+6TyTesybg4SK6oHhCVRn0KGfVXO567U65muKzXiA1 Tv58Ik+wB71Dq+rt07RNrPQ/s7qqSC4DTDBNBsaWz4fZkxp6TY/b9ZWTCrUedVr7 mcmByw6zFXeZgLWTApFzW9RZ5Ps8Fq21ynaFYuINITLfr4Pds3tBLLPzl4bDw5z8 DHOw9ez0AVoe2R7NIo1QFwamefK/2Upq51koGbpl8LeoqYVX7T6lIOyQaUnjSz+6 AuLBPTzwpr1fWQcdK+zaDwfJLU00LVg= -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:12 2025 by rpki-client