$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/333a0ce7-d1eb-3764-9912-ac610b5a2325.roa File: 333a0ce7-d1eb-3764-9912-ac610b5a2325.roa (raw, json) Hash identifier: vg1PvU17D1UXToV9YB4KSNW4Qo0Mp9HANkFV0jzFtu4= Subject key identifier: E0:01:CC:AB:01:55:6E:81:94:7D:A4:D6:A5:DB:15:A1:95:1C:18:E8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00B7168769FD35C17A7E2 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/333a0ce7-d1eb-3764-9912-ac610b5a2325.roa Signing time: Sun 03 Aug 2025 02:35:49 +0000 ROA not before: Sun 03 Aug 2025 02:35:49 +0000 ROA not after: Sat 01 Nov 2025 02:35:49 +0000 asID: 22616 IP address blocks: 170.85.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:0b:71:68:76:9f:d3:5c:17:a7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:49 2025 GMT Not After : Nov 1 02:35:49 2025 GMT Subject: CN=aac5b91d-734a-4848-a0ba-5b9be800777f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:f6:40:51:4e:54:f5:81:0c:3a:2c:3a:c2: f3:d8:81:50:f2:36:39:47:03:f4:7b:b2:4c:21:a5: 61:ca:24:cb:f7:3c:57:c2:d8:bf:76:a4:f2:e9:81: a5:74:f8:7a:64:ca:dc:33:c2:13:22:05:dd:7b:14: 9b:21:5f:08:39:d5:1e:be:13:9d:89:c0:22:12:d4: 79:20:37:46:91:aa:c6:4f:1c:e4:18:0c:27:4e:7f: 71:a3:1b:7b:76:c5:1e:2e:0c:ef:ff:be:4e:00:69: e4:92:91:38:e9:62:79:e7:eb:08:92:ae:b6:52:c6: 38:ec:f0:5f:92:23:68:6f:84:67:0b:bd:df:15:a3: 1b:df:11:fe:c8:fb:fb:58:58:14:4e:11:56:c3:2c: 1a:db:a9:69:5f:f0:43:1f:28:5a:ca:83:40:2c:bd: 71:97:fe:bd:75:c3:31:3f:d4:b7:87:34:1f:bd:c2: 09:23:cf:b8:8b:29:74:7b:11:96:c0:d4:e3:5b:3f: 54:2c:de:86:24:38:d1:9a:df:2c:8a:74:50:17:ee: 2f:d5:9b:f2:12:07:c5:5b:95:4e:7e:52:e3:34:93: ad:b2:e9:c6:8f:0b:d0:4a:4d:4c:a6:26:a1:68:4b: 96:de:c4:27:02:1b:85:1f:27:64:b9:34:09:eb:d7: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:01:CC:AB:01:55:6E:81:94:7D:A4:D6:A5:DB:15:A1:95:1C:18:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/333a0ce7-d1eb-3764-9912-ac610b5a2325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9d:cc:c0:de:13:5c:d1:c0:d1:f2:3c:a0:3a:73:3c:02:f0: 98:6c:75:1f:e2:55:7f:fa:39:d1:7e:34:47:16:a0:c4:a8:42: 33:83:27:e5:78:d2:1d:20:f6:f6:0f:ee:ad:5f:e4:88:7c:b0: 4e:98:be:5b:57:48:43:fe:ea:e8:b1:d8:c8:fb:88:d1:15:7f: 10:cf:ee:d4:4a:7e:6d:f8:d5:12:20:0f:b1:02:d4:bb:8f:44: 68:ad:26:a8:18:21:eb:e0:ba:4d:56:ed:7e:75:f6:05:f8:a3: c5:01:34:5c:88:eb:ee:b0:df:76:98:88:9d:fd:93:c0:c8:bb: 16:96:aa:db:5f:4e:52:12:4f:bb:72:5d:72:e8:9a:a3:a7:be: b0:b1:e5:a9:ca:63:49:af:18:f4:42:30:cb:82:8a:24:23:23: 28:4c:a8:53:20:9d:fc:c5:7d:9e:1f:99:25:8d:78:12:19:f9: aa:40:cf:47:9e:b0:1a:b0:00:5f:e0:cd:21:91:f3:92:40:06: d1:98:a4:3b:e1:d7:82:31:30:93:5d:4f:20:31:a0:4d:d8:f1: 71:27:61:99:62:0a:db:91:8f:fc:3b:59:91:81:39:17:86:6f: c2:e6:e7:87:e0:0d:d9:1e:f1:e0:bd:21:83:cc:9d:49:3b:d3: e2:63:a9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAtxaHaf01wXp+IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OVoXDTI1MTEwMTAyMzU0OVowLzEtMCsGA1UEAxMk YWFjNWI5MWQtNzM0YS00ODQ4LWEwYmEtNWI5YmU4MDA3NzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/n2QFFOVPWBDDosOsLz2IFQ8jY5RwP0e7JM IaVhyiTL9zxXwti/dqTy6YGldPh6ZMrcM8ITIgXdexSbIV8IOdUevhOdicAiEtR5 IDdGkarGTxzkGAwnTn9xoxt7dsUeLgzv/75OAGnkkpE46WJ55+sIkq62UsY47PBf kiNob4RnC73fFaMb3xH+yPv7WFgUThFWwywa26lpX/BDHyhayoNALL1xl/69dcMx P9S3hzQfvcIJI8+4iyl0exGWwNTjWz9ULN6GJDjRmt8sinRQF+4v1ZvyEgfFW5VO flLjNJOtsunGjwvQSk1MpiahaEuW3sQnAhuFHydkuTQJ69dMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOABzKsBVW6BlH2k1qXbFaGVHBjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzMzYTBjZTctZDFlYi0z NzY0LTk5MTItYWM2MTBiNWEyMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmdzMDeE1zRwNHyPKA6czwC8JhsdR/iVX/6OdF+NEcWoMSoQjODJ+V4 0h0g9vYP7q1f5Ih8sE6YvltXSEP+6uix2Mj7iNEVfxDP7tRKfm341RIgD7EC1LuP RGitJqgYIevguk1W7X519gX4o8UBNFyI6+6w33aYiJ39k8DIuxaWqttfTlIST7ty XXLomqOnvrCx5anKY0mvGPRCMMuCiiQjIyhMqFMgnfzFfZ4fmSWNeBIZ+apAz0ee sBqwAF/gzSGR85JABtGYpDvh14IxMJNdTyAxoE3Y8XEnYZliCtuRj/w7WZGBOReG b8Lm54fgDdke8eC9IYPMnUk70+Jjqfk= -----END CERTIFICATE-----Generated at Wed Aug 6 00:56:13 2025 by rpki-client