$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa File: 3a1dad2c-2d3a-3061-9575-faf007fac428.roa (raw, json) Hash identifier: eLk3VR7eXWtOGx31aNRgqv+W65kLJ6o+pc9SQX+xwZI= Subject key identifier: 64:7D:0D:3C:F2:C4:46:B2:63:7F:86:BA:E3:96:39:7F:EA:EB:3F:54 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB008F7BB09A31540FD5D80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa Signing time: Sun 03 Aug 2025 02:35:48 +0000 ROA not before: Sun 03 Aug 2025 02:35:48 +0000 ROA not after: Sat 01 Nov 2025 02:35:48 +0000 asID: 22616 IP address blocks: 170.85.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:08:f7:bb:09:a3:15:40:fd:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:48 2025 GMT Not After : Nov 1 02:35:48 2025 GMT Subject: CN=4d0066fd-d683-4daa-b88e-6aed3f1cc5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:66:d5:4f:e8:29:00:ad:ed:ef:a9:3e:a4: 10:49:1f:18:e4:98:72:25:67:9b:41:d1:03:f4:bb: fe:7a:af:ce:11:12:68:81:cf:43:b2:a6:f5:9c:e2: a4:5e:06:19:f6:5c:29:d2:87:0c:30:1f:15:84:2a: 8d:4e:75:dd:7a:fe:5c:d7:6b:45:6d:90:3f:0a:ad: 71:c1:95:62:7f:ef:72:1c:32:07:83:31:74:c5:95: e5:5f:ce:41:fc:7d:4d:4d:4b:08:91:d8:69:e0:31: 03:4a:4c:03:6f:09:76:14:cf:7d:e5:90:f9:b1:10: ad:24:1e:8b:cd:d0:98:f8:4c:e8:38:a5:86:d5:3a: 5b:42:88:cc:55:d3:56:62:5f:4e:f5:ed:9b:f9:0e: ba:9f:75:a1:44:7e:df:2a:04:2f:d0:11:86:6d:40: b0:c8:50:af:7c:c0:06:42:47:a9:ab:81:a8:25:e8: 0a:96:e1:e7:e8:3c:86:fd:ed:64:f2:a6:50:09:9a: 1b:e8:cc:ac:ee:d6:4b:cf:2f:20:32:66:c3:e6:f7: d9:3a:77:b6:85:12:4a:ab:63:f5:72:20:ff:61:c4: 4b:70:12:30:4b:45:38:af:fc:a0:c6:32:be:5d:41: 6b:3c:d0:41:d2:1f:c8:a7:e3:8c:51:35:6c:f6:4b: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7D:0D:3C:F2:C4:46:B2:63:7F:86:BA:E3:96:39:7F:EA:EB:3F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:91:0d:79:7f:d3:5e:2a:2c:5e:4b:38:90:45:bb:4a:8f:3a: 6e:f2:7f:8d:80:9a:87:8c:03:17:73:7b:4e:57:8c:67:60:e6: 4f:0b:a5:cb:48:8b:06:68:89:fd:02:98:ac:ec:70:79:c6:b1: 0f:01:95:82:17:6f:f9:ca:98:d2:ab:96:fb:99:58:c4:a3:d9: cb:09:f4:58:9f:0c:13:db:75:a8:2b:68:c8:3b:d1:c0:0f:60: 7f:cf:15:d5:d8:a2:ca:1d:61:fd:b6:2e:43:66:26:b0:d7:8a: 50:86:b7:86:b3:a1:17:24:33:9d:38:6b:f6:6a:18:57:c4:34: ed:e4:70:70:69:04:36:5e:9b:06:bb:30:3d:e5:64:4c:7c:79: 1d:65:72:eb:fe:1e:13:69:c3:56:9e:b6:88:45:d8:b1:45:46: 53:83:eb:ed:45:64:d9:18:f0:71:b8:84:0d:40:ba:a7:d9:30: e5:3e:0f:88:7b:7a:48:01:df:d1:d1:30:ae:93:8b:9d:e4:a0: 77:1c:87:36:40:fa:92:d6:dd:f9:e7:c7:d1:d6:59:a7:c2:23: e4:91:6b:62:64:4f:12:1c:fe:8e:70:01:09:43:d2:c9:6f:d5: 7d:4f:df:e0:b9:a6:23:73:d7:e9:98:1c:8b:25:67:04:0a:72: 04:e9:dc:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAj3uwmjFUD9XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OFoXDTI1MTEwMTAyMzU0OFowLzEtMCsGA1UEAxMk NGQwMDY2ZmQtZDY4My00ZGFhLWI4OGUtNmFlZDNmMWNjNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFtm1U/oKQCt7e+pPqQQSR8Y5JhyJWebQdED 9Lv+eq/OERJogc9Dsqb1nOKkXgYZ9lwp0ocMMB8VhCqNTnXdev5c12tFbZA/Cq1x wZVif+9yHDIHgzF0xZXlX85B/H1NTUsIkdhp4DEDSkwDbwl2FM995ZD5sRCtJB6L zdCY+EzoOKWG1TpbQojMVdNWYl9O9e2b+Q66n3WhRH7fKgQv0BGGbUCwyFCvfMAG Qkepq4GoJegKluHn6DyG/e1k8qZQCZob6Mys7tZLzy8gMmbD5vfZOne2hRJKq2P1 ciD/YcRLcBIwS0U4r/ygxjK+XUFrPNBB0h/Ip+OMUTVs9kvmVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR9DTzyxEayY3+GuuOWOX/q6z9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ExZGFkMmMtMmQzYS0z MDYxLTk1NzUtZmFmMDA3ZmFjNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeRDXl/014qLF5LOJBFu0qPOm7yf42AmoeMAxdze05XjGdg5k8LpctI iwZoif0CmKzscHnGsQ8BlYIXb/nKmNKrlvuZWMSj2csJ9FifDBPbdagraMg70cAP YH/PFdXYosodYf22LkNmJrDXilCGt4azoRckM504a/ZqGFfENO3kcHBpBDZemwa7 MD3lZEx8eR1lcuv+HhNpw1aetohF2LFFRlOD6+1FZNkY8HG4hA1AuqfZMOU+D4h7 ekgB39HRMK6Ti53koHcchzZA+pLW3fnnx9HWWafCI+SRa2JkTxIc/o5wAQlD0slv 1X1P3+C5piNz1+mYHIslZwQKcgTp3Ns= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:21 2025 by rpki-client