$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa File: 3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa (raw, json) Hash identifier: ER1SpqVHZ8E9t4u5Mx60gKog/a2INlYOcrRYczgR6nY= Subject key identifier: 2D:F3:9F:01:FA:D3:55:F5:60:9A:37:2E:EA:0F:EA:37:2F:40:D4:A0 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB0099EA9F266309A22FA60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa Signing time: Sun 03 Aug 2025 02:35:49 +0000 ROA not before: Sun 03 Aug 2025 02:35:49 +0000 ROA not after: Sat 01 Nov 2025 02:35:49 +0000 asID: 22616 IP address blocks: 170.85.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:09:9e:a9:f2:66:30:9a:22:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:49 2025 GMT Not After : Nov 1 02:35:49 2025 GMT Subject: CN=8009cea1-15e2-4ac4-93e5-2347cfe51694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:b6:a6:61:24:36:86:e4:31:5e:92:47:53: c7:b9:bb:f5:66:25:ad:7a:c4:b4:9b:b2:04:58:81: aa:db:c0:93:20:c8:2f:95:e6:18:2c:4b:92:41:b3: 1f:bd:7d:8c:95:e3:fa:6b:04:2f:b5:66:36:34:d7: d3:0a:41:ab:7d:1e:13:10:0b:bc:fc:ef:26:5c:21: 2b:bf:40:35:af:44:9c:a2:2c:6d:ed:48:d6:b7:58: 9c:38:19:f9:66:44:b6:8a:87:fb:43:e0:36:1e:39: 27:90:26:8b:98:23:0d:b8:d6:9a:cd:04:d9:8d:74: 2d:55:08:12:33:60:fe:15:45:07:c5:f9:0b:01:f5: a2:24:84:a6:c4:6e:f8:82:d1:79:14:1c:2d:ac:e3: 3e:9c:32:27:35:71:d1:d5:00:27:aa:ba:c9:80:cd: 4e:a1:b4:08:d3:d4:38:c0:71:ca:80:28:8d:c0:d4: 09:c7:2e:17:74:1e:fa:f4:3a:7c:85:ba:d4:97:07: 9e:82:99:67:bb:e2:75:80:87:1e:cf:ff:17:89:1e: ba:93:b9:f8:d0:ec:06:de:c8:12:17:1b:c1:99:e0: c7:96:fb:d6:6a:6b:84:70:d4:87:a9:f8:c3:4e:85: b8:03:96:a3:59:47:e8:af:da:05:2f:b5:9e:4b:5f: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F3:9F:01:FA:D3:55:F5:60:9A:37:2E:EA:0F:EA:37:2F:40:D4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8b:37:0b:59:59:91:18:ae:03:93:5e:08:5b:cc:81:c5:75: a4:29:2e:42:da:84:2a:cf:b1:d0:c8:52:49:2e:9c:aa:0e:0b: 0d:86:14:af:9a:e2:c4:cc:56:e6:64:23:4a:b2:e5:29:13:7c: 7e:ed:1e:11:99:5f:1d:d1:9a:26:45:c2:61:80:ab:f4:e4:f1: 83:cb:98:9a:de:e2:50:9b:59:d4:ba:6e:f5:3d:4d:d0:7c:4b: b0:a5:d3:06:52:d3:43:12:7c:3e:13:b6:0d:97:3d:06:e8:8f: 26:68:36:27:63:c0:11:e0:3f:a3:2e:00:d8:b1:c7:aa:01:f0: 7b:49:22:f8:42:5b:47:a7:21:9f:94:56:db:2c:65:0e:91:b8: 63:9d:6b:ec:53:6f:4d:a5:c8:de:0b:89:39:af:b2:bb:3d:89: 06:0f:5a:52:fe:8e:d0:bf:35:7e:35:83:25:b1:8a:8d:1a:df: 56:1d:d7:93:30:cf:02:36:c5:33:ab:70:ae:88:a0:b0:6b:fd: 99:8c:54:d0:38:68:83:bc:f3:ca:66:ef:81:6b:05:d8:f0:a6: 7c:42:51:aa:d9:c6:d2:a0:ce:f0:22:de:5e:90:8a:11:d8:f8: 47:22:49:7c:82:65:8c:f0:9d:db:29:b3:8c:fe:50:a6:ac:93: 6f:dc:79:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAmeqfJmMJoi+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OVoXDTI1MTEwMTAyMzU0OVowLzEtMCsGA1UEAxMk ODAwOWNlYTEtMTVlMi00YWM0LTkzZTUtMjM0N2NmZTUxNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43u2pmEkNobkMV6SR1PHubv1ZiWtesS0m7IE WIGq28CTIMgvleYYLEuSQbMfvX2MleP6awQvtWY2NNfTCkGrfR4TEAu8/O8mXCEr v0A1r0Scoixt7UjWt1icOBn5ZkS2iof7Q+A2HjknkCaLmCMNuNaazQTZjXQtVQgS M2D+FUUHxfkLAfWiJISmxG74gtF5FBwtrOM+nDInNXHR1QAnqrrJgM1OobQI09Q4 wHHKgCiNwNQJxy4XdB769Dp8hbrUlweegplnu+J1gIcez/8XiR66k7n40OwG3sgS FxvBmeDHlvvWamuEcNSHqfjDToW4A5ajWUfor9oFL7WeS1/8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3znwH601X1YJo3LuoP6jcvQNSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2JkNWE0YzItOWM1Ni0z NGJlLTk0YTgtNmIyM2RjZTU5M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2LNwtZWZEYrgOTXghbzIHFdaQpLkLahCrPsdDIUkkunKoOCw2GFK+a 4sTMVuZkI0qy5SkTfH7tHhGZXx3RmiZFwmGAq/Tk8YPLmJre4lCbWdS6bvU9TdB8 S7Cl0wZS00MSfD4Ttg2XPQbojyZoNidjwBHgP6MuANixx6oB8HtJIvhCW0enIZ+U VtssZQ6RuGOda+xTb02lyN4LiTmvsrs9iQYPWlL+jtC/NX41gyWxio0a31Yd15Mw zwI2xTOrcK6IoLBr/ZmMVNA4aIO888pm74FrBdjwpnxCUarZxtKgzvAi3l6QihHY +EciSXyCZYzwndsps4z+UKask2/ceRM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:48 2025 by rpki-client