$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa File: 3faf91e5-6c81-3d67-b498-f913437fa73a.roa (raw, json) Hash identifier: 6gTRvvObw3dikaVhJ8Lu6bHlXUIDmjX3GubpMYp1424= Subject key identifier: AB:7D:7E:45:47:9B:A3:BC:7A:90:E3:91:D7:F2:DB:D5:B2:55:3A:FB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB009EA968BA97FB8DC2C00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa Signing time: Sun 03 Aug 2025 02:35:49 +0000 ROA not before: Sun 03 Aug 2025 02:35:49 +0000 ROA not after: Sat 01 Nov 2025 02:35:49 +0000 asID: 22616 IP address blocks: 170.85.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:09:ea:96:8b:a9:7f:b8:dc:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:49 2025 GMT Not After : Nov 1 02:35:49 2025 GMT Subject: CN=0ca3b10f-14e0-4e4d-b1aa-d3a79f53b75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:54:a3:e0:11:25:1f:63:9a:3d:7b:cb:55: 70:9f:c9:cb:6d:f6:38:d0:a4:fd:4c:63:fa:56:e9: 44:f2:3f:3a:93:a3:81:01:16:9a:e6:94:c8:cb:08: a8:d5:9c:1e:68:8e:da:63:54:94:30:0b:1f:1d:8b: 94:a1:0d:18:25:ec:dc:58:08:9f:23:41:4c:2f:70: 94:1e:db:8f:13:c2:91:1f:f5:23:f2:40:71:da:eb: b5:cc:27:c5:f3:45:0c:52:85:25:61:c2:e6:2f:10: 25:51:b8:65:e5:6b:d3:49:47:ad:ae:0b:c0:6a:80: 89:b2:88:45:b2:44:24:03:bc:d6:79:0d:dc:4b:75: b4:43:ee:74:98:44:2b:c2:64:0d:f2:55:01:16:7e: af:2f:c8:81:c5:b9:1d:a6:7c:59:8c:48:c6:9c:8a: 4e:c5:99:15:9a:81:03:b1:c4:ba:7d:db:9b:41:3c: 84:f8:17:8f:e8:00:28:0a:1f:49:22:ae:fd:e1:82: c4:01:d9:ad:72:48:1a:dd:f9:c5:43:76:ee:6e:ed: 67:89:8c:4d:e5:d6:a1:1d:a8:14:2a:2d:ba:72:25: 2f:ab:07:29:42:0c:13:99:0a:42:72:9a:01:4a:30: df:3a:a7:7b:23:3e:8e:9c:8d:e2:d5:81:98:20:18: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:7E:45:47:9B:A3:BC:7A:90:E3:91:D7:F2:DB:D5:B2:55:3A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c0:94:2b:36:1c:91:04:d2:e4:de:6f:11:ce:0a:32:43:11: 53:c1:a3:9f:5f:64:4d:3c:f9:b5:93:1e:a7:32:23:5c:df:75: 40:f0:18:5f:01:55:05:22:75:49:15:b0:50:55:36:6c:9f:4e: cf:0e:7f:46:1e:cb:87:3c:48:7a:a9:53:9d:5f:38:37:db:9e: 1b:97:c3:6a:6f:74:67:a5:97:02:29:90:9f:82:e8:4d:18:f8: 0b:50:c6:69:0e:d0:6d:f5:ca:1d:82:bc:38:38:66:04:05:69: 6b:a4:70:88:29:a6:b1:cc:bb:82:00:c5:33:cf:34:68:77:d7: 80:35:b4:98:0b:69:2b:ef:4a:3e:49:d3:5e:48:82:5e:3a:6a: b0:09:8e:10:8d:db:2d:ed:ce:d1:37:d4:79:d6:93:18:f9:38: 4e:9f:50:12:57:68:ca:ad:ff:1a:aa:76:80:03:c0:28:37:00: 8a:61:b5:09:7c:cb:f9:b4:72:57:92:dd:77:a9:24:fc:cc:7d: af:23:5a:54:0b:dd:45:0d:f3:41:78:d6:50:28:4b:bb:ea:d1: 65:0e:f4:34:45:ac:53:51:0c:17:da:de:47:6e:27:bd:4f:21: 8a:1e:94:b9:ae:37:16:d3:8e:cc:7b:6b:4a:c6:aa:48:0e:9e: dd:ea:a5:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAnqloupf7jcLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OVoXDTI1MTEwMTAyMzU0OVowLzEtMCsGA1UEAxMk MGNhM2IxMGYtMTRlMC00ZTRkLWIxYWEtZDNhNzlmNTNiNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyNUo+ARJR9jmj17y1Vwn8nLbfY40KT9TGP6 VulE8j86k6OBARaa5pTIywio1ZweaI7aY1SUMAsfHYuUoQ0YJezcWAifI0FML3CU HtuPE8KRH/Uj8kBx2uu1zCfF80UMUoUlYcLmLxAlUbhl5WvTSUetrgvAaoCJsohF skQkA7zWeQ3cS3W0Q+50mEQrwmQN8lUBFn6vL8iBxbkdpnxZjEjGnIpOxZkVmoED scS6fdubQTyE+BeP6AAoCh9JIq794YLEAdmtckga3fnFQ3bubu1niYxN5dahHagU Ki26ciUvqwcpQgwTmQpCcpoBSjDfOqd7Iz6OnI3i1YGYIBh4JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt9fkVHm6O8epDjkdfy29WyVTr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ZhZjkxZTUtNmM4MS0z ZDY3LWI0OTgtZjkxMzQzN2ZhNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXAlCs2HJEE0uTebxHOCjJDEVPBo59fZE08+bWTHqcyI1zfdUDwGF8B VQUidUkVsFBVNmyfTs8Of0Yey4c8SHqpU51fODfbnhuXw2pvdGellwIpkJ+C6E0Y +AtQxmkO0G31yh2CvDg4ZgQFaWukcIgpprHMu4IAxTPPNGh314A1tJgLaSvvSj5J 015Igl46arAJjhCN2y3tztE31HnWkxj5OE6fUBJXaMqt/xqqdoADwCg3AIphtQl8 y/m0cleS3XepJPzMfa8jWlQL3UUN80F41lAoS7vq0WUO9DRFrFNRDBfa3kduJ71P IYoelLmuNxbTjsx7a0rGqkgOnt3qpSg= -----END CERTIFICATE-----Generated at Tue Aug 5 16:50:09 2025 by rpki-client