$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/532ba7b3-0c44-3859-87d3-a37b1241aa15.roa File: 532ba7b3-0c44-3859-87d3-a37b1241aa15.roa (raw, json) Hash identifier: TGD3lLzLidQClleybHx/Qs2S1NZIB44Yy/m0c+rwIqc= Subject key identifier: F1:C6:8B:11:E2:4F:07:85:A8:38:72:1A:69:B7:FF:A6:78:62:23:4A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB0059BEEE2276E8BFB0300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/532ba7b3-0c44-3859-87d3-a37b1241aa15.roa Signing time: Sun 03 Aug 2025 02:35:47 +0000 ROA not before: Sun 03 Aug 2025 02:35:47 +0000 ROA not after: Sat 01 Nov 2025 02:35:47 +0000 asID: 62044 IP address blocks: 170.85.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:05:9b:ee:e2:27:6e:8b:fb:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:47 2025 GMT Not After : Nov 1 02:35:47 2025 GMT Subject: CN=508bf311-c80c-4542-a1bd-a7a9fad7d323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:46:8a:ef:08:3b:59:66:9d:2d:c7:52:5e:99: 41:1b:5a:50:b5:f0:7b:26:b2:b6:f7:5d:44:05:aa: 49:94:0e:54:3c:24:4b:48:27:27:bf:54:23:a9:9a: e9:41:96:44:db:5f:30:9b:bc:2d:8a:29:c8:36:a4: 2d:7b:e2:f0:12:33:ad:0c:fb:b5:73:ba:da:10:79: 25:61:1d:97:7c:9a:16:40:e3:a0:b9:7a:32:e1:eb: 5f:de:3e:df:18:2e:ac:df:70:39:f0:f0:f9:16:a3: 28:f5:8c:43:4f:52:e7:f1:a1:04:5c:66:c2:95:ce: 64:bf:a6:63:00:d0:97:f1:f7:58:57:10:d4:d6:71: f2:3d:98:74:c9:5b:f0:1f:7a:62:3b:e1:c4:e5:81: 1d:b7:fc:cd:6b:db:5f:77:3f:18:36:b8:1f:6a:a7: 56:4d:84:dd:bc:82:b8:4e:1d:31:6b:9a:48:f1:ee: 8f:a8:b9:24:93:7f:18:eb:87:89:92:d0:04:40:5c: 6b:9a:75:da:dc:42:f4:b6:fe:d6:ed:76:24:d5:cd: 0a:94:d1:e2:e9:f0:25:a5:ad:a2:67:07:51:4f:07: 67:9d:50:36:4a:82:42:82:5e:41:70:b8:8d:bd:14: 07:3c:d4:b6:fc:b9:4f:22:27:5d:7f:0d:7b:d6:ed: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C6:8B:11:E2:4F:07:85:A8:38:72:1A:69:B7:FF:A6:78:62:23:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/532ba7b3-0c44-3859-87d3-a37b1241aa15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:85:8f:da:26:3e:30:e0:3f:a7:8e:75:26:42:4f:ae:8e:5b: c6:7e:98:2e:eb:4c:dd:a6:bf:44:31:81:db:2d:42:92:e9:06: 8b:7a:23:d5:3b:9a:d8:89:6e:e4:01:b6:1a:86:b1:09:47:50: 40:37:e0:b6:68:27:55:1c:0c:27:b1:0f:28:00:c6:14:c7:76: fa:b3:d9:5e:8e:92:2e:7d:ee:f3:f3:b6:a3:ff:de:b4:89:c6: 33:46:c7:b9:14:af:34:3f:ab:45:d3:28:93:0c:55:9c:31:0d: 89:da:04:c8:13:21:57:a1:f1:9c:50:57:9c:df:e7:df:d8:12: 83:10:66:2a:09:ca:7d:f0:a3:94:f0:9e:58:c2:b7:1f:49:78: 0a:ff:ba:10:2c:55:3c:83:39:1d:00:69:fc:60:60:55:95:13: 1d:e3:0d:51:54:97:53:a1:88:03:82:4b:83:15:73:95:98:a0: be:8f:68:6c:aa:99:bc:49:d9:e1:77:1e:96:f0:52:b4:d7:74: f7:4c:fc:67:34:5b:1a:98:b5:1d:ca:82:56:2a:bb:d4:7f:3d: c4:1d:c3:86:5c:5e:80:55:58:4c:1f:9e:7d:fe:99:aa:48:22: 8d:9c:89:07:c9:82:34:73:43:bb:32:1b:5c:a2:05:9f:f0:9e: 90:c5:33:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAWb7uInbov7AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0N1oXDTI1MTEwMTAyMzU0N1owLzEtMCsGA1UEAxMk NTA4YmYzMTEtYzgwYy00NTQyLWExYmQtYTdhOWZhZDdkMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEaK7wg7WWadLcdSXplBG1pQtfB7JrK2911E BapJlA5UPCRLSCcnv1QjqZrpQZZE218wm7wtiinINqQte+LwEjOtDPu1c7raEHkl YR2XfJoWQOOguXoy4etf3j7fGC6s33A58PD5FqMo9YxDT1Ln8aEEXGbClc5kv6Zj ANCX8fdYVxDU1nHyPZh0yVvwH3piO+HE5YEdt/zNa9tfdz8YNrgfaqdWTYTdvIK4 Th0xa5pI8e6PqLkkk38Y64eJktAEQFxrmnXa3EL0tv7W7XYk1c0KlNHi6fAlpa2i ZwdRTwdnnVA2SoJCgl5BcLiNvRQHPNS2/LlPIiddfw171u2nMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHGixHiTweFqDhyGmm3/6Z4YiNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTMyYmE3YjMtMGM0NC0z ODU5LTg3ZDMtYTM3YjEyNDFhYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuFj9omPjDgP6eOdSZCT66OW8Z+mC7rTN2mv0QxgdstQpLpBot6I9U7 mtiJbuQBthqGsQlHUEA34LZoJ1UcDCexDygAxhTHdvqz2V6Oki597vPztqP/3rSJ xjNGx7kUrzQ/q0XTKJMMVZwxDYnaBMgTIVeh8ZxQV5zf59/YEoMQZioJyn3wo5Tw nljCtx9JeAr/uhAsVTyDOR0AafxgYFWVEx3jDVFUl1OhiAOCS4MVc5WYoL6PaGyq mbxJ2eF3HpbwUrTXdPdM/Gc0WxqYtR3KglYqu9R/PcQdw4ZcXoBVWEwfnn3+mapI Io2ciQfJgjRzQ7syG1yiBZ/wnpDFM9k= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:53 2025 by rpki-client