$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa File: 5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa (raw, json) Hash identifier: KUv3f1mLvU4zPAV0iANz2AdVJ5a6OKpdmcZpF9lwySE= Subject key identifier: AA:46:AA:E7:37:93:A1:0C:BC:FF:F7:DB:1D:7D:83:87:33:64:05:A2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB0069439CEFAC27853FB00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa Signing time: Sun 03 Aug 2025 02:35:47 +0000 ROA not before: Sun 03 Aug 2025 02:35:47 +0000 ROA not after: Sat 01 Nov 2025 02:35:47 +0000 asID: 22616 IP address blocks: 170.85.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:06:94:39:ce:fa:c2:78:53:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:47 2025 GMT Not After : Nov 1 02:35:47 2025 GMT Subject: CN=29ce5579-b2ad-4d33-8977-735bdb55c782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:64:74:e4:75:39:e2:34:2c:89:13:e2:46: fd:b0:3e:63:bc:75:97:ed:a5:f5:11:d0:4b:40:5d: 2f:8d:57:70:5d:1a:c4:65:75:35:22:5c:8a:12:84: 3d:ef:56:de:de:6d:56:83:8d:c8:bd:da:e1:73:59: 96:40:3f:8e:84:95:7e:7f:71:e4:f2:96:9c:4d:7d: 33:b6:fe:68:14:59:d0:76:94:f0:3d:b7:17:ac:fc: 90:37:38:1c:30:15:51:26:41:7e:63:44:06:6a:04: 9d:10:1c:f9:3a:38:50:27:67:fe:5c:92:04:cf:06: f4:2a:38:3b:ad:e7:40:53:47:11:39:7a:18:bd:29: 43:39:b5:d1:4f:2e:45:64:e7:b4:10:b1:b5:7d:ed: 93:0d:2d:1f:7c:ed:be:0e:c3:dc:4a:fd:a4:b3:09: 13:85:b3:2a:51:17:b3:3e:70:66:27:3e:2b:4d:74: d5:ae:e8:58:20:8e:ab:b5:3c:d8:9e:59:36:57:49: 98:31:1b:f8:5f:85:36:30:49:63:9d:4c:d3:87:6d: 4c:2e:5c:82:cb:5a:98:e4:90:e3:00:e2:8a:74:21: a8:b5:77:ab:2a:33:49:11:5e:49:d1:58:fb:86:a1: 67:dd:c0:f0:cd:12:2c:18:e0:d3:21:5b:a8:2e:06: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:AA:E7:37:93:A1:0C:BC:FF:F7:DB:1D:7D:83:87:33:64:05:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5767e3ab-488c-3d3a-8f9e-1d0595c4db3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e1:dc:41:3a:f1:f9:30:96:bf:2a:a9:20:6a:bc:37:d5:30: 56:ce:15:fa:aa:93:ac:d4:a8:d9:50:37:bf:1e:53:33:57:78: ef:94:22:af:ba:76:77:8b:87:90:64:aa:6f:ff:80:0e:23:15: ba:96:b9:ec:a2:be:f7:9c:c9:36:f2:68:07:17:cc:8e:35:e0: 3a:a5:0e:9a:4f:83:b1:62:7f:59:7b:b8:d1:47:25:ec:58:09: 64:66:c5:3d:70:0f:4d:bc:b8:8f:85:b6:33:48:41:e0:1d:1f: 66:ad:60:bd:5c:61:52:6e:4d:82:79:8c:91:6e:f1:99:02:10: 85:86:7b:9e:6c:c0:ab:7a:dd:8a:2d:1e:0e:0b:06:4f:49:a3: f0:50:a4:c5:ae:ef:83:98:2e:1a:ff:c4:66:d8:23:3e:d8:ec: 60:4d:b2:7b:af:e5:ee:9f:e8:42:ce:d8:3b:dd:b1:4d:94:7a: 32:f0:6b:91:94:50:b4:04:04:d2:1c:88:85:a6:9d:a9:dc:d1: e8:d6:24:90:a2:0b:d4:d4:c6:9c:8b:e3:19:ce:98:f0:1b:bc: a0:ef:99:7d:bc:9f:69:3c:78:cd:9e:d0:e9:9e:60:e6:5e:49: 87:b9:08:9a:bd:68:13:dc:d2:5e:c6:4c:84:de:58:01:f7:ea: 80:dc:cb:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAaUOc76wnhT+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0N1oXDTI1MTEwMTAyMzU0N1owLzEtMCsGA1UEAxMk MjljZTU1NzktYjJhZC00ZDMzLTg5NzctNzM1YmRiNTVjNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZNkdOR1OeI0LIkT4kb9sD5jvHWX7aX1EdBL QF0vjVdwXRrEZXU1IlyKEoQ971be3m1Wg43Ivdrhc1mWQD+OhJV+f3Hk8pacTX0z tv5oFFnQdpTwPbcXrPyQNzgcMBVRJkF+Y0QGagSdEBz5OjhQJ2f+XJIEzwb0Kjg7 redAU0cROXoYvSlDObXRTy5FZOe0ELG1fe2TDS0ffO2+DsPcSv2kswkThbMqURez PnBmJz4rTXTVruhYII6rtTzYnlk2V0mYMRv4X4U2MEljnUzTh21MLlyCy1qY5JDj AOKKdCGotXerKjNJEV5J0Vj7hqFn3cDwzRIsGODTIVuoLgZRqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpGquc3k6EMvP/32x19g4czZAWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTc2N2UzYWItNDg4Yy0z ZDNhLThmOWUtMWQwNTk1YzRkYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfh3EE68fkwlr8qqSBqvDfVMFbOFfqqk6zUqNlQN78eUzNXeO+UIq+6 dneLh5Bkqm//gA4jFbqWueyivvecyTbyaAcXzI414DqlDppPg7Fif1l7uNFHJexY CWRmxT1wD028uI+FtjNIQeAdH2atYL1cYVJuTYJ5jJFu8ZkCEIWGe55swKt63Yot Hg4LBk9Jo/BQpMWu74OYLhr/xGbYIz7Y7GBNsnuv5e6f6ELO2DvdsU2UejLwa5GU ULQEBNIciIWmnanc0ejWJJCiC9TUxpyL4xnOmPAbvKDvmX28n2k8eM2e0OmeYOZe SYe5CJq9aBPc0l7GTITeWAH36oDcy/4= -----END CERTIFICATE-----Generated at Mon Aug 4 22:24:14 2025 by rpki-client