$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa File: 60c927ec-90ac-3752-8522-afaff9a34b0e.roa (raw, json) Hash identifier: o6h36z9cFIvKTwH9IRJTw7V/oMLyaQV7iKitz63dLVI= Subject key identifier: 97:8F:72:DB:2F:2D:6D:2D:2D:D6:D3:DA:F8:E7:F1:E5:E3:7F:D7:E8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00B061B05A05A9801E500 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa Signing time: Sun 03 Aug 2025 02:35:49 +0000 ROA not before: Sun 03 Aug 2025 02:35:49 +0000 ROA not after: Sat 01 Nov 2025 02:35:49 +0000 asID: 22616 IP address blocks: 170.85.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:0b:06:1b:05:a0:5a:98:01:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:49 2025 GMT Not After : Nov 1 02:35:49 2025 GMT Subject: CN=aa2c542b-da86-4136-a013-4d42e7b2462a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:9e:6b:1a:45:df:32:0b:10:a9:79:81:97: dc:e3:a6:6c:1c:79:37:db:a8:5a:c1:00:74:58:86: df:63:04:cf:f4:ed:c4:75:2f:4a:e7:4e:e1:0a:65: 5d:40:f2:ac:93:00:ec:95:00:c5:59:6c:3d:57:ee: 70:27:43:5d:46:1e:f0:1f:b0:c3:b8:17:dd:fd:2b: d2:30:d5:c6:09:bf:76:17:dd:03:2e:7a:27:df:ba: 82:92:fb:0d:2e:b1:1e:e1:ca:34:cb:95:3d:e9:74: b8:7b:d2:33:6b:d5:3e:6f:ad:bd:6e:0d:ef:c8:a0: dd:67:04:9c:ba:82:3b:06:76:5e:79:af:5e:98:4a: 4b:21:81:3e:1a:ff:b9:96:84:d4:f2:33:75:d5:42: e3:b3:36:e1:ca:d9:ee:28:02:06:ae:d8:ea:ef:f9: 21:be:4c:cf:fc:29:f9:7b:bb:c9:dc:fe:b1:58:c5: 58:81:fd:fa:f2:6e:bf:05:c8:cd:04:da:a4:e5:94: 34:1b:e6:48:61:ac:ad:1c:84:43:fc:47:f4:d6:d5: 47:96:d8:6b:2c:76:d2:3d:41:a0:9f:ef:39:f1:a8: 4a:a3:80:7e:a9:74:ed:f1:7a:84:96:04:b1:4f:f7: 03:b7:85:68:30:63:5a:4a:16:2c:08:65:36:41:65: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8F:72:DB:2F:2D:6D:2D:2D:D6:D3:DA:F8:E7:F1:E5:E3:7F:D7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:40:e4:c3:c1:db:e0:0f:59:7b:49:15:e7:bf:5b:80:1f:e2: 1c:1f:51:0f:28:7c:66:eb:2d:5b:48:e3:5d:00:47:8e:c8:93: ef:01:38:49:f4:c6:b8:e9:4a:67:e0:44:8b:6f:ef:40:66:f8: 42:4b:87:bb:a8:21:cd:f2:14:99:57:13:69:b4:08:e9:bd:0d: 3e:af:29:5e:db:ef:9e:f0:87:e6:a7:5e:cb:8d:68:8d:7d:df: 9f:fc:5c:ff:92:f7:17:c7:b4:8a:b4:1b:cf:18:31:bc:58:3a: b4:70:27:88:3c:fe:55:28:24:a5:04:86:b7:95:ff:f7:78:93: 18:d0:51:5e:ba:85:98:47:34:08:ab:3e:35:31:ea:c7:51:a4: b0:b5:b2:d0:b9:77:4f:e8:df:60:6d:6e:a9:1e:38:66:c7:d9: 22:9c:c8:e4:82:f8:75:53:65:fb:4f:94:f7:b9:54:5b:c9:d2: f0:96:2c:79:e5:60:08:44:75:62:5c:a2:5d:11:c9:46:dd:77: 88:6f:06:0d:19:12:c4:25:e8:bd:83:82:11:b0:ad:b6:6a:f9: 12:af:09:21:b4:88:bf:4b:e8:03:15:14:fa:39:db:7e:bd:1c: 3a:18:df:3a:df:66:bb:11:de:c7:a5:fe:d8:d9:91:c2:94:44: 8c:4f:fa:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAsGGwWgWpgB5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OVoXDTI1MTEwMTAyMzU0OVowLzEtMCsGA1UEAxMk YWEyYzU0MmItZGE4Ni00MTM2LWEwMTMtNGQ0MmU3YjI0NjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DGeaxpF3zILEKl5gZfc46ZsHHk326hawQB0 WIbfYwTP9O3EdS9K507hCmVdQPKskwDslQDFWWw9V+5wJ0NdRh7wH7DDuBfd/SvS MNXGCb92F90DLnon37qCkvsNLrEe4co0y5U96XS4e9Iza9U+b629bg3vyKDdZwSc uoI7BnZeea9emEpLIYE+Gv+5loTU8jN11ULjszbhytnuKAIGrtjq7/khvkzP/Cn5 e7vJ3P6xWMVYgf368m6/BcjNBNqk5ZQ0G+ZIYaytHIRD/Ef01tVHlthrLHbSPUGg n+858ahKo4B+qXTt8XqElgSxT/cDt4VoMGNaShYsCGU2QWXVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJePctsvLW0tLdbT2vjn8eXjf9foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjBjOTI3ZWMtOTBhYy0z NzUyLTg1MjItYWZhZmY5YTM0YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJA5MPB2+APWXtJFee/W4Af4hwfUQ8ofGbrLVtI410AR47Ik+8BOEn0 xrjpSmfgRItv70Bm+EJLh7uoIc3yFJlXE2m0COm9DT6vKV7b757wh+anXsuNaI19 35/8XP+S9xfHtIq0G88YMbxYOrRwJ4g8/lUoJKUEhreV//d4kxjQUV66hZhHNAir PjUx6sdRpLC1stC5d0/o32BtbqkeOGbH2SKcyOSC+HVTZftPlPe5VFvJ0vCWLHnl YAhEdWJcol0RyUbdd4hvBg0ZEsQl6L2DghGwrbZq+RKvCSG0iL9L6AMVFPo52369 HDoY3zrfZrsR3sel/tjZkcKURIxP+lA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:17 2025 by rpki-client