$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/756f5909-5a1f-37e4-a522-6147209a29f3.roa File: 756f5909-5a1f-37e4-a522-6147209a29f3.roa (raw, json) Hash identifier: zXMUKh9SDecmeSn/HQvPWLywhB6BVZXUlZIGFZSfCts= Subject key identifier: A9:73:EB:2C:96:E8:70:4D:60:6F:43:8C:83:87:3B:0C:E9:1D:02:88 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A0C05701A6AD7FDEC8D7C9E40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/756f5909-5a1f-37e4-a522-6147209a29f3.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 8987 IP address blocks: 170.85.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:70:1a:6a:d7:fd:ec:8d:7c:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3b3d7f2a-0bc4-4a29-b7a0-4500157adfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:12:20:09:e8:a4:c3:3a:20:af:ce:b7:39: f2:12:7e:ee:a2:df:a8:2f:a8:90:57:db:d9:31:d5: cf:5f:be:da:2f:d0:e5:73:62:63:60:d9:9e:d4:08: aa:f3:b1:3e:9d:06:18:6b:64:1a:2b:0d:f9:43:8e: ce:ec:74:b3:76:49:27:f2:df:3d:ac:e9:46:04:02: 5f:06:92:4f:01:3b:3e:13:27:ee:14:07:b6:06:04: d3:42:a9:59:d1:21:81:dc:8a:d2:98:7a:5d:e8:e1: 24:48:bc:e9:b3:b4:a4:b1:a8:5e:fa:3a:17:b5:e1: e6:66:df:e6:ec:0a:90:66:0a:4f:9a:c8:58:13:80: 12:94:4f:7b:5b:be:36:e2:c1:92:17:6a:bc:25:7e: fb:9c:24:a3:98:92:44:bb:87:c5:d7:0c:34:85:b4: 17:1e:48:04:e9:db:95:f4:3d:94:31:f5:b4:c2:e1: 3a:c6:c8:51:d0:b9:fb:c0:b4:33:1c:bb:98:7c:e2: a5:a0:05:25:96:bb:3e:83:91:67:06:b5:37:3e:55: e9:70:f3:34:f6:01:7c:ea:48:2a:67:c6:5f:18:55: 3e:42:e8:61:20:14:92:a7:56:b9:82:10:9b:97:b6: 66:8f:e3:78:eb:41:98:08:f8:d6:26:3e:36:d3:3f: 63:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:73:EB:2C:96:E8:70:4D:60:6F:43:8C:83:87:3B:0C:E9:1D:02:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/756f5909-5a1f-37e4-a522-6147209a29f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:64:1e:57:2b:1b:72:4a:ee:20:3b:f4:1e:68:62:a9:25:46: 81:3b:b6:81:7c:e1:a0:f5:c8:f2:c4:1f:32:6c:db:9a:e1:da: ab:5e:4a:b7:00:6c:2e:82:70:45:b9:a8:ad:ed:b4:27:12:c9: 01:b0:e6:ed:e5:e9:d4:cf:2a:34:1b:a1:d0:2e:c0:47:6f:2b: c8:3a:89:24:e7:25:f3:0d:56:68:6e:11:70:fd:c6:19:fa:be: e5:4b:27:d7:fc:24:21:b0:56:74:a3:fd:b4:16:1b:b3:a4:d1: e4:91:57:10:1d:e0:9b:12:5b:eb:8f:5b:82:a7:24:dc:71:b1: 70:26:9d:28:98:cd:bb:c3:21:fe:c7:af:37:29:a2:cc:10:79: c5:56:40:82:7b:aa:8b:e0:08:f5:82:5c:60:d8:0d:a5:96:ad: 5a:84:87:c0:7d:f9:c7:a5:0c:00:fa:e7:a9:97:8b:b2:d5:df: 1c:47:1a:fa:fb:e0:48:92:18:0b:27:6c:7b:0b:84:b7:d9:75: 9a:ab:3f:27:67:bb:93:5a:e9:1c:e9:21:67:04:e4:a0:bd:df: 25:bd:42:84:5c:7d:e2:34:eb:dd:a4:b6:0e:8b:31:04:ff:d7: c8:9e:d9:f8:28:c3:d7:75:e2:9d:1e:80:fe:64:ec:6a:27:f6: 58:4a:00:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXAaatf97I18nkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk M2IzZDdmMmEtMGJjNC00YTI5LWI3YTAtNDUwMDE1N2FkZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl80SIAnopMM6IK/OtznyEn7uot+oL6iQV9vZ MdXPX77aL9Dlc2JjYNme1Aiq87E+nQYYa2QaKw35Q47O7HSzdkkn8t89rOlGBAJf BpJPATs+EyfuFAe2BgTTQqlZ0SGB3IrSmHpd6OEkSLzps7Sksahe+joXteHmZt/m 7AqQZgpPmshYE4ASlE97W7424sGSF2q8JX77nCSjmJJEu4fF1ww0hbQXHkgE6duV 9D2UMfW0wuE6xshR0Ln7wLQzHLuYfOKloAUllrs+g5FnBrU3PlXpcPM09gF86kgq Z8ZfGFU+QuhhIBSSp1a5ghCbl7Zmj+N460GYCPjWJj420z9jyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlz6yyW6HBNYG9DjIOHOwzpHQKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNzU2ZjU5MDktNWExZi0z N2U0LWE1MjItNjE0NzIwOWEyOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABkHlcrG3JK7iA79B5oYqklRoE7toF84aD1yPLEHzJs25rh2qteSrcA bC6CcEW5qK3ttCcSyQGw5u3l6dTPKjQbodAuwEdvK8g6iSTnJfMNVmhuEXD9xhn6 vuVLJ9f8JCGwVnSj/bQWG7Ok0eSRVxAd4JsSW+uPW4KnJNxxsXAmnSiYzbvDIf7H rzcposwQecVWQIJ7qovgCPWCXGDYDaWWrVqEh8B9+celDAD656mXi7LV3xxHGvr7 4EiSGAsnbHsLhLfZdZqrPydnu5Na6RzpIWcE5KC93yW9QoRcfeI0692ktg6LMQT/ 18ie2fgow9d14p0egP5k7Gon9lhKADw= -----END CERTIFICATE-----Generated at Mon Jun 16 12:03:47 2025 by rpki-client