$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9410fa2f-b3d0-3eef-a4be-99b76222a399.roa File: 9410fa2f-b3d0-3eef-a4be-99b76222a399.roa (raw, json) Hash identifier: 9/Yw4ChatqEdJNg3IlaV73QWV2gU9tES8BOfbVgIvko= Subject key identifier: 8E:BD:6E:A2:35:C0:3E:9C:AB:6F:23:56:3E:E6:82:C9:AD:B9:2E:CD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849E91F9B654674037F311D80C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9410fa2f-b3d0-3eef-a4be-99b76222a399.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 170.85.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9b:65:46:74:03:7f:31:1d:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=70fab5bb-cd32-4f43-97d8-1a0657ee262a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:68:1b:5d:86:9e:7b:72:a8:83:79:2c:48: 4a:7a:a9:3a:47:e2:9b:0f:b4:c6:bd:6c:67:48:2f: a4:4b:c3:e8:3d:f5:23:fd:f1:67:71:8d:3a:e0:bf: 5c:9e:05:34:7e:ef:b2:8f:a4:0d:61:e3:92:8a:46: 9f:a1:95:b9:90:d6:da:94:78:8a:92:9b:85:f9:30: 27:52:a2:ad:7a:37:bb:4a:2d:ef:c2:ac:0a:4a:59: e8:2b:02:85:c2:80:92:61:ea:c7:10:f7:1b:57:e5: e7:59:97:33:e1:5c:2b:04:2b:db:6d:ea:5b:9b:ca: 59:b5:0c:2a:80:da:0b:7b:65:e3:6c:c9:aa:b6:fd: f6:f5:d2:7c:7c:bd:9f:26:d3:15:4c:d1:fb:59:b5: 34:ef:91:b0:10:52:dc:c1:44:6b:6e:78:3b:6c:d2: 29:fb:04:1d:51:f5:0c:4c:fe:d6:16:04:63:f8:8a: b7:ff:b4:f7:64:59:e3:59:3d:62:25:f9:d8:37:1e: ca:36:04:18:32:d9:93:fa:2f:0f:29:42:43:f8:ef: 49:96:29:60:98:49:ef:59:29:3b:81:c2:c9:3c:b4: e7:b0:77:39:6f:7f:e6:4a:df:8d:55:e2:2e:c0:f2: 18:4b:82:dd:07:36:d5:b1:4e:2d:df:cd:43:c3:22: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:6E:A2:35:C0:3E:9C:AB:6F:23:56:3E:E6:82:C9:AD:B9:2E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9410fa2f-b3d0-3eef-a4be-99b76222a399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:50:43:1d:82:d6:21:15:97:f2:54:ce:92:5f:11:a8:93:e7: 5d:19:b3:cd:a9:4f:d2:f0:a6:4a:45:47:35:85:92:5a:ec:75: b6:f1:c6:d3:37:e5:73:82:a6:08:49:69:b2:70:e8:08:51:f8: 74:47:2a:df:37:f8:e9:25:d4:b2:2b:98:d4:e2:76:47:29:bc: dc:81:db:b9:04:78:1d:46:0e:ba:d7:0e:b3:56:57:0d:f5:35: a0:d5:e2:e4:02:ed:2b:68:cd:3c:20:74:2d:df:ac:66:aa:1f: 27:76:dd:82:b9:49:98:50:49:8b:b9:19:cb:20:3a:35:dc:95: d6:61:34:71:f5:b8:62:09:11:0d:36:a5:4a:c3:04:e1:52:d1: 67:db:8b:39:fa:f3:8c:ff:91:35:85:39:c1:24:1d:70:34:fc: 5f:7c:e6:4e:1e:9d:20:02:22:86:10:a4:4e:31:10:fb:45:0e: d1:9d:d2:31:39:ca:33:b1:de:01:70:af:bb:fc:6b:b4:1b:df: cd:cb:d6:96:aa:29:b5:e3:e1:05:04:4e:2b:87:a3:8d:19:e0: 9b:e2:9c:bf:1f:b5:fa:26:67:e0:a2:14:96:98:ec:f4:84:3e: a7:0d:4c:35:e0:d9:d8:5a:23:0f:3f:7a:5b:9c:a8:8a:14:a8: 76:94:dc:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH5tlRnQDfzEdgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk NzBmYWI1YmItY2QzMi00ZjQzLTk3ZDgtMWEwNjU3ZWUyNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1loG12GnntyqIN5LEhKeqk6R+KbD7TGvWxn SC+kS8PoPfUj/fFncY064L9cngU0fu+yj6QNYeOSikafoZW5kNbalHiKkpuF+TAn UqKteje7Si3vwqwKSlnoKwKFwoCSYerHEPcbV+XnWZcz4VwrBCvbbepbm8pZtQwq gNoLe2XjbMmqtv329dJ8fL2fJtMVTNH7WbU075GwEFLcwURrbng7bNIp+wQdUfUM TP7WFgRj+Iq3/7T3ZFnjWT1iJfnYNx7KNgQYMtmT+i8PKUJD+O9JlilgmEnvWSk7 gcLJPLTnsHc5b3/mSt+NVeIuwPIYS4LdBzbVsU4t381DwyJaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI69bqI1wD6cq28jVj7mgsmtuS7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTQxMGZhMmYtYjNkMC0z ZWVmLWE0YmUtOTliNzYyMjJhMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVQQx2C1iEVl/JUzpJfEaiT510Zs82pT9LwpkpFRzWFklrsdbbxxtM3 5XOCpghJabJw6AhR+HRHKt83+Okl1LIrmNTidkcpvNyB27kEeB1GDrrXDrNWVw31 NaDV4uQC7StozTwgdC3frGaqHyd23YK5SZhQSYu5GcsgOjXcldZhNHH1uGIJEQ02 pUrDBOFS0Wfbizn684z/kTWFOcEkHXA0/F985k4enSACIoYQpE4xEPtFDtGd0jE5 yjOx3gFwr7v8a7Qb383L1paqKbXj4QUETiuHo40Z4JvinL8ftfomZ+CiFJaY7PSE PqcNTDXg2dhaIw8/elucqIoUqHaU3Ig= -----END CERTIFICATE-----Generated at Sat Jun 14 06:21:09 2025 by rpki-client