$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa File: bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa (raw, json) Hash identifier: cbYd1cOBzAUPmFfgb9T5+Etg1cyJYH9MTj2+hULhidM= Subject key identifier: 05:4B:F0:6E:A0:8F:22:81:05:A5:5B:47:BB:C4:30:94:54:82:C2:2C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00905CF1853B4A377BE00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa Signing time: Sun 03 Aug 2025 02:35:48 +0000 ROA not before: Sun 03 Aug 2025 02:35:48 +0000 ROA not after: Sat 01 Nov 2025 02:35:48 +0000 asID: 22616 IP address blocks: 170.85.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:09:05:cf:18:53:b4:a3:77:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:48 2025 GMT Not After : Nov 1 02:35:48 2025 GMT Subject: CN=f8e5db50-b7a9-4258-b684-406ea32b0ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:cd:45:4d:6c:ef:51:36:22:3d:69:70:1d: 36:f6:28:1c:6b:f2:68:9e:55:26:95:5c:0f:7e:e4: 05:3e:fc:d2:24:4c:8d:4f:5b:0c:94:ab:b0:2d:4f: 5e:c3:fc:92:71:f4:d7:b0:a2:5b:29:1e:ef:5d:0f: b7:29:bb:fa:b0:51:98:14:70:98:0a:56:f8:5c:8c: b6:0a:ee:15:cc:84:1b:81:35:06:03:22:75:d2:20: de:6c:44:bf:c1:23:5b:52:07:73:06:09:60:f8:0b: 27:0b:e6:50:ca:9a:51:bb:e7:e0:15:0a:75:56:58: 51:cb:be:ed:b2:46:c6:73:87:dd:a5:7f:22:aa:6a: 87:58:2e:7d:aa:b6:c1:22:6f:23:dc:ab:a9:54:f6: 17:85:c8:dd:fb:02:b6:04:66:14:7d:ae:e7:2c:60: ed:d2:38:b3:db:96:47:86:9d:0f:7e:85:40:72:9a: ef:cd:3b:ab:89:96:e4:f2:81:42:b2:75:fc:31:4c: 47:eb:89:60:06:78:74:39:0b:4e:11:63:c2:ac:96: 21:02:41:ce:8f:fc:cd:d0:ff:40:ad:6c:93:83:d3: 60:00:b9:98:25:d9:e6:be:2d:0a:91:f9:a0:cd:2d: b8:3f:3a:8a:3f:c5:c6:51:e4:e9:6c:42:d5:31:0c: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4B:F0:6E:A0:8F:22:81:05:A5:5B:47:BB:C4:30:94:54:82:C2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcf0604d-2a98-3cf7-bf1f-f1fe764f2f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:86:0f:c9:a6:13:b2:a3:28:e3:ae:7c:bd:84:0d:db:dd:80: 30:b3:e3:34:ca:1a:53:e5:35:f0:d7:e2:de:02:52:ec:d8:c1: 23:ce:0f:9b:9d:66:81:45:c0:36:2e:a5:ae:3f:02:d6:5f:31: 18:8a:29:e6:73:0d:30:ef:12:b2:11:ef:1b:65:5d:e4:63:14: fe:f0:24:e9:8b:0c:0b:55:cc:8a:ef:47:f1:db:b7:bb:17:62: 5b:aa:a6:b3:b7:23:04:ba:2d:a0:3e:88:e8:1f:7c:04:27:fe: 06:41:aa:8f:8b:35:12:48:f7:02:17:5e:44:31:ee:d3:30:98: bc:58:f2:d4:de:db:6c:5f:4d:15:61:f4:a4:4e:29:8e:34:f5: 32:f7:47:3a:7f:29:ee:63:b8:36:74:e8:05:a7:a1:c5:fd:5e: e7:97:d8:1f:b0:89:e8:b3:64:22:3a:e6:e3:64:d2:35:fc:3a: 3b:01:b6:56:0f:46:57:58:bc:5e:ba:4c:8e:01:f2:8a:32:3d: e5:76:0b:1d:bf:17:3d:28:44:5d:29:d2:80:3e:15:4d:87:e4: 35:12:1b:34:eb:23:91:41:ef:06:01:23:9e:58:16:51:3d:58: 39:46:28:99:ec:59:98:3b:dd:0d:23:24:c6:13:95:a6:80:f2: ba:bd:f8:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAkFzxhTtKN3vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0OFoXDTI1MTEwMTAyMzU0OFowLzEtMCsGA1UEAxMk ZjhlNWRiNTAtYjdhOS00MjU4LWI2ODQtNDA2ZWEzMmIwYWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30rNRU1s71E2Ij1pcB029igca/JonlUmlVwP fuQFPvzSJEyNT1sMlKuwLU9ew/yScfTXsKJbKR7vXQ+3Kbv6sFGYFHCYClb4XIy2 Cu4VzIQbgTUGAyJ10iDebES/wSNbUgdzBglg+AsnC+ZQyppRu+fgFQp1VlhRy77t skbGc4fdpX8iqmqHWC59qrbBIm8j3KupVPYXhcjd+wK2BGYUfa7nLGDt0jiz25ZH hp0PfoVAcprvzTuriZbk8oFCsnX8MUxH64lgBnh0OQtOEWPCrJYhAkHOj/zN0P9A rWyTg9NgALmYJdnmvi0KkfmgzS24PzqKP8XGUeTpbELVMQxelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVL8G6gjyKBBaVbR7vEMJRUgsIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmNmMDYwNGQtMmE5OC0z Y2Y3LWJmMWYtZjFmZTc2NGYyZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOGD8mmE7KjKOOufL2EDdvdgDCz4zTKGlPlNfDX4t4CUuzYwSPOD5ud ZoFFwDYupa4/AtZfMRiKKeZzDTDvErIR7xtlXeRjFP7wJOmLDAtVzIrvR/Hbt7sX YluqprO3IwS6LaA+iOgffAQn/gZBqo+LNRJI9wIXXkQx7tMwmLxY8tTe22xfTRVh 9KROKY409TL3Rzp/Ke5juDZ06AWnocX9XueX2B+wieizZCI65uNk0jX8OjsBtlYP RldYvF66TI4B8ooyPeV2Cx2/Fz0oRF0p0oA+FU2H5DUSGzTrI5FB7wYBI55YFlE9 WDlGKJnsWZg73Q0jJMYTlaaA8rq9+E8= -----END CERTIFICATE-----Generated at Mon Aug 4 22:19:57 2025 by rpki-client