$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa File: d89b7b74-799b-350f-8511-b393fb6156e2.roa (raw, json) Hash identifier: JeXPRZfdp0IPlPhotlFMh4AXoYvqgQ7c8umrpibM9rI= Subject key identifier: E7:AD:73:FE:EA:E4:C3:D7:80:20:2A:71:CB:BB:75:66:0F:39:F8:E1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A0C0560B9B614AB5586A42100 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 170.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:60:b9:b6:14:ab:55:86:a4:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=99e09be6-99a6-45cf-8dcc-3f7a5703f785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ec:23:5c:30:f2:33:83:c9:6c:3f:7a:bb:ac: b3:0d:99:2a:97:ae:18:42:80:8f:81:4d:19:29:68: bd:20:50:cb:6d:14:51:97:78:f5:8f:f3:b5:f1:06: be:c9:6c:3f:3f:3a:ad:ea:84:6c:cd:76:85:79:50: 2a:9d:5a:bc:dd:b4:54:91:00:f6:b1:eb:95:4e:4b: a7:b3:8a:95:b6:5b:9b:1c:88:f8:13:e6:cf:80:ad: c3:ca:48:35:69:2b:5d:b4:a5:26:b6:b6:22:8a:16: a2:48:6b:7d:9d:a1:0a:e5:c9:73:a2:19:da:16:e6: 60:4d:d5:7e:3b:56:b5:dd:e5:1e:96:6d:df:f9:e6: 39:50:ca:74:d5:3f:0b:0e:9f:79:c9:66:29:53:ab: ee:20:32:cf:28:f7:7f:a1:fe:c3:37:3f:ba:30:76: 12:35:83:48:0b:aa:96:5e:5d:45:84:75:1e:a3:4d: ff:4c:5f:b7:39:d8:fb:64:e4:b1:8f:db:74:f5:54: c8:e2:5d:f2:a7:d5:0a:56:b8:55:7a:85:7e:46:22: 29:1e:b3:f0:ea:25:b0:b7:cb:7d:72:21:d3:05:34: f2:97:5b:e4:8e:28:e3:43:da:03:b8:85:e6:df:47: 7c:9e:ce:52:22:c3:70:14:4a:1c:39:9b:4a:2a:18: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AD:73:FE:EA:E4:C3:D7:80:20:2A:71:CB:BB:75:66:0F:39:F8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:83:85:8b:53:6b:a7:a8:17:04:3a:b5:b0:ce:61:6b:1a:26: 9b:f3:bd:0f:ec:fc:f8:b4:42:25:c7:06:ef:2f:3f:ed:7d:f6: 01:76:a6:84:9b:e2:b0:35:25:2d:4d:65:07:48:2a:d4:7e:cd: 23:c8:2d:7f:db:3e:43:e1:e0:78:16:7b:67:d4:4e:8b:7d:b5: 57:90:c6:e3:8e:1a:d1:4a:fd:a7:22:c7:97:0c:08:14:b2:38: ca:82:e8:ce:53:aa:c4:9b:d2:14:6f:b5:64:f3:41:02:19:af: fa:5f:b3:eb:bc:3a:66:d8:75:e1:9c:9f:34:2a:9f:c9:1d:45: 5c:a0:b4:99:8d:da:b3:bb:aa:78:03:cc:7b:98:96:4b:87:92: e7:ec:09:14:6e:a0:e4:e1:12:0c:11:7e:66:2a:8a:e3:ac:a8: 3d:03:45:97:41:c4:d6:7a:e3:7e:d7:2a:5c:ea:da:f0:29:70: 9e:ab:f8:2d:38:94:bd:fc:c2:67:8e:0f:0f:a1:b6:a1:da:a2: a1:d3:75:c9:17:4a:90:a5:77:aa:bc:4e:6c:41:e2:b6:7f:a4: 76:88:20:d6:43:b7:15:c7:13:59:fb:6b:9a:00:62:ac:30:24: bd:1a:d8:5f:79:2b:c8:dd:b1:11:3a:d8:f5:bf:a2:fc:41:5f: eb:96:bd:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWC5thSrVYakIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OTllMDliZTYtOTlhNi00NWNmLThkY2MtM2Y3YTU3MDNmNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgewjXDDyM4PJbD96u6yzDZkql64YQoCPgU0Z KWi9IFDLbRRRl3j1j/O18Qa+yWw/Pzqt6oRszXaFeVAqnVq83bRUkQD2seuVTkun s4qVtlubHIj4E+bPgK3Dykg1aStdtKUmtrYiihaiSGt9naEK5clzohnaFuZgTdV+ O1a13eUelm3f+eY5UMp01T8LDp95yWYpU6vuIDLPKPd/of7DNz+6MHYSNYNIC6qW Xl1FhHUeo03/TF+3Odj7ZOSxj9t09VTI4l3yp9UKVrhVeoV+RiIpHrPw6iWwt8t9 ciHTBTTyl1vkjijjQ9oDuIXm30d8ns5SIsNwFEocOZtKKhg/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOetc/7q5MPXgCAqccu7dWYPOfjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg5YjdiNzQtNzk5Yi0z NTBmLTg1MTEtYjM5M2ZiNjE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiDhYtTa6eoFwQ6tbDOYWsaJpvzvQ/s/Pi0QiXHBu8vP+199gF2poSb 4rA1JS1NZQdIKtR+zSPILX/bPkPh4HgWe2fUTot9tVeQxuOOGtFK/acix5cMCBSy OMqC6M5TqsSb0hRvtWTzQQIZr/pfs+u8OmbYdeGcnzQqn8kdRVygtJmN2rO7qngD zHuYlkuHkufsCRRuoOThEgwRfmYqiuOsqD0DRZdBxNZ6437XKlzq2vApcJ6r+C04 lL38wmeODw+htqHaoqHTdckXSpCld6q8TmxB4rZ/pHaIINZDtxXHE1n7a5oAYqww JL0a2F95K8jdsRE62PW/ovxBX+uWvZA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:37:22 2025 by rpki-client