$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa File: f00191ea-7649-3395-af77-d4da4f50995c.roa (raw, json) Hash identifier: +GinLgSRSC6TwBI4sArLtF+iUwzrntHfVZ8/No0O4W8= Subject key identifier: 9C:77:29:5F:D8:5A:7F:25:56:A7:48:2F:C8:84:78:75:0D:E2:CA:0E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849E91F9AFA7C5869C8BE07BC80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 170.85.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:9a:fa:7c:58:69:c8:be:07:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=7f27ec81-c7a1-4b33-86a0-074afd3c35c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:20:02:0e:5b:eb:e8:d5:3f:18:92:72:fd: ab:b6:86:58:7e:5c:12:ea:ea:d8:08:56:bb:0e:56: ab:37:48:bd:7f:f1:20:1d:82:ae:eb:60:ca:a3:d3: ca:4e:6e:90:94:ab:fe:fa:b3:de:5b:e6:de:84:9d: 04:7b:06:3f:da:e1:c8:28:1a:25:a8:28:ab:54:cf: e4:89:ba:3a:b9:7d:a3:52:9c:6e:b3:a3:c8:a3:a9: 50:73:3e:73:bc:7c:c0:90:b2:b9:31:b3:0e:76:87: 60:3f:26:61:4e:98:81:5e:19:6d:c5:e1:b6:ba:c6: 6b:df:a4:fa:38:85:78:9e:60:53:80:f5:d3:d5:65: c5:e1:3e:60:55:47:b2:b4:b4:96:b6:ef:8d:d6:43: 15:2f:7d:9f:f0:c2:bb:23:be:60:69:ce:d4:4d:94: cb:71:62:1b:80:1a:9e:ec:ce:3a:5d:3b:77:90:13: 18:9b:ab:38:98:5a:a8:18:db:65:8c:17:b0:44:5a: f1:80:b7:82:8b:a4:d1:1d:36:2b:e7:8a:ed:f7:63: 81:75:74:8d:22:c8:47:93:d4:7a:4f:eb:e4:6b:47: f8:b0:48:ae:52:eb:49:bb:1d:e4:6b:a9:38:dc:fe: 43:a9:9c:cc:ef:8a:3e:e0:f5:67:b4:b9:0e:8b:0b: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:77:29:5F:D8:5A:7F:25:56:A7:48:2F:C8:84:78:75:0D:E2:CA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f8:49:cf:7b:f8:3d:4e:4f:1e:11:e7:15:6a:0e:95:c6:e8: ea:3a:99:93:72:fe:79:07:59:dd:7f:cb:54:51:63:7c:89:d7: e0:6f:b0:04:07:df:ee:d1:39:24:d3:5d:86:71:6a:0f:34:aa: 77:f7:7e:10:7c:96:75:b9:90:45:81:b8:e1:3e:4b:37:ee:96: 68:00:98:1f:be:b3:5c:1c:41:5c:5b:14:16:79:94:85:61:ca: 09:c2:41:7c:5c:2f:16:6c:fc:9e:c5:28:4f:5a:03:5e:5d:fa: 62:7e:be:b1:05:85:fc:c0:61:47:44:ba:a0:4c:8f:96:87:d0: ae:ee:db:13:20:1e:45:6d:b7:c8:d4:44:b7:b6:89:45:93:e7: ae:2e:98:08:df:0e:7a:8c:10:c5:19:e7:cd:ba:46:51:24:56: fc:51:06:d7:62:c8:cf:e6:ee:72:58:27:9d:40:ed:eb:d2:bb: c0:62:e6:25:01:fd:2d:bb:e3:28:9c:2c:9a:79:ce:ea:97:0a: e9:37:0f:1e:90:4d:09:a6:4f:6c:19:c8:65:1d:93:44:bf:ad: 71:cc:8d:84:59:aa:17:92:b1:2a:68:05:43:0e:4b:3c:cb:62: cb:07:d6:e7:ee:7b:1e:7c:9f:93:6d:e6:cc:1a:b5:0f:8d:43: 6d:2e:7c:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH5r6fFhpyL4HvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk N2YyN2VjODEtYzdhMS00YjMzLTg2YTAtMDc0YWZkM2MzNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4cgAg5b6+jVPxiScv2rtoZYflwS6urYCFa7 DlarN0i9f/EgHYKu62DKo9PKTm6QlKv++rPeW+behJ0EewY/2uHIKBolqCirVM/k ibo6uX2jUpxus6PIo6lQcz5zvHzAkLK5MbMOdodgPyZhTpiBXhltxeG2usZr36T6 OIV4nmBTgPXT1WXF4T5gVUeytLSWtu+N1kMVL32f8MK7I75gac7UTZTLcWIbgBqe 7M46XTt3kBMYm6s4mFqoGNtljBewRFrxgLeCi6TRHTYr54rt92OBdXSNIshHk9R6 T+vka0f4sEiuUutJux3ka6k43P5DqZzM74o+4PVntLkOiwvr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx3KV/YWn8lVqdIL8iEeHUN4soOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjAwMTkxZWEtNzY0OS0z Mzk1LWFmNzctZDRkYTRmNTA5OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn4Sc97+D1OTx4R5xVqDpXG6Oo6mZNy/nkHWd1/y1RRY3yJ1+BvsAQH 3+7ROSTTXYZxag80qnf3fhB8lnW5kEWBuOE+SzfulmgAmB++s1wcQVxbFBZ5lIVh ygnCQXxcLxZs/J7FKE9aA15d+mJ+vrEFhfzAYUdEuqBMj5aH0K7u2xMgHkVtt8jU RLe2iUWT564umAjfDnqMEMUZ5826RlEkVvxRBtdiyM/m7nJYJ51A7evSu8Bi5iUB /S274yicLJp5zuqXCuk3Dx6QTQmmT2wZyGUdk0S/rXHMjYRZqheSsSpoBUMOSzzL YssH1ufuex58n5Nt5swatQ+NQ20ufKM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:47:34 2025 by rpki-client