$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/22b0e1f8-0511-3263-b054-3890238ca296.roa File: 22b0e1f8-0511-3263-b054-3890238ca296.roa (raw, json) Hash identifier: HdQEF5LBvf68NcfNNOgb6WQsnNo1nTR3qwsH7R+x240= Subject key identifier: 75:A3:6F:02:D4:83:0E:28:1D:FA:6D:3D:C7:1E:90:80:5E:02:DC:22 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584AAFF7C60F6D41C818E4B6C660 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/22b0e1f8-0511-3263-b054-3890238ca296.roa Signing time: Tue 29 Jul 2025 17:57:03 +0000 ROA not before: Tue 29 Jul 2025 17:57:03 +0000 ROA not after: Mon 27 Oct 2025 17:57:03 +0000 asID: 20115 IP address blocks: 170.39.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:af:f7:c6:0f:6d:41:c8:18:e4:b6:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Jul 29 17:57:03 2025 GMT Not After : Oct 27 17:57:03 2025 GMT Subject: CN=d1fd69e0-d40f-49e4-b500-5e425fba0de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:60:6e:9e:84:7b:0e:4a:f2:58:69:49:05: f7:3a:aa:32:d8:de:d0:be:f7:d7:ba:6c:2d:95:1f: 18:d1:5e:10:31:f2:1e:d7:12:e7:16:6c:f8:25:40: 64:f4:af:0c:8e:39:aa:0f:35:1f:13:a7:5c:c3:54: 10:e7:80:c6:98:b4:09:cb:2f:7e:45:e1:52:98:b1: 67:65:87:ce:6b:88:31:fb:85:8e:f6:cf:98:e8:61: a8:db:41:7a:87:e9:ad:db:89:66:df:5c:5e:ef:cb: 84:07:12:5f:6b:4c:5d:8e:fd:b1:06:2c:0f:1c:23: 99:61:93:08:2a:65:99:65:dc:3c:88:24:df:83:9f: f6:2e:1a:f1:58:d1:35:df:30:0d:1b:08:2f:92:34: b2:7d:8e:e0:8d:90:fc:d8:66:33:e7:7e:39:25:37: 3f:c4:a3:bb:3f:cf:81:50:7b:9a:26:11:f4:3b:ac: a0:21:82:a5:4e:a9:e3:e6:a5:57:d5:4f:f3:7f:38: ad:e1:d7:32:f7:a7:04:52:52:90:57:fc:ae:24:e5: b6:b8:71:5e:29:82:3f:70:d9:6f:25:bb:fd:dc:38: ca:79:ba:7b:0d:ba:e2:61:16:12:88:5a:9a:57:55: 8f:41:53:14:af:41:18:08:9e:01:53:bf:b4:e9:3e: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A3:6F:02:D4:83:0E:28:1D:FA:6D:3D:C7:1E:90:80:5E:02:DC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/22b0e1f8-0511-3263-b054-3890238ca296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c8:ae:d0:ab:1d:ee:ea:39:dc:b0:32:6a:8a:4f:e9:30:b6: 4d:b4:76:db:27:13:24:73:d9:e1:e2:89:49:07:6f:f2:8b:c2: 14:eb:79:f4:cb:6f:ea:91:8d:13:34:64:dc:ed:7f:7a:47:95: db:5f:2d:0d:55:7e:a9:2d:0c:25:3e:3f:e2:76:82:5f:a4:97: aa:b4:21:43:4c:cb:83:11:5a:7b:e0:72:17:86:5b:ad:82:f6: 9a:3f:de:81:ab:86:3f:4f:91:a1:21:1b:99:64:46:60:f4:e4: 9e:88:af:9e:48:01:79:d3:75:a9:fc:e7:b2:a2:b4:3c:f0:e0: 84:05:ff:46:23:88:c6:d5:1e:72:46:47:fe:e1:55:35:60:2d: ae:fc:b9:d1:d0:c0:c2:e2:7a:4d:dc:44:5f:ef:29:c7:0b:23: 87:d8:fd:d8:62:91:cb:0c:53:26:58:51:82:20:55:7d:21:4d: 3b:bb:37:9a:0d:a3:c0:83:51:90:ab:c1:6c:90:e5:ce:69:d6: 17:71:ca:c3:15:0f:49:ba:48:26:2c:d5:2a:25:de:0a:f8:dd: 94:0a:2b:a2:87:2c:5b:43:2c:b2:dc:f9:83:09:ca:b1:e0:ab: 9a:51:cf:81:db:ac:a8:fa:52:2d:34:63:6d:b0:2c:e0:f1:fb: 89:60:e6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqv98YPbUHIGOS2xmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MDcyOTE3NTcwM1oXDTI1MTAyNzE3NTcwM1owLzEtMCsGA1UEAxMk ZDFmZDY5ZTAtZDQwZi00OWU0LWI1MDAtNWU0MjVmYmEwZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZNgbp6Eew5K8lhpSQX3Oqoy2N7QvvfXumwt lR8Y0V4QMfIe1xLnFmz4JUBk9K8MjjmqDzUfE6dcw1QQ54DGmLQJyy9+ReFSmLFn ZYfOa4gx+4WO9s+Y6GGo20F6h+mt24lm31xe78uEBxJfa0xdjv2xBiwPHCOZYZMI KmWZZdw8iCTfg5/2LhrxWNE13zANGwgvkjSyfY7gjZD82GYz5345JTc/xKO7P8+B UHuaJhH0O6ygIYKlTqnj5qVX1U/zfzit4dcy96cEUlKQV/yuJOW2uHFeKYI/cNlv Jbv93DjKebp7DbriYRYSiFqaV1WPQVMUr0EYCJ4BU7+06T4baQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWjbwLUgw4oHfptPccekIBeAtwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvMjJiMGUxZjgtMDUxMS0z MjYzLWIwNTQtMzg5MDIzOGNhMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbIrtCrHe7qOdywMmqKT+kwtk20dtsnEyRz2eHiiUkHb/KLwhTrefTL b+qRjRM0ZNztf3pHldtfLQ1VfqktDCU+P+J2gl+kl6q0IUNMy4MRWnvgcheGW62C 9po/3oGrhj9PkaEhG5lkRmD05J6Ir55IAXnTdan857KitDzw4IQF/0YjiMbVHnJG R/7hVTVgLa78udHQwMLiek3cRF/vKccLI4fY/dhikcsMUyZYUYIgVX0hTTu7N5oN o8CDUZCrwWyQ5c5p1hdxysMVD0m6SCYs1Sol3gr43ZQKK6KHLFtDLLLc+YMJyrHg q5pRz4HbrKj6Ui00Y22wLODx+4lg5n8= -----END CERTIFICATE-----Generated at Sat Aug 9 14:27:13 2025 by rpki-client