$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa File: 85befa1b-cd80-3af9-861d-226b5949597f.roa (raw, json) Hash identifier: lCHpFUN1+IxdT3hxDgzDc9+0yF1/dim6KFE1WcAvHfY= Subject key identifier: 3F:CE:22:D7:8D:C8:5E:3E:E5:98:88:C8:DA:30:F6:14:5D:2B:92:FE Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584A7FE09851448C2880D4540200 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 213122 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:98:51:44:8c:28:80:d4:54:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=34cc92a1-7e9f-496a-b755-ee49bd5befe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:cc:2a:c4:3d:d4:4d:0b:ee:6e:db:ee:f2: ce:89:db:2d:f9:4b:c0:54:5e:88:c9:16:dc:af:cd: 01:8f:5e:a8:4a:34:85:a1:c7:79:14:f5:dd:58:24: 26:86:51:e2:84:02:1c:ed:68:7d:ef:e5:af:b0:6a: 30:8a:09:36:5c:24:47:eb:74:c6:7f:10:23:ac:b2: 32:62:46:8c:c6:a0:2b:51:81:43:63:c8:12:18:f3: 83:11:18:4d:ea:1a:2a:a6:23:26:fe:2c:99:18:cc: 1e:c9:5a:ce:b8:df:d0:fe:11:5f:ff:e5:a1:dd:24: b0:2c:ee:a3:d9:42:5e:73:96:d7:d2:bb:91:0f:b0: aa:b5:2b:6a:65:cd:65:9c:09:96:2b:d4:82:d5:b9: 06:24:74:8f:11:3f:e1:84:e3:01:d9:b6:7c:6a:ba: 33:2d:79:79:64:be:3e:11:2d:6e:db:78:f5:8e:72: 2b:42:cc:fe:22:59:33:e0:f9:6a:b1:29:33:49:50: a7:83:20:48:e3:02:53:1a:b3:88:02:8f:57:be:32: 2c:85:0d:79:e8:e0:23:d3:1a:6b:66:cc:60:7d:17: 12:40:e0:0a:bd:e0:85:9b:ce:23:a3:70:c7:78:75: d6:33:0d:c9:c6:f9:79:b4:5f:36:6c:98:4b:55:ca: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CE:22:D7:8D:C8:5E:3E:E5:98:88:C8:DA:30:F6:14:5D:2B:92:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:8e:36:bc:c3:4c:7a:d8:6a:a3:cc:71:cd:a0:89:74:57:9c: 9b:30:b2:5a:8e:14:04:f4:02:ee:50:f9:12:b5:f0:84:35:5c: 44:f9:45:fa:fd:df:47:41:53:68:30:f8:44:60:0e:98:e0:69: 01:f2:72:65:0a:1a:10:06:87:e7:b1:5e:47:3e:d8:f3:5d:be: 9b:41:b7:f3:8c:cd:c5:9c:8a:f2:c0:66:b4:8e:a5:02:59:15: d1:23:13:eb:90:a5:30:cc:28:fe:e8:89:01:4d:a9:3e:1b:68: 72:e8:3b:e7:ad:01:71:06:30:ec:38:8b:e0:7c:26:92:85:7a: 5f:07:6b:22:6d:e3:ab:dd:a5:c5:96:f9:eb:80:6b:9f:b9:0e: fe:f7:98:64:6c:54:06:65:4c:7b:b6:00:6d:c7:81:8d:79:2b: 10:38:45:6f:ea:67:fc:81:22:75:98:79:fd:51:fe:82:06:0d: 71:4b:e0:2e:37:ab:8e:83:87:30:8d:07:dd:a8:68:85:f9:6a: 20:0c:58:0f:0c:b9:b7:f4:18:e0:21:63:da:23:91:ff:a4:73: f3:17:93:27:ad:88:5f:08:f2:41:de:1b:49:e3:b4:55:a7:9d: 9e:b0:ce:83:f1:91:60:a8:25:ce:9b:e8:97:36:99:92:bf:ae: 7b:ee:04:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JhRRIwogNRUAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MzRjYzkyYTEtN2U5Zi00OTZhLWI3NTUtZWU0OWJkNWJlZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XDMKsQ91E0L7m7b7vLOidst+UvAVF6IyRbc r80Bj16oSjSFocd5FPXdWCQmhlHihAIc7Wh97+WvsGowigk2XCRH63TGfxAjrLIy YkaMxqArUYFDY8gSGPODERhN6hoqpiMm/iyZGMweyVrOuN/Q/hFf/+Wh3SSwLO6j 2UJec5bX0ruRD7CqtStqZc1lnAmWK9SC1bkGJHSPET/hhOMB2bZ8arozLXl5ZL4+ ES1u23j1jnIrQsz+Ilkz4PlqsSkzSVCngyBI4wJTGrOIAo9XvjIshQ156OAj0xpr ZsxgfRcSQOAKveCFm84jo3DHeHXWMw3Jxvl5tF82bJhLVcpmiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/OIteNyF4+5ZiIyNow9hRdK5L+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODViZWZhMWItY2Q4MC0z YWY5LTg2MWQtMjI2YjU5NDk1OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOONrzDTHrYaqPMcc2giXRXnJswslqOFAT0Au5Q+RK18IQ1XET5Rfr9 30dBU2gw+ERgDpjgaQHycmUKGhAGh+exXkc+2PNdvptBt/OMzcWcivLAZrSOpQJZ FdEjE+uQpTDMKP7oiQFNqT4baHLoO+etAXEGMOw4i+B8JpKFel8HayJt46vdpcWW +euAa5+5Dv73mGRsVAZlTHu2AG3HgY15KxA4RW/qZ/yBInWYef1R/oIGDXFL4C43 q46DhzCNB92oaIX5aiAMWA8Mubf0GOAhY9ojkf+kc/MXkyetiF8I8kHeG0njtFWn nZ6wzoPxkWCoJc6b6Jc2mZK/rnvuBKQ= -----END CERTIFICATE-----Generated at Sun Jul 20 15:02:00 2025 by rpki-client