$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11ccff52-06c6-389d-ac1b-b4e862b940de.roa File: 11ccff52-06c6-389d-ac1b-b4e862b940de.roa (raw, json) Hash identifier: ZX8NDXmRNlVC9Wz24DjMuhcARx8PGwwiVJin6Q9sIDM= Subject key identifier: 77:04:EA:76:D1:A1:B2:C0:F0:D9:F8:2F:C7:C9:3A:88:71:B4:B2:DE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A480AE48C2222B72FC9961E80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11ccff52-06c6-389d-ac1b-b4e862b940de.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 8987 IP address blocks: 170.85.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e4:8c:22:22:b7:2f:c9:96:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=9adb715e-5545-47b1-aaa8-ed67c8818290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3d:81:e2:fb:b5:f9:80:b2:92:1e:1e:a2:65: 91:c5:be:a4:35:5e:04:be:cd:b5:56:f3:6e:4a:37: 35:1e:09:42:3e:5f:82:51:8a:4c:05:85:67:e7:d3: 0a:39:41:2d:7a:17:ba:43:87:2b:74:8b:6b:67:c9: dc:78:42:fe:01:c4:45:bd:28:6d:12:24:9c:90:11: 53:34:6b:ac:ca:28:b7:2b:85:84:93:e5:f4:69:a9: e8:7f:f5:c4:4c:b7:90:85:70:fc:58:5b:20:36:be: cf:0e:e9:d4:f4:4a:02:d1:fd:c5:60:97:03:09:71: 06:c9:ae:12:0c:b0:59:f7:4f:0c:e2:37:fb:53:dd: 07:66:4c:52:60:9b:42:2a:92:16:35:d9:91:ca:4f: ef:c0:77:2a:7f:22:83:83:60:7e:70:3d:c1:1d:12: 33:33:e2:34:d6:c6:05:48:36:76:5d:a8:a8:22:4c: f7:88:64:d2:ee:3e:9b:d7:c7:d7:e1:e8:cd:1d:76: bf:c8:8f:1d:81:96:85:ce:ef:13:22:7a:31:29:d9: 3f:83:63:85:55:d5:73:ee:4e:8a:9b:12:53:70:74: cc:81:ef:d1:b5:f8:40:5c:e2:1c:05:39:3f:d0:d7: ec:1e:a9:fc:cd:37:e4:e8:0c:87:3d:bb:76:85:c7: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:04:EA:76:D1:A1:B2:C0:F0:D9:F8:2F:C7:C9:3A:88:71:B4:B2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11ccff52-06c6-389d-ac1b-b4e862b940de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:4f:2f:29:e1:19:3d:5b:42:ca:6e:81:f3:4f:f2:e2:3c:8c: 6d:5e:1e:13:f2:46:0c:9b:25:35:ac:14:f7:95:57:7a:71:9c: 38:c0:56:21:bd:4c:9c:15:90:e7:eb:7b:a1:4b:8a:4b:5b:ae: 81:ab:7f:05:b5:37:21:fe:6c:ac:71:28:60:b0:21:04:62:61: cb:e7:3f:f3:c0:aa:f1:8c:cd:dd:b2:ce:a8:c4:df:3e:1b:5f: c8:d0:d0:e6:b5:61:89:37:5b:e1:1e:8c:14:34:7f:1d:92:98: 6e:f9:2f:84:45:38:4f:52:db:54:c4:8a:b0:2a:58:4b:b5:dd: 04:84:f6:6e:40:f4:44:1e:4e:67:4a:3b:a3:f8:2c:a1:d4:23: 1a:84:a2:51:41:76:52:c6:ec:4e:1b:32:bd:f5:06:58:78:f8: a3:be:2c:83:f2:f1:ce:40:62:b4:08:03:af:67:19:4a:65:60: cd:a6:20:9d:c1:96:18:d0:35:54:db:4c:a1:b6:93:8e:d8:6e: 18:18:d4:1c:56:ce:41:6d:97:5b:3b:3d:98:12:da:56:16:94: 1e:2f:ce:57:5c:df:b4:f6:3a:08:6b:4a:7a:91:d0:71:3a:e4: 4e:4d:86:bf:b7:52:35:ce:54:11:5e:8c:99:87:e3:df:56:78: 0e:4b:1f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuSMIiK3L8mWHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk OWFkYjcxNWUtNTU0NS00N2IxLWFhYTgtZWQ2N2M4ODE4MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj2B4vu1+YCykh4eomWRxb6kNV4Evs21VvNu Sjc1HglCPl+CUYpMBYVn59MKOUEtehe6Q4crdItrZ8nceEL+AcRFvShtEiSckBFT NGusyii3K4WEk+X0aanof/XETLeQhXD8WFsgNr7PDunU9EoC0f3FYJcDCXEGya4S DLBZ908M4jf7U90HZkxSYJtCKpIWNdmRyk/vwHcqfyKDg2B+cD3BHRIzM+I01sYF SDZ2XaioIkz3iGTS7j6b18fX4ejNHXa/yI8dgZaFzu8TInoxKdk/g2OFVdVz7k6K mxJTcHTMge/RtfhAXOIcBTk/0NfsHqn8zTfk6AyHPbt2hcd/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcE6nbRobLA8Nn4L8fJOohxtLLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTFjY2ZmNTItMDZjNi0z ODlkLWFjMWItYjRlODYyYjk0MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRPLynhGT1bQspugfNP8uI8jG1eHhPyRgybJTWsFPeVV3pxnDjAViG9 TJwVkOfre6FLiktbroGrfwW1NyH+bKxxKGCwIQRiYcvnP/PAqvGMzd2yzqjE3z4b X8jQ0Oa1YYk3W+EejBQ0fx2SmG75L4RFOE9S21TEirAqWEu13QSE9m5A9EQeTmdK O6P4LKHUIxqEolFBdlLG7E4bMr31Blh4+KO+LIPy8c5AYrQIA69nGUplYM2mIJ3B lhjQNVTbTKG2k47YbhgY1BxWzkFtl1s7PZgS2lYWlB4vzldc37T2OghrSnqR0HE6 5E5Nhr+3UjXOVBFejJmH499WeA5LH8M= -----END CERTIFICATE-----Generated at Sun Sep 7 11:22:00 2025 by rpki-client