$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa File: a604cff9-0e0a-3fef-b07e-b2083da639ef.roa (raw, json) Hash identifier: YByHtoUi0tihaGuwTJfYx++s/m4Wd6F5vdoYPu/rArM= Subject key identifier: 4B:95:FB:96:34:49:C4:65:AC:62:08:F1:D6:3F:16:FD:A7:7F:E2:8F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC6A800372782984FD6B03180 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa Signing time: Thu 07 Aug 2025 09:29:19 +0000 ROA not before: Thu 07 Aug 2025 09:29:19 +0000 ROA not after: Wed 05 Nov 2025 10:29:19 +0000 asID: 22616 IP address blocks: 170.85.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c6:a8:00:37:27:82:98:4f:d6:b0:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 7 09:29:19 2025 GMT Not After : Nov 5 10:29:19 2025 GMT Subject: CN=32f8f548-5536-4d5e-85dc-601cce2cf2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c3:38:b2:53:86:98:19:cd:b5:4b:e2:f1:6b: 6d:da:3c:ec:1d:23:42:ed:9a:51:3f:34:e5:11:cb: 36:e4:1a:83:13:b2:e8:58:57:c7:7b:42:e5:03:91: 99:60:cc:dd:6e:ae:16:b3:8d:45:8d:a0:43:b9:45: d9:db:6d:57:50:dc:85:16:fd:89:d7:11:a0:0a:45: 4d:9c:a8:c5:e2:38:b3:e3:bc:98:7b:1c:45:a7:5f: 95:a3:f3:81:ad:a3:0b:b7:fd:89:5a:3e:22:85:1a: d7:58:0c:5a:29:d6:6a:3c:3a:c0:b2:b2:64:87:3e: 00:03:19:bb:d8:66:fd:38:7e:8e:7d:73:fb:d1:f7: 3d:dc:c3:68:ec:9b:05:1f:d3:9d:91:3a:78:60:14: a3:7b:8b:bf:b5:d5:89:53:87:11:ea:2e:b8:e6:54: 24:7e:2d:bf:59:55:ce:40:ab:1c:91:e2:cf:f4:00: 9e:75:4c:27:37:61:02:2b:89:f0:33:16:01:c4:7a: 27:cf:dd:92:84:b2:be:63:7f:07:e5:99:8e:28:0d: 73:63:81:83:fa:56:f5:2f:0c:6a:18:26:cd:ab:9b: 42:f1:49:e3:0d:5d:e0:4a:0f:6c:f7:02:5d:26:da: 71:ea:20:c7:46:af:32:a7:ed:e6:3c:a2:3b:ce:8b: 26:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:95:FB:96:34:49:C4:65:AC:62:08:F1:D6:3F:16:FD:A7:7F:E2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a604cff9-0e0a-3fef-b07e-b2083da639ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:2a:1f:63:40:cf:2b:5f:60:27:2a:6f:ab:c5:55:34:dc:f7: b3:01:c1:e4:ed:31:2a:e2:0c:25:28:da:9f:e0:28:06:a7:98: 2c:75:02:9c:fd:d1:57:00:43:bc:d7:ed:ac:40:64:af:24:4e: 71:a7:99:34:d2:cd:a0:fd:dd:0b:09:d6:9a:9a:8d:bc:7b:dd: 53:09:ca:67:78:2d:b0:be:4f:27:c1:61:65:d5:1a:fe:d3:75: 00:f9:de:47:6f:c6:4c:b5:64:af:c5:70:0e:7f:0b:4d:0c:ca: 2f:51:7e:38:4b:c0:b0:de:39:05:a3:71:a1:5f:c9:a9:bb:d9: 9f:17:c9:04:c9:8e:0a:fb:a2:fb:ed:1a:15:c8:c1:9a:ae:68: 27:e4:da:e1:28:03:36:c6:02:b9:bd:80:d4:6d:3e:69:85:a5: e2:8c:5f:33:98:65:8e:b9:fe:0c:52:ae:0d:68:05:55:a7:34: 59:dd:96:4f:9e:e7:a1:02:ab:48:01:d4:e2:6a:07:71:48:62: bd:28:25:e4:08:f4:e5:75:a8:31:b5:e9:cd:1c:4b:f5:41:81: 82:cb:e4:f0:96:bc:04:25:57:fd:c1:ff:45:a4:9d:2d:28:7b: ca:ae:75:57:cb:ee:c0:66:c0:ac:0a:7c:95:1f:4a:2f:aa:7b: dc:a5:0a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErGqAA3J4KYT9awMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwNzA5MjkxOVoXDTI1MTEwNTEwMjkxOVowLzEtMCsGA1UEAxMk MzJmOGY1NDgtNTUzNi00ZDVlLTg1ZGMtNjAxY2NlMmNmMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisM4slOGmBnNtUvi8Wtt2jzsHSNC7ZpRPzTl Ecs25BqDE7LoWFfHe0LlA5GZYMzdbq4Ws41FjaBDuUXZ221XUNyFFv2J1xGgCkVN nKjF4jiz47yYexxFp1+Vo/OBraMLt/2JWj4ihRrXWAxaKdZqPDrAsrJkhz4AAxm7 2Gb9OH6OfXP70fc93MNo7JsFH9OdkTp4YBSje4u/tdWJU4cR6i645lQkfi2/WVXO QKsckeLP9ACedUwnN2ECK4nwMxYBxHonz92ShLK+Y38H5ZmOKA1zY4GD+lb1Lwxq GCbNq5tC8UnjDV3gSg9s9wJdJtpx6iDHRq8yp+3mPKI7zosmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuV+5Y0ScRlrGII8dY/Fv2nf+KPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTYwNGNmZjktMGUwYS0z ZmVmLWIwN2UtYjIwODNkYTYzOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMqH2NAzytfYCcqb6vFVTTc97MBweTtMSriDCUo2p/gKAanmCx1Apz9 0VcAQ7zX7axAZK8kTnGnmTTSzaD93QsJ1pqajbx73VMJymd4LbC+TyfBYWXVGv7T dQD53kdvxky1ZK/FcA5/C00Myi9RfjhLwLDeOQWjcaFfyam72Z8XyQTJjgr7ovvt GhXIwZquaCfk2uEoAzbGArm9gNRtPmmFpeKMXzOYZY65/gxSrg1oBVWnNFndlk+e 56ECq0gB1OJqB3FIYr0oJeQI9OV1qDG16c0cS/VBgYLL5PCWvAQlV/3B/0WknS0o e8qudVfL7sBmwKwKfJUfSi+qe9ylCkI= -----END CERTIFICATE-----Generated at Wed Aug 20 11:56:34 2025 by rpki-client