$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa File: 0c08ffb5-9234-3de8-badf-f6244630e256.roa (raw, json) Hash identifier: Q9kQoxNfs6eJkh1VKKlqs/h74y5r1swWiUTFjQyO6iM= Subject key identifier: 45:88:6A:40:57:39:98:10:BD:6A:F5:07:83:12:90:31:90:79:57:5B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC9DBAF1E28B84E9F3F9011BE Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 170.85.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:af:1e:28:b8:4e:9f:3f:90:11:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=f42ae2ed-d7a3-40b3-b388-c1a25b012e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e0:2f:ac:a1:ce:a3:36:6e:a3:0a:59:5f:7e: 45:c5:63:07:45:65:60:1b:bd:5a:31:13:11:08:9c: dd:3a:0f:d2:f3:9c:d5:fc:b9:8f:08:1b:08:22:ba: d0:34:ba:3c:94:44:f6:1e:74:39:aa:4c:7d:e8:4e: fd:e4:21:f5:fb:10:b3:54:a3:3d:45:37:2e:55:53: 4c:98:ec:2a:81:b1:28:cf:17:e2:d4:10:55:c6:eb: 8a:07:83:cd:3b:3b:f1:af:68:ba:b8:92:65:b3:90: 3e:70:e6:6b:e9:bf:38:85:68:4a:a8:da:ab:42:fe: 83:0d:f1:20:dc:be:cb:05:f9:eb:c3:cd:71:e4:75: e8:da:6a:53:9d:de:d3:c3:c3:cb:a3:f4:fb:60:fa: 5d:f1:06:f8:8d:64:03:23:91:56:c9:42:f5:b9:df: 9b:8a:da:0c:43:68:87:bc:2e:f2:2d:31:11:4d:cb: 57:68:78:24:90:79:3a:66:fa:64:45:d6:be:6c:9c: fa:da:01:4c:2c:88:9e:16:f2:71:ef:3d:61:b2:e8: 12:8e:30:00:90:94:b8:3f:ce:a1:9c:f7:d3:fa:48: 42:49:ee:0b:79:bc:33:55:0e:ff:b8:7b:aa:3b:82: 34:45:2a:cd:43:6a:63:94:7b:46:e4:a2:db:c1:c8: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:6A:40:57:39:98:10:BD:6A:F5:07:83:12:90:31:90:79:57:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:60:33:a5:18:14:77:78:2e:0e:1e:c3:b1:86:1a:09:d7:07: f6:9e:61:97:4e:29:9a:b8:cc:ca:9c:41:30:d3:18:cd:a5:32: 6a:94:aa:09:1a:45:4d:71:c4:75:d4:b9:ae:96:04:05:74:d8: e0:05:e3:00:6f:a5:dc:c5:1e:7d:85:d6:ed:7e:ba:ea:ce:51: 19:b4:09:26:9d:b1:e5:35:0f:da:39:b0:11:82:81:21:0a:3e: e5:12:33:c8:01:ed:cb:08:8c:7e:43:4b:fb:dd:c7:5b:77:59: 78:d1:86:b0:25:ef:39:9b:1c:7d:7d:56:00:44:e1:35:c0:bf: cd:cb:23:2c:ac:d5:77:c0:55:f4:1d:31:cf:ac:b7:75:59:72: ab:73:73:bf:9e:fc:48:85:ed:e1:20:62:fe:52:fa:e4:a6:18: 42:c6:1a:b2:a9:99:de:76:af:a4:3a:eb:b1:da:29:f1:8a:e9: f1:60:f2:2e:c7:70:af:6b:5e:bc:69:e1:29:c6:b8:51:6d:4f: 29:35:a4:df:f5:fa:4e:c6:6e:21:0c:4b:d8:39:60:ef:37:50: 45:be:ef:6a:4d:f6:19:79:09:7d:8a:20:ee:ab:ea:a0:e1:90: a8:46:39:d0:83:fb:90:33:83:d2:75:db:45:ac:e0:f7:65:b5: b9:fd:b0:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ268eKLhOnz+QEb4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk ZjQyYWUyZWQtZDdhMy00MGIzLWIzODgtYzFhMjViMDEyZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eAvrKHOozZuowpZX35FxWMHRWVgG71aMRMR CJzdOg/S85zV/LmPCBsIIrrQNLo8lET2HnQ5qkx96E795CH1+xCzVKM9RTcuVVNM mOwqgbEozxfi1BBVxuuKB4PNOzvxr2i6uJJls5A+cOZr6b84hWhKqNqrQv6DDfEg 3L7LBfnrw81x5HXo2mpTnd7Tw8PLo/T7YPpd8Qb4jWQDI5FWyUL1ud+bitoMQ2iH vC7yLTERTctXaHgkkHk6ZvpkRda+bJz62gFMLIieFvJx7z1hsugSjjAAkJS4P86h nPfT+khCSe4LebwzVQ7/uHuqO4I0RSrNQ2pjlHtG5KLbwcg4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWIakBXOZgQvWr1B4MSkDGQeVdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGMwOGZmYjUtOTIzNC0z ZGU4LWJhZGYtZjYyNDQ2MzBlMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9gM6UYFHd4Lg4ew7GGGgnXB/aeYZdOKZq4zMqcQTDTGM2lMmqUqgka RU1xxHXUua6WBAV02OAF4wBvpdzFHn2F1u1+uurOURm0CSadseU1D9o5sBGCgSEK PuUSM8gB7csIjH5DS/vdx1t3WXjRhrAl7zmbHH19VgBE4TXAv83LIyys1XfAVfQd Mc+st3VZcqtzc7+e/EiF7eEgYv5S+uSmGELGGrKpmd52r6Q667HaKfGK6fFg8i7H cK9rXrxp4SnGuFFtTyk1pN/1+k7GbiEMS9g5YO83UEW+72pN9hl5CX2KIO6r6qDh kKhGOdCD+5Azg9J120Ws4Pdltbn9sFI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:41 2025 by rpki-client