$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa File: 261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa (raw, json) Hash identifier: ptWhdvefWr8sGP1tYcuJp8XWOoTjw7tIUjdS9kIoEgY= Subject key identifier: FB:74:95:A8:29:09:68:17:EA:C7:04:B5:53:6A:22:97:25:CC:8B:51 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC9DBB067393951FD12897AA0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b0:67:39:39:51:fd:12:89:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=cc340ba3-1e67-43fb-90b2-a0cf60a754b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:b6:fb:95:4e:9b:d9:32:ac:dd:df:d0:3b: a7:01:98:fa:33:a5:24:6f:46:28:87:17:f9:2f:f4: 7c:e2:86:e3:c7:38:d8:8e:2c:d1:44:eb:72:0e:ca: 4f:ec:21:a4:97:b3:63:bc:5e:ba:d6:17:4c:13:a2: 23:d1:9d:20:e3:f7:49:33:51:0b:03:2f:f9:32:ac: 22:74:ca:e5:8c:b8:ff:d9:04:4b:d9:ce:55:8b:d9: eb:e1:e2:4d:31:a0:d0:8a:de:5c:fe:e8:36:3a:1e: 74:46:0c:de:b3:8e:ca:b9:e4:e2:d4:dd:58:1f:8e: ae:06:37:24:2d:ba:97:c9:87:b1:ce:79:3c:5e:00: 74:6b:c1:1c:cf:99:70:04:5e:ca:56:7a:34:0f:33: ea:a9:bb:65:57:fe:9a:59:2a:58:06:7c:99:38:47: 00:1c:76:de:e9:76:4e:7e:ec:e3:01:7c:93:45:cd: b0:d9:6e:a8:74:d3:9c:da:5c:0c:d9:8f:ec:e2:35: 94:30:4a:af:8c:62:e7:8b:77:10:79:4d:07:0b:7d: ee:fb:be:9e:83:e6:c6:13:30:b0:c6:d5:38:2c:b7: a0:0b:0e:4a:40:7f:16:59:12:55:28:c1:fe:76:f4: a0:a0:b2:d8:f2:35:18:91:87:6d:fa:1c:3a:c7:c0: 3d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:74:95:A8:29:09:68:17:EA:C7:04:B5:53:6A:22:97:25:CC:8B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:38:47:4d:1c:66:60:f7:8a:71:24:e8:c3:84:ed:be:86:ae: 72:4f:06:5f:07:02:9c:2d:ff:3e:5e:a8:9a:a7:47:ff:0c:bd: 32:d0:3b:75:48:6d:e5:d3:84:bd:d3:4a:5e:05:69:e8:25:b9: 87:ae:fd:89:42:b2:76:cb:45:33:9a:7a:4f:c6:62:75:05:19: 71:65:58:6a:1f:bc:b6:e9:d0:6f:b0:60:2d:07:a9:36:a2:d2: 1c:e5:89:7d:27:a0:81:be:2d:79:87:01:64:2c:d0:b9:75:38: 47:f8:6c:9a:43:25:05:e9:d4:bf:56:95:45:80:50:ed:4a:80: 74:8b:d5:2f:7b:75:90:f7:7b:3a:1a:87:39:2b:ec:d7:61:93: ee:ed:9b:8d:96:4c:69:6e:15:82:c7:35:64:c3:75:8c:ad:53: 29:79:d3:4e:5d:5d:1f:f1:dd:78:5a:e9:21:04:c4:0f:30:53: 23:ce:50:5a:5f:3f:b9:46:63:a0:0a:e0:e5:a6:9b:5c:37:38: 39:06:6d:f4:c3:a8:53:35:f3:89:64:04:22:79:bc:7a:6a:17: 17:34:c7:df:ef:a5:ca:6a:57:46:ca:e0:de:f9:c0:6d:dc:13: 87:d2:d7:36:ea:9b:78:7a:6f:7e:0c:97:7e:0e:80:fc:c9:f9: de:2a:63:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27BnOTlR/RKJeqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk Y2MzNDBiYTMtMWU2Ny00M2ZiLTkwYjItYTBjZjYwYTc1NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/O2+5VOm9kyrN3f0DunAZj6M6Ukb0Yohxf5 L/R84objxzjYjizRROtyDspP7CGkl7NjvF661hdME6Ij0Z0g4/dJM1ELAy/5Mqwi dMrljLj/2QRL2c5Vi9nr4eJNMaDQit5c/ug2Oh50Rgzes47KueTi1N1YH46uBjck LbqXyYexznk8XgB0a8Ecz5lwBF7KVno0DzPqqbtlV/6aWSpYBnyZOEcAHHbe6XZO fuzjAXyTRc2w2W6odNOc2lwM2Y/s4jWUMEqvjGLni3cQeU0HC33u+76eg+bGEzCw xtU4LLegCw5KQH8WWRJVKMH+dvSgoLLY8jUYkYdt+hw6x8A9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt0lagpCWgX6scEtVNqIpclzItRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjYxZjNmMjMtYTJmZS0z YWJkLWI3ZTMtMjQ5YjBjZTI4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM4R00cZmD3inEk6MOE7b6GrnJPBl8HApwt/z5eqJqnR/8MvTLQO3VI beXThL3TSl4FaegluYeu/YlCsnbLRTOaek/GYnUFGXFlWGofvLbp0G+wYC0HqTai 0hzliX0noIG+LXmHAWQs0Ll1OEf4bJpDJQXp1L9WlUWAUO1KgHSL1S97dZD3ezoa hzkr7Ndhk+7tm42WTGluFYLHNWTDdYytUyl5005dXR/x3Xha6SEExA8wUyPOUFpf P7lGY6AK4OWmm1w3ODkGbfTDqFM184lkBCJ5vHpqFxc0x9/vpcpqV0bK4N75wG3c E4fS1zbqm3h6b34Ml34OgPzJ+d4qY4E= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:14 2025 by rpki-client