$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa File: 2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa (raw, json) Hash identifier: HLn9kjk5wj/N8ILosD4dRE7KgKv7243GQxNkf2hGelk= Subject key identifier: CC:CF:7B:77:1E:45:D8:80:CA:56:24:CA:6B:53:3F:64:65:3A:71:09 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AECC134C02F8E4EE7E7A6E040 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 170.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:34:c0:2f:8e:4e:e7:e7:a6:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7d86262a-369a-4941-b718-6bc403892bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:94:77:fb:56:6a:7d:ab:76:9b:79:d1:24: f7:4f:46:7a:df:1b:27:7b:5b:88:9f:3e:d3:5d:9b: ca:87:61:e3:f7:a6:40:51:89:d3:58:fb:5a:70:64: 51:ef:2d:6c:93:f4:51:70:39:34:7b:57:41:89:90: 5e:25:12:26:44:8b:af:ec:eb:b5:20:99:ef:57:c0: ad:03:21:35:63:bb:d1:a0:05:44:36:11:1f:ca:69: 0f:05:ab:51:67:6e:7a:93:e8:5c:42:99:6b:67:9f: 4b:19:33:04:19:10:47:95:14:2c:91:10:e8:45:7e: d0:f4:ca:3e:77:19:25:39:af:dd:b6:bd:81:e1:67: 06:cd:c2:c1:16:f7:cb:18:44:37:64:bc:75:a1:55: ee:bc:f3:e6:f2:85:00:1b:1f:8b:2d:4f:48:7c:93: 21:f2:f8:0e:e9:69:aa:58:9a:8e:d6:79:d0:2f:80: c4:86:a1:4e:3f:e7:1c:b7:be:d4:fc:19:c4:8f:51: b1:93:80:27:46:27:e3:0d:11:ef:ab:51:a1:b8:0d: 19:8c:7a:88:4c:d5:db:21:72:41:69:ea:a2:88:04: 13:17:c6:3b:70:95:13:08:0b:ee:80:5d:d3:9d:d8: 77:14:07:36:2b:f1:44:d4:7d:3c:a0:f0:5d:b1:ad: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CF:7B:77:1E:45:D8:80:CA:56:24:CA:6B:53:3F:64:65:3A:71:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c9902ef-6d33-3e34-ae3f-43b7a02c1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:e8:15:e3:fc:52:fa:68:ae:e5:53:4f:bf:5f:f3:a7:68:22: 7b:75:28:e5:c8:ca:4c:d5:61:4c:0d:62:95:95:29:0b:3d:5f: 62:98:62:9e:7f:fb:d1:d5:5c:2d:10:ce:79:68:5b:bb:15:04: df:ec:07:54:0d:99:a1:fe:7f:55:47:bd:07:4b:27:76:b9:9b: 68:27:35:31:90:ec:cd:7e:c7:e0:08:f0:7f:53:de:00:78:e8: f9:a5:b5:1c:b3:3d:dc:a9:9e:21:5e:57:9e:c4:82:95:66:50: 05:90:ba:f3:64:9d:b0:1b:14:f5:a4:2e:a0:ee:14:ca:d1:eb: 9e:ab:62:fe:53:9c:91:f5:1a:4a:10:47:6a:d7:f0:e7:66:cb: cb:87:a3:f0:4e:0c:04:4b:33:ca:55:3d:0a:44:47:93:a6:18: e9:d2:e4:45:be:a4:ca:59:b3:0f:e3:43:dd:64:7f:b7:8b:d9: a3:94:9f:a2:c7:0c:d2:f6:67:07:b8:23:c4:e3:7d:3f:0a:c4: f2:ec:63:0b:0f:5e:43:06:5b:fe:cb:21:65:55:02:f0:56:46: 07:5c:e2:fb:94:34:2f:52:c1:87:84:f3:fc:23:49:45:63:7c: 34:15:ba:f4:71:37:8b:63:17:f1:59:d0:8b:82:9c:22:24:15: c0:79:86:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTTAL45O5+em4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2Q4NjI2MmEtMzY5YS00OTQxLWI3MTgtNmJjNDAzODkyYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/SUd/tWan2rdpt50ST3T0Z63xsne1uInz7T XZvKh2Hj96ZAUYnTWPtacGRR7y1sk/RRcDk0e1dBiZBeJRImRIuv7Ou1IJnvV8Ct AyE1Y7vRoAVENhEfymkPBatRZ256k+hcQplrZ59LGTMEGRBHlRQskRDoRX7Q9Mo+ dxklOa/dtr2B4WcGzcLBFvfLGEQ3ZLx1oVXuvPPm8oUAGx+LLU9IfJMh8vgO6Wmq WJqO1nnQL4DEhqFOP+cct77U/BnEj1Gxk4AnRifjDRHvq1GhuA0ZjHqITNXbIXJB aeqiiAQTF8Y7cJUTCAvugF3Tndh3FAc2K/FE1H08oPBdsa0tyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzPe3ceRdiAylYkymtTP2RlOnEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmM5OTAyZWYtNmQzMy0z ZTM0LWFlM2YtNDNiN2EwMmMxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDoFeP8UvporuVTT79f86doInt1KOXIykzVYUwNYpWVKQs9X2KYYp5/ +9HVXC0QznloW7sVBN/sB1QNmaH+f1VHvQdLJ3a5m2gnNTGQ7M1+x+AI8H9T3gB4 6PmltRyzPdypniFeV57EgpVmUAWQuvNknbAbFPWkLqDuFMrR656rYv5TnJH1GkoQ R2rX8Odmy8uHo/BODARLM8pVPQpER5OmGOnS5EW+pMpZsw/jQ91kf7eL2aOUn6LH DNL2Zwe4I8TjfT8KxPLsYwsPXkMGW/7LIWVVAvBWRgdc4vuUNC9SwYeE8/wjSUVj fDQVuvRxN4tjF/FZ0IuCnCIkFcB5hoE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:37 2025 by rpki-client