$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4184f250-dc03-3ec5-98c1-91d853017350.roa File: 4184f250-dc03-3ec5-98c1-91d853017350.roa (raw, json) Hash identifier: bbJRK4hvCsds5+nG0Sr9r22+TcJHLDqGOc/0RBVO2sw= Subject key identifier: 8D:C6:40:CB:93:45:93:A2:76:95:E2:61:3B:42:6A:26:E6:98:14:56 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC6A7901F8A8E426563A27660 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4184f250-dc03-3ec5-98c1-91d853017350.roa Signing time: Thu 07 Aug 2025 09:28:26 +0000 ROA not before: Thu 07 Aug 2025 09:28:26 +0000 ROA not after: Wed 05 Nov 2025 10:28:26 +0000 asID: 22616 IP address blocks: 170.85.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c6:a7:90:1f:8a:8e:42:65:63:a2:76:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 7 09:28:26 2025 GMT Not After : Nov 5 10:28:26 2025 GMT Subject: CN=697069cb-3194-48f8-a577-edd7c70fe885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:09:93:1e:3b:c2:92:be:6b:57:47:82:d0:c5: 84:ba:de:09:b5:8c:45:eb:be:c9:d5:e9:98:4d:9d: 67:3c:5e:71:10:3a:cd:7c:3b:46:56:4f:c0:00:19: 44:e1:54:f1:cb:c5:02:9f:61:bb:89:41:7c:10:19: 27:37:96:a3:ce:03:b2:f3:ef:83:65:c8:56:17:f9: 2e:d6:88:85:97:33:21:e8:2e:a0:aa:09:ab:24:6b: 55:27:3f:51:cd:98:f7:2b:c7:f9:b4:46:b3:b4:98: bb:e9:0d:c8:fd:58:9f:53:4a:df:8e:3f:47:4e:da: 36:31:e3:fb:07:18:fa:50:6b:ac:bf:61:27:bf:92: 2f:76:0a:8b:2a:24:82:80:54:3c:71:53:c5:04:e6: 17:66:2c:4b:ec:e0:06:7e:6a:5a:23:5e:f7:43:ac: 23:37:73:75:0e:62:51:e4:ff:38:fe:dd:00:c4:36: a2:ea:51:dd:94:18:15:5a:c5:f2:73:df:65:b6:ff: 64:32:4f:59:72:d5:5f:27:3c:66:0b:86:36:51:0a: 29:5d:c6:e2:31:b0:6d:16:ad:44:c3:e4:48:36:b6: c3:0b:8d:cf:dc:5a:4a:fc:a1:4a:96:35:fe:fc:ba: 30:7c:da:02:22:4b:40:83:85:10:6c:ec:20:2f:5b: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C6:40:CB:93:45:93:A2:76:95:E2:61:3B:42:6A:26:E6:98:14:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4184f250-dc03-3ec5-98c1-91d853017350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:54:51:35:44:7c:99:cb:f6:8b:54:02:9d:b4:e8:59:fd:b6: 8e:0f:2d:a4:f6:1f:63:a0:65:41:39:c2:2b:4f:53:1c:bd:44: 1c:3f:76:bd:68:99:ee:bc:de:28:a9:4c:48:e1:d9:16:62:62: 3b:22:21:10:e3:1b:15:ce:c2:7e:2d:9e:c9:c0:eb:42:51:15: 1d:2b:06:cb:5d:11:3b:7a:74:17:6a:2e:65:9c:58:46:c3:c7: 95:b5:59:11:4c:75:64:e7:21:43:83:13:a9:65:6e:bd:aa:7c: be:51:47:14:93:bf:7a:f0:6a:a5:57:7d:a8:98:b3:f2:a5:c8: ad:b5:a5:e3:f6:ea:df:92:ad:f8:36:d6:d2:52:4d:07:b3:8b: ba:c9:ca:94:ce:30:af:fb:ee:79:2b:ad:55:e0:59:6f:c2:41: 71:94:0f:25:e6:f4:49:7a:f7:ed:5d:49:7a:95:cc:26:e4:77: 00:d3:4f:1f:ce:c5:3d:7c:aa:5c:0e:b4:75:e0:2d:84:44:f1: 73:b8:ee:d9:63:60:84:45:b4:39:92:1b:a2:b7:c5:de:93:8a: 75:af:06:49:77:40:6a:6b:e3:d1:09:4a:f9:0d:4a:2d:a0:d8: 3e:94:c8:69:49:69:b1:a2:c1:a2:b8:91:d6:e5:c0:aa:b3:1b: e1:50:63:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErGp5Afio5CZWOidmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwNzA5MjgyNloXDTI1MTEwNTEwMjgyNlowLzEtMCsGA1UEAxMk Njk3MDY5Y2ItMzE5NC00OGY4LWE1NzctZWRkN2M3MGZlODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwmTHjvCkr5rV0eC0MWEut4JtYxF677J1emY TZ1nPF5xEDrNfDtGVk/AABlE4VTxy8UCn2G7iUF8EBknN5ajzgOy8++DZchWF/ku 1oiFlzMh6C6gqgmrJGtVJz9RzZj3K8f5tEaztJi76Q3I/VifU0rfjj9HTto2MeP7 Bxj6UGusv2Env5IvdgqLKiSCgFQ8cVPFBOYXZixL7OAGfmpaI173Q6wjN3N1DmJR 5P84/t0AxDai6lHdlBgVWsXyc99ltv9kMk9ZctVfJzxmC4Y2UQopXcbiMbBtFq1E w+RINrbDC43P3FpK/KFKljX+/LowfNoCIktAg4UQbOwgL1t3HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3GQMuTRZOidpXiYTtCaibmmBRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDE4NGYyNTAtZGMwMy0z ZWM1LTk4YzEtOTFkODUzMDE3MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZUUTVEfJnL9otUAp206Fn9to4PLaT2H2OgZUE5witPUxy9RBw/dr1o me683iipTEjh2RZiYjsiIRDjGxXOwn4tnsnA60JRFR0rBstdETt6dBdqLmWcWEbD x5W1WRFMdWTnIUODE6llbr2qfL5RRxSTv3rwaqVXfaiYs/KlyK21peP26t+Srfg2 1tJSTQezi7rJypTOMK/77nkrrVXgWW/CQXGUDyXm9El69+1dSXqVzCbkdwDTTx/O xT18qlwOtHXgLYRE8XO47tljYIRFtDmSG6K3xd6TinWvBkl3QGpr49EJSvkNSi2g 2D6UyGlJabGiwaK4kdblwKqzG+FQY7U= -----END CERTIFICATE-----Generated at Sat Aug 23 16:32:25 2025 by rpki-client