$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/64fe19d2-20e6-3b19-a19a-8e41ad881ef4.roa File: 64fe19d2-20e6-3b19-a19a-8e41ad881ef4.roa (raw, json) Hash identifier: fGiRmNvm5R+WdjhFoYK8h3rzNNYciDNnW9ej+sS/IHg= Subject key identifier: B3:E6:74:E6:21:3F:8E:F4:7E:22:AC:FD:BC:07:82:37:71:A8:F5:57 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AECC1343ADB4056687601D580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/64fe19d2-20e6-3b19-a19a-8e41ad881ef4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 170.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:34:3a:db:40:56:68:76:01:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=41df3f9e-227d-4c1d-a49e-0c663592ecdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:7b:3c:55:d5:26:7d:44:5d:88:3c:78:2d: f6:11:73:13:eb:f9:b3:32:e0:fd:41:77:ec:82:b2: 53:af:a8:ae:a6:ce:60:81:6b:7b:c2:77:ed:78:11: 3f:b4:e3:70:cf:fa:45:1b:b3:c0:83:a9:90:44:14: 4e:32:df:dc:0b:00:e7:4a:73:74:93:22:3d:f5:91: 0b:e5:a1:a8:73:bc:d3:1a:56:d8:a2:4a:00:ab:ee: 92:a6:90:c4:13:10:b5:29:72:78:e5:45:b6:a2:93: b5:de:28:ec:f2:3e:84:dd:88:00:50:e5:c1:7e:07: e7:d7:9f:26:2e:67:d7:e6:39:39:8d:83:c7:fd:ac: e7:4c:00:c9:3b:c8:8a:b3:f6:72:aa:8e:a6:0f:ad: 3e:d5:e8:65:39:89:43:2b:a1:7d:27:ec:6d:b7:3e: 09:68:84:8d:5a:77:18:c6:ed:f4:51:be:8b:b8:59: c1:b2:c4:fe:44:e4:94:7c:70:cb:ca:3c:df:eb:26: 92:4b:0b:21:80:5a:72:d5:c4:ad:fc:dd:69:9b:20: 60:56:10:4d:94:5f:27:78:fc:1c:a9:ba:40:3a:69: da:c4:2c:e5:bf:b4:5d:43:10:e4:9f:93:e1:fc:19: db:50:b4:f5:0c:d7:de:29:d2:eb:93:9e:a3:1b:c8: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E6:74:E6:21:3F:8E:F4:7E:22:AC:FD:BC:07:82:37:71:A8:F5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/64fe19d2-20e6-3b19-a19a-8e41ad881ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:92:86:fc:0c:0c:61:5d:f3:f7:28:f6:32:ff:64:1f:4e:c4: 7a:f5:f8:0a:71:3d:62:d3:c5:b2:66:00:a2:84:a4:b1:c0:15: 55:21:0f:1b:c3:70:c6:af:c1:1b:c9:1f:3c:9d:8a:c0:a3:3a: 1e:15:0a:da:7c:bf:d0:71:e7:e4:42:e2:91:46:df:cd:ef:5a: 58:6d:10:e0:94:59:a3:52:9e:29:bc:bf:6b:40:3d:44:70:f0: 63:e7:cc:fe:9e:a2:55:bd:6a:8d:9c:5f:b0:d3:27:44:8d:92: ed:84:e4:0e:b3:7d:b2:96:72:06:0c:2b:50:6c:41:a1:48:4e: 22:ff:a9:ca:8a:92:8a:b5:79:c8:76:aa:d7:02:bd:98:2d:ae: 04:53:54:f1:0b:3c:77:ab:25:b5:5e:f4:f5:a5:89:7e:92:61: d9:b1:7a:0f:c0:dc:91:91:d4:3e:2f:15:7b:65:c3:52:2f:69: 1f:11:d9:3b:6f:0f:67:a8:11:01:d3:5b:3f:fa:47:f4:2b:f8: f4:ea:f7:ac:8d:80:9c:81:ac:8e:0d:45:2f:ed:8e:fa:23:6c: 66:15:be:1f:b1:13:7e:3a:53:b1:85:3b:da:9f:4e:ae:85:22: a3:7b:3b:96:a9:fa:12:39:74:92:65:32:91:a2:54:1e:10:36: f1:96:bf:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTQ620BWaHYB1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDFkZjNmOWUtMjI3ZC00YzFkLWE0OWUtMGM2NjM1OTJlY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7x7PFXVJn1EXYg8eC32EXMT6/mzMuD9QXfs grJTr6iups5ggWt7wnfteBE/tONwz/pFG7PAg6mQRBROMt/cCwDnSnN0kyI99ZEL 5aGoc7zTGlbYokoAq+6SppDEExC1KXJ45UW2opO13ijs8j6E3YgAUOXBfgfn158m LmfX5jk5jYPH/aznTADJO8iKs/Zyqo6mD60+1ehlOYlDK6F9J+xttz4JaISNWncY xu30Ub6LuFnBssT+ROSUfHDLyjzf6yaSSwshgFpy1cSt/N1pmyBgVhBNlF8nePwc qbpAOmnaxCzlv7RdQxDkn5Ph/BnbULT1DNfeKdLrk56jG8hoTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPmdOYhP470fiKs/bwHgjdxqPVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjRmZTE5ZDItMjBlNi0z YjE5LWExOWEtOGU0MWFkODgxZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmShvwMDGFd8/co9jL/ZB9OxHr1+ApxPWLTxbJmAKKEpLHAFVUhDxvD cMavwRvJHzydisCjOh4VCtp8v9Bx5+RC4pFG383vWlhtEOCUWaNSnim8v2tAPURw 8GPnzP6eolW9ao2cX7DTJ0SNku2E5A6zfbKWcgYMK1BsQaFITiL/qcqKkoq1ech2 qtcCvZgtrgRTVPELPHerJbVe9PWliX6SYdmxeg/A3JGR1D4vFXtlw1IvaR8R2Ttv D2eoEQHTWz/6R/Qr+PTq96yNgJyBrI4NRS/tjvojbGYVvh+xE346U7GFO9qfTq6F IqN7O5ap+hI5dJJlMpGiVB4QNvGWv7A= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:32 2025 by rpki-client