$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9759123c-ea49-3d9e-ba50-b8862cf11566.roa File: 9759123c-ea49-3d9e-ba50-b8862cf11566.roa (raw, json) Hash identifier: ijc1bEMA5OEXSyMVwsO3MO886w3lJmCxwdBQpiDVobY= Subject key identifier: 48:7F:D8:AF:B9:6C:45:C4:B3:14:1B:8B:7B:33:18:81:C6:49:A2:E8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849E0BF8D2D7450F24C43A96DC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9759123c-ea49-3d9e-ba50-b8862cf11566.roa Signing time: Sat 17 May 2025 01:00:47 +0000 ROA not before: Sat 17 May 2025 01:00:47 +0000 ROA not after: Fri 15 Aug 2025 01:00:47 +0000 asID: 8987 IP address blocks: 170.85.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:bf:8d:2d:74:50:f2:4c:43:a9:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: May 17 01:00:47 2025 GMT Not After : Aug 15 01:00:47 2025 GMT Subject: CN=55c09587-309c-45ca-806f-3c5690e18823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:83:ed:bc:16:b3:26:49:71:fa:ad:1b:10:68: 0c:73:bf:20:10:9d:df:0b:46:37:a9:17:cf:4d:cd: 9b:1f:2d:28:41:82:56:03:df:af:ce:0a:9a:91:81: b3:fb:55:52:fd:67:08:e0:71:45:21:17:5c:fe:01: 49:e3:72:80:75:79:da:13:e9:17:5b:fc:39:a2:1a: 93:b7:9d:42:b4:2e:f1:14:76:7a:a4:a6:e8:2b:c8: 9a:4d:ef:4d:2b:73:9b:92:a9:62:aa:34:16:94:a4: b1:17:8c:04:23:eb:51:06:65:d4:96:ec:c8:11:43: c3:56:9c:23:e3:7d:e2:1b:4c:1d:cc:f8:29:23:c4: ee:34:a2:fd:c5:9e:04:f5:e7:bc:d2:a9:a3:b7:db: 60:53:c5:07:3d:b7:f0:b5:97:4e:19:63:46:78:56: 85:2f:b6:f3:e8:ac:b1:69:03:ce:50:bc:bc:e6:9d: 51:f6:80:7b:0c:66:53:5e:5b:6d:32:09:5f:fb:ac: 6b:8d:ea:72:d7:7b:03:3e:b4:a8:9a:38:e9:26:f2: d9:b3:4c:9b:61:b6:d0:02:54:69:87:6b:5a:c3:94: 16:1f:8b:b3:86:f4:09:6d:0f:49:ff:37:e0:d9:52: 65:1b:b3:eb:07:b8:18:54:78:ab:b3:a3:41:71:a5: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:D8:AF:B9:6C:45:C4:B3:14:1B:8B:7B:33:18:81:C6:49:A2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9759123c-ea49-3d9e-ba50-b8862cf11566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:59:41:23:e3:b6:3f:95:a8:2c:c2:6f:85:36:43:4f:49:70: 97:5c:52:49:b2:e3:27:2c:95:47:db:aa:f2:b2:fe:58:2e:0d: 58:36:ba:f7:f7:5f:79:92:ad:14:1e:12:bb:2d:fc:23:51:d8: ea:c5:f6:f3:7c:47:b4:0c:bb:6f:8f:2e:c8:ac:a3:bb:bc:dd: bd:51:21:aa:99:e3:54:36:6d:17:0b:3c:96:67:66:fe:80:39: 88:e8:66:a8:b8:90:c1:1a:45:c0:73:db:02:1d:92:c0:2c:8f: ea:ea:23:22:d8:fd:dc:e9:8c:77:96:12:d9:32:11:58:ae:89: 24:1e:e3:41:c2:6f:fa:f4:c9:61:84:6d:3f:8c:aa:48:c9:1e: 0a:79:30:c8:68:45:e0:6c:01:0d:f6:4d:4f:8c:29:a6:54:99: af:2c:97:3d:ac:b5:91:d9:f8:47:c3:f9:a9:48:f8:ba:b9:7b: d5:0b:1d:4f:ad:be:47:88:35:75:83:67:03:91:58:b9:96:61: 3f:a4:23:5f:f7:b8:7b:7f:c3:e5:0d:75:8a:43:fd:b1:85:b9: 79:b3:33:37:2b:b1:b4:02:78:e6:6e:28:0c:4e:71:59:17:9b: 1c:c3:f3:32:a9:ff:c5:5b:85:61:58:df:15:a0:55:43:27:33: 63:99:4b:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEngv40tdFDyTEOpbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk NTVjMDk1ODctMzA5Yy00NWNhLTgwNmYtM2M1NjkwZTE4ODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoPtvBazJklx+q0bEGgMc78gEJ3fC0Y3qRfP Tc2bHy0oQYJWA9+vzgqakYGz+1VS/WcI4HFFIRdc/gFJ43KAdXnaE+kXW/w5ohqT t51CtC7xFHZ6pKboK8iaTe9NK3ObkqliqjQWlKSxF4wEI+tRBmXUluzIEUPDVpwj 433iG0wdzPgpI8TuNKL9xZ4E9ee80qmjt9tgU8UHPbfwtZdOGWNGeFaFL7bz6Kyx aQPOULy85p1R9oB7DGZTXlttMglf+6xrjepy13sDPrSomjjpJvLZs0ybYbbQAlRp h2taw5QWH4uzhvQJbQ9J/zfg2VJlG7PrB7gYVHirs6NBcaXTrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh/2K+5bEXEsxQbi3szGIHGSaLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTc1OTEyM2MtZWE0OS0z ZDllLWJhNTAtYjg4NjJjZjExNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFZQSPjtj+VqCzCb4U2Q09JcJdcUkmy4ycslUfbqvKy/lguDVg2uvf3 X3mSrRQeErst/CNR2OrF9vN8R7QMu2+PLsiso7u83b1RIaqZ41Q2bRcLPJZnZv6A OYjoZqi4kMEaRcBz2wIdksAsj+rqIyLY/dzpjHeWEtkyEViuiSQe40HCb/r0yWGE bT+MqkjJHgp5MMhoReBsAQ32TU+MKaZUma8slz2stZHZ+EfD+alI+Lq5e9ULHU+t vkeINXWDZwORWLmWYT+kI1/3uHt/w+UNdYpD/bGFuXmzMzcrsbQCeOZuKAxOcVkX mxzD8zKp/8VbhWFY3xWgVUMnM2OZS6w= -----END CERTIFICATE-----Generated at Tue Jul 1 04:24:22 2025 by rpki-client