$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa File: b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa (raw, json) Hash identifier: /3pa0sV3hMAcARqpbf4RGrXmAkhn3MzslBeMUueAXPs= Subject key identifier: 16:C2:E0:FE:3C:CA:97:AB:8F:CD:2C:E9:8B:80:CD:C4:87:B9:BD:E9 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC9DBAF6B2DE3F7EAD46D5E80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 170.85.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:af:6b:2d:e3:f7:ea:d4:6d:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=a17e0c94-5a34-4268-ab4e-8fe1d218433a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:c0:12:c9:ee:b1:34:d1:6b:ce:06:5c:9a: 61:47:cd:79:d2:c1:ea:55:db:4d:f2:ac:e5:90:53: 23:7a:eb:4e:06:93:8a:ce:c0:ee:29:45:f9:5c:c2: ca:8d:bf:79:8b:2f:ef:54:ba:57:cf:b7:14:2d:7f: 83:65:c0:5d:25:f1:8b:2b:a2:48:9c:0b:66:a1:7c: c2:c3:20:11:65:c2:df:6c:db:3f:5a:3b:8c:61:02: 93:56:be:40:13:c3:13:36:80:c6:3f:20:39:d8:9f: ad:fb:62:3a:cb:83:fb:29:55:4e:77:24:c0:36:f4: 47:a5:22:bf:51:d5:08:ce:89:97:40:42:73:8a:75: 58:1c:68:5b:f2:91:7a:c8:bc:b3:2c:67:2b:49:22: 45:98:6b:42:1d:d3:6c:46:1a:17:aa:4c:d6:08:a7: c2:de:55:ba:87:56:16:d2:5d:d4:65:ea:d1:f0:4a: 13:d3:00:81:cb:a7:39:29:06:4b:f1:e0:ef:d7:f6: 75:ea:4a:86:04:04:7c:1b:38:5e:75:67:13:b4:db: 9e:83:56:9a:57:e1:07:c0:f2:e8:f1:0e:de:c5:ee: 7f:23:9c:c1:2e:29:a5:2b:ab:8f:5c:65:b9:df:6a: 0b:43:96:ea:73:04:3a:72:b2:a4:b0:7e:8b:7e:7a: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:E0:FE:3C:CA:97:AB:8F:CD:2C:E9:8B:80:CD:C4:87:B9:BD:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:94:0a:ba:55:19:74:74:c5:5f:3e:48:87:5e:d3:28:f2:c2: 32:0e:ec:16:e9:30:fb:12:fa:3a:f3:bd:55:92:8b:f9:20:c3: c2:31:5e:2a:e7:a5:dc:d9:01:16:d8:65:b2:ad:b7:6d:17:f0: fb:7f:3a:49:0b:38:af:04:c3:73:82:1b:99:f0:17:c1:86:b7: 36:51:6d:19:1d:b8:f1:d0:47:ab:be:4a:8c:ec:71:42:70:5a: 2e:8f:9f:25:3d:6a:f6:1c:9a:57:43:04:05:8d:6e:7e:d2:4a: db:5d:9f:ea:6d:f4:e9:02:96:1d:6b:50:7c:58:dd:e5:d6:4a: ee:7c:aa:34:c2:19:dc:cf:1e:28:99:3b:eb:0c:17:ef:59:fc: c7:e7:5d:ce:d9:a6:f0:b5:16:10:61:b2:3d:be:d1:d3:bb:4f: 85:08:00:c0:21:cb:a3:04:47:35:f3:d0:f0:4e:f4:e5:82:71: cb:e9:a3:37:af:62:78:25:8a:b5:6c:7b:21:83:48:db:3d:da: 3e:48:e3:bd:f9:6b:c3:cd:03:8a:70:ef:a3:ee:44:9e:01:64: 2b:cf:b2:34:d8:60:bd:b3:1d:80:05:17:1a:6f:89:3e:e8:46: db:24:26:de:81:c6:03:00:e5:83:13:0b:2e:c3:9b:27:f1:08: c8:4a:98:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ269rLeP36tRtXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YTE3ZTBjOTQtNWEzNC00MjY4LWFiNGUtOGZlMWQyMTg0MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAvAEsnusTTRa84GXJphR8150sHqVdtN8qzl kFMjeutOBpOKzsDuKUX5XMLKjb95iy/vVLpXz7cULX+DZcBdJfGLK6JInAtmoXzC wyARZcLfbNs/WjuMYQKTVr5AE8MTNoDGPyA52J+t+2I6y4P7KVVOdyTANvRHpSK/ UdUIzomXQEJzinVYHGhb8pF6yLyzLGcrSSJFmGtCHdNsRhoXqkzWCKfC3lW6h1YW 0l3UZerR8EoT0wCBy6c5KQZL8eDv1/Z16kqGBAR8GzhedWcTtNueg1aaV+EHwPLo 8Q7exe5/I5zBLimlK6uPXGW532oLQ5bqcwQ6crKksH6LfnpuOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbC4P48yperj80s6YuAzcSHub3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjFkY2MzYzgtNWYzMS0z ZmZjLTk5OTAtYTRjYjhlYzkxZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKUCrpVGXR0xV8+SIde0yjywjIO7BbpMPsS+jrzvVWSi/kgw8IxXirn pdzZARbYZbKtt20X8Pt/OkkLOK8Ew3OCG5nwF8GGtzZRbRkduPHQR6u+SozscUJw Wi6PnyU9avYcmldDBAWNbn7SSttdn+pt9OkClh1rUHxY3eXWSu58qjTCGdzPHiiZ O+sMF+9Z/MfnXc7ZpvC1FhBhsj2+0dO7T4UIAMAhy6MERzXz0PBO9OWCccvpozev YnglirVseyGDSNs92j5I4735a8PNA4pw76PuRJ4BZCvPsjTYYL2zHYAFFxpviT7o RtskJt6BxgMA5YMTCy7DmyfxCMhKmO8= -----END CERTIFICATE-----Generated at Sat Aug 23 06:47:30 2025 by rpki-client