$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb57b309-3d22-310a-8072-71950ff35f3e.roa File: cb57b309-3d22-310a-8072-71950ff35f3e.roa (raw, json) Hash identifier: ANOpMLee5j1OfhTrW2Ab8O8UkhyyGeSRuu9rp8iYVz4= Subject key identifier: 9F:04:76:43:97:D4:F5:06:AE:B1:56:C2:8C:CB:6B:D2:02:9E:A8:E2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AECC13428658C852C4131D7A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb57b309-3d22-310a-8072-71950ff35f3e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 170.85.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:34:28:65:8c:85:2c:41:31:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d1a53887-2a3b-4b5f-ac99-69d791937fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:d9:ee:de:d2:7f:4f:95:0c:a3:84:a4:b5: ae:d7:b4:e0:0c:47:21:8c:df:29:87:e7:c5:f1:12: 2b:fb:cb:66:85:9b:09:87:f2:2c:95:5c:bc:c6:43: d5:ff:9a:c9:33:cc:f8:a8:e4:c5:7d:e2:30:58:d9: 55:e5:e7:bf:4b:db:e3:39:dc:e8:96:26:09:f5:e7: c8:77:95:da:8b:5a:0b:02:19:e8:b1:67:62:73:8d: c4:83:b8:85:a6:31:e2:e2:78:d6:ba:54:58:8f:85: 85:59:bb:93:97:6a:43:39:7e:fd:fb:6b:fa:92:3f: 9c:3f:60:d8:93:71:b8:0c:75:32:b4:ac:5b:dd:2a: e1:d3:ab:b7:f8:6b:0e:ab:fd:e0:5b:a2:3c:57:4c: 21:0f:97:0b:56:ca:af:39:78:59:db:43:db:bd:ea: 17:c9:3a:a6:0d:f7:d7:9e:f2:ac:c5:01:96:e0:6a: a8:a9:94:78:20:18:fb:14:ca:9f:6f:1e:05:72:f0: 5c:1f:5e:07:3e:5a:83:8c:b4:be:8e:a6:de:40:da: e9:5a:fc:8d:c6:d1:5c:4a:b5:1e:b2:ec:f0:85:a2: 01:6c:6c:c9:cd:e3:f2:25:d1:0d:c7:9d:e5:f1:6e: 54:75:80:94:93:dc:22:1d:72:77:13:2b:69:88:34: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:04:76:43:97:D4:F5:06:AE:B1:56:C2:8C:CB:6B:D2:02:9E:A8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb57b309-3d22-310a-8072-71950ff35f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2e:9a:dc:c6:37:16:3e:f1:01:19:af:fd:b6:e5:30:d4:38: ac:37:2c:07:fe:ff:4b:7d:03:e0:88:91:64:f6:ab:62:db:32: 77:c1:2b:05:0f:06:bd:98:a8:99:0c:46:f9:7d:07:e0:e1:a8: 66:00:28:33:12:e9:65:10:0f:0d:64:ee:91:6b:aa:1f:d4:2e: 0e:be:43:0c:45:4f:27:16:15:5a:af:a0:b7:8a:ca:7c:aa:43: c3:9f:8d:b5:7f:2c:46:2d:1a:f1:bf:e1:e4:2c:71:09:8f:b2: 20:ed:66:3a:0f:01:7e:65:e7:e1:67:d9:b1:d7:ed:49:c7:df: 46:14:7b:de:0d:d3:ac:00:e0:7c:65:2c:ae:11:a3:c9:0c:56: b9:d8:8c:16:50:4c:60:5e:65:6c:70:81:55:b2:6a:1f:c4:39: b1:9d:95:06:05:80:1c:98:31:2e:a0:6e:1e:38:87:cc:09:74: 58:89:f9:03:ac:10:94:0f:e4:88:89:e6:34:50:ce:fc:45:f3: c8:cc:c3:88:2a:a9:4a:ab:f8:45:63:89:72:f2:ee:95:1c:21: a3:e8:b5:03:a6:76:ee:f9:23:87:a4:da:70:e5:93:66:52:68: 4c:b7:2f:24:19:2d:d9:a0:c7:77:26:6b:18:e2:dc:26:de:11: 82:ba:48:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTQoZYyFLEEx16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDFhNTM4ODctMmEzYi00YjVmLWFjOTktNjlkNzkxOTM3ZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM7Z7t7Sf0+VDKOEpLWu17TgDEchjN8ph+fF 8RIr+8tmhZsJh/IslVy8xkPV/5rJM8z4qOTFfeIwWNlV5ee/S9vjOdzoliYJ9efI d5Xai1oLAhnosWdic43Eg7iFpjHi4njWulRYj4WFWbuTl2pDOX79+2v6kj+cP2DY k3G4DHUytKxb3Srh06u3+GsOq/3gW6I8V0whD5cLVsqvOXhZ20PbveoXyTqmDffX nvKsxQGW4GqoqZR4IBj7FMqfbx4FcvBcH14HPlqDjLS+jqbeQNrpWvyNxtFcSrUe suzwhaIBbGzJzePyJdENx53l8W5UdYCUk9wiHXJ3EytpiDQpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8EdkOX1PUGrrFWwozLa9ICnqjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2I1N2IzMDktM2QyMi0z MTBhLTgwNzItNzE5NTBmZjM1ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8umtzGNxY+8QEZr/225TDUOKw3LAf+/0t9A+CIkWT2q2LbMnfBKwUP Br2YqJkMRvl9B+DhqGYAKDMS6WUQDw1k7pFrqh/ULg6+QwxFTycWFVqvoLeKynyq Q8OfjbV/LEYtGvG/4eQscQmPsiDtZjoPAX5l5+Fn2bHX7UnH30YUe94N06wA4Hxl LK4Ro8kMVrnYjBZQTGBeZWxwgVWyah/EObGdlQYFgByYMS6gbh44h8wJdFiJ+QOs EJQP5IiJ5jRQzvxF88jMw4gqqUqr+EVjiXLy7pUcIaPotQOmdu75I4ek2nDlk2ZS aEy3LyQZLdmgx3cmaxji3CbeEYK6SMM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:49 2025 by rpki-client