$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa File: d89b7b74-799b-350f-8511-b393fb6156e2.roa (raw, json) Hash identifier: dZEyG02DzKb3zj2/7gUwHswvVKND9g1C6e+o8F65zeA= Subject key identifier: 47:DE:00:F7:EC:48:84:C5:A4:23:76:52:E0:BC:88:9A:67:6F:85:6D Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AECC134AE51DE4840D2F39200 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 170.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:34:ae:51:de:48:40:d2:f3:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1148f395-b98e-415e-91cb-5143aa48cb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:db:12:c0:fc:4c:aa:f8:a1:f3:17:8f:15:8c: a7:86:f1:77:16:70:a1:f3:b4:a6:4a:1d:c9:fe:c6: b6:06:4e:c5:03:fd:e4:78:c4:f0:59:97:ea:83:df: c9:a2:bb:9c:31:69:2e:56:e2:b6:a2:56:24:93:12: f4:5a:cf:30:60:77:76:20:87:ea:7c:8d:33:a1:74: 8b:a9:aa:6a:a8:81:1b:ba:5c:2c:87:4c:08:07:74: a5:21:a9:1a:15:5a:50:ec:9f:86:8c:19:7d:22:4a: 75:e7:64:7b:2a:08:cb:b1:35:4e:a8:91:b5:59:fb: 60:18:4f:29:ce:90:80:4c:4c:87:6b:41:be:ea:d2: a5:25:65:22:cb:a1:2b:6e:63:fe:c5:bb:f5:e6:9e: 10:ae:d3:f7:bb:0f:d1:b4:66:16:c6:44:f1:55:0a: ac:63:6d:c0:7c:bd:6a:20:01:6b:8d:e7:c0:1c:fa: 08:aa:ac:1a:03:9c:6f:a4:3e:2c:5a:2d:3a:96:95: 9e:c6:16:2d:0a:48:ec:b1:2d:ad:c6:ea:30:71:53: 09:bf:06:d2:31:86:3a:09:52:e4:1a:65:7f:b6:0c: 6a:22:53:4e:1f:0d:fb:54:62:e5:8b:fc:e1:ee:e5: 56:e2:83:ed:6d:52:24:4c:a9:0d:c4:0f:cc:4a:35: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DE:00:F7:EC:48:84:C5:A4:23:76:52:E0:BC:88:9A:67:6F:85:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d89b7b74-799b-350f-8511-b393fb6156e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b2:21:7a:b4:3f:51:30:4c:37:bf:55:ae:14:84:fb:44:80: 14:59:c0:e2:f5:3a:1b:a1:be:b8:59:3e:ee:3d:6f:8a:26:72: fc:f7:cd:15:92:0a:b5:90:41:25:55:0f:e2:5a:7a:60:76:24: ac:28:ea:c1:b3:7b:09:2e:f9:ec:1e:1f:05:66:c4:56:66:16: c7:19:90:3b:d1:c9:76:01:b4:36:97:02:1e:0c:30:83:ea:ab: c8:f1:3e:87:1a:dc:56:f2:37:99:b5:58:9c:92:53:54:f3:23: 75:a4:94:19:52:3b:6a:eb:0c:dd:1b:6a:b2:6b:0e:1d:c7:26: 77:77:ef:d2:ab:b3:32:51:79:ac:bb:3e:44:eb:dd:30:bf:61: 38:bc:aa:89:7e:be:11:6d:0a:c2:6c:0e:68:47:9e:ab:7a:c7: 27:e6:b9:3a:5d:0a:91:68:9f:c8:45:44:d7:8a:9b:89:a2:82: 76:1c:f6:60:e9:0e:81:52:0c:92:4d:ef:98:84:40:ed:c5:f0: 87:2b:f0:59:54:85:6c:2b:01:03:b8:7b:79:bd:a5:fb:f8:c7: 8c:df:cb:11:a6:2a:60:ee:43:fa:28:ca:da:ce:a8:0b:cc:4e: 59:3f:2e:65:f8:b7:ef:6d:c6:c2:5d:f5:e7:64:89:d9:9c:3a: 24:82:99:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTSuUd5IQNLzkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTE0OGYzOTUtYjk4ZS00MTVlLTkxY2ItNTE0M2FhNDhjYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdsSwPxMqvih8xePFYynhvF3FnCh87SmSh3J /sa2Bk7FA/3keMTwWZfqg9/JorucMWkuVuK2olYkkxL0Ws8wYHd2IIfqfI0zoXSL qapqqIEbulwsh0wIB3SlIakaFVpQ7J+GjBl9Ikp152R7KgjLsTVOqJG1WftgGE8p zpCATEyHa0G+6tKlJWUiy6ErbmP+xbv15p4QrtP3uw/RtGYWxkTxVQqsY23AfL1q IAFrjefAHPoIqqwaA5xvpD4sWi06lpWexhYtCkjssS2txuowcVMJvwbSMYY6CVLk GmV/tgxqIlNOHw37VGLli/zh7uVW4oPtbVIkTKkNxA/MSjUxcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfeAPfsSITFpCN2UuC8iJpnb4VtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg5YjdiNzQtNzk5Yi0z NTBmLTg1MTEtYjM5M2ZiNjE1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiyIXq0P1EwTDe/Va4UhPtEgBRZwOL1OhuhvrhZPu49b4omcvz3zRWS CrWQQSVVD+JaemB2JKwo6sGzewku+eweHwVmxFZmFscZkDvRyXYBtDaXAh4MMIPq q8jxPoca3FbyN5m1WJySU1TzI3WklBlSO2rrDN0barJrDh3HJnd379KrszJReay7 PkTr3TC/YTi8qol+vhFtCsJsDmhHnqt6xyfmuTpdCpFon8hFRNeKm4mignYc9mDp DoFSDJJN75iEQO3F8Icr8FlUhWwrAQO4e3m9pfv4x4zfyxGmKmDuQ/ooytrOqAvM Tlk/LmX4t+9txsJd9edkidmcOiSCme4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:34 2025 by rpki-client