$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa File: ec1b8336-f451-3652-aefc-ff559feaa568.roa (raw, json) Hash identifier: vqCy57ntTjNnOBM2wrQUkkMNrW3SS4MS/oAoZJZ34a0= Subject key identifier: 9D:D3:B2:42:7F:14:45:D1:15:D7:FC:9D:AE:2A:1B:2F:55:32:36:81 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC9DBB03B5889909273BBA080 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b0:3b:58:89:90:92:73:bb:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=efbb8c5e-8b11-45d0-bce5-be56901f0efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:53:f3:41:be:0e:c6:b9:28:89:7a:a8:f3: 97:d6:2d:a8:a7:b9:66:8e:1b:62:76:e8:32:f7:b9: ea:4c:c8:6b:89:18:4a:13:f2:31:dc:65:c0:ec:9a: 12:71:73:4f:1c:18:ec:37:81:96:18:76:0d:06:05: 9a:95:4e:56:24:62:15:79:fb:ea:24:7e:c1:57:19: 4a:34:91:b8:7d:e4:3e:a2:b9:cc:8d:cd:7d:94:db: 88:08:e2:c4:43:0e:2f:96:9a:83:6f:d9:e6:9a:2a: d6:b3:c3:38:8f:bb:df:bc:35:09:a5:57:cc:87:67: 40:f3:f7:ef:c7:fa:8f:49:58:74:e5:0f:5d:e6:d4: da:73:12:78:52:27:c2:41:aa:cf:d4:c8:2b:29:69: 63:56:e9:d2:08:98:ba:df:0b:ad:cd:8e:ad:0a:4c: 42:42:e2:75:ed:96:3a:bc:0d:7b:e1:62:0b:67:25: 37:7d:73:b0:cb:65:8e:48:f4:f6:cb:33:50:82:86: 11:57:c4:88:f5:0c:1a:96:b6:7a:a7:15:82:30:ff: 21:cb:8f:ac:53:f9:3d:0f:73:82:84:fd:3c:3f:2b: 65:14:e9:f9:c0:5c:51:37:e2:dc:da:8e:71:65:b2: 26:e7:f5:c3:e5:0d:7b:bf:c3:68:3e:f6:bf:4d:a7: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D3:B2:42:7F:14:45:D1:15:D7:FC:9D:AE:2A:1B:2F:55:32:36:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec1b8336-f451-3652-aefc-ff559feaa568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1b:7f:21:88:dd:27:66:cc:ea:f4:1c:92:73:9f:18:02:a2: 0f:3f:a9:d5:4c:0c:b7:64:f1:91:dd:e1:18:43:66:45:7a:43: 9e:78:1f:fc:bb:37:1f:28:3d:cc:86:3e:76:5b:c6:b0:a3:11: cd:34:d1:76:77:27:d2:82:80:02:52:5c:95:15:66:d9:5a:8b: 77:1e:70:97:9e:ba:f5:3a:8a:f2:5a:0d:86:98:a6:2d:43:66: af:cb:53:78:1c:b3:7c:e5:9c:e7:4b:c6:2c:c0:db:6d:02:9c: 4f:61:9a:c7:19:88:bf:08:43:f4:04:7c:bc:91:48:e3:53:bf: 7a:87:6b:bc:46:31:5a:f7:c8:fb:5d:56:db:f7:0a:fd:25:8e: 74:74:d2:19:e9:31:03:02:79:8b:52:5e:e1:e7:3b:97:5d:6d: 39:16:05:78:b4:1a:b4:45:58:e4:63:f8:00:5b:60:74:39:c1: 93:ec:4f:dd:91:6f:ca:9d:e6:78:a0:3a:e5:e4:66:81:b5:10: d1:10:00:92:65:61:e7:4d:4a:8c:d8:82:ba:65:95:73:59:5f: 68:fb:f3:a6:05:33:64:fc:c4:21:96:c9:91:d7:8a:b8:e0:f8: c9:dc:db:7b:d1:e2:f4:37:b4:79:1e:95:93:3f:31:68:63:77: d5:76:d2:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27A7WImQknO7oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk ZWZiYjhjNWUtOGIxMS00NWQwLWJjZTUtYmU1NjkwMWYwZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmVT80G+Dsa5KIl6qPOX1i2op7lmjhtidugy 97nqTMhriRhKE/Ix3GXA7JoScXNPHBjsN4GWGHYNBgWalU5WJGIVefvqJH7BVxlK NJG4feQ+ornMjc19lNuICOLEQw4vlpqDb9nmmirWs8M4j7vfvDUJpVfMh2dA8/fv x/qPSVh05Q9d5tTacxJ4UifCQarP1MgrKWljVunSCJi63wutzY6tCkxCQuJ17ZY6 vA174WILZyU3fXOwy2WOSPT2yzNQgoYRV8SI9QwalrZ6pxWCMP8hy4+sU/k9D3OC hP08PytlFOn5wFxRN+Lc2o5xZbIm5/XD5Q17v8NoPva/TadiAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3TskJ/FEXRFdf8na4qGy9VMjaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZWMxYjgzMzYtZjQ1MS0z NjUyLWFlZmMtZmY1NTlmZWFhNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIbfyGI3SdmzOr0HJJznxgCog8/qdVMDLdk8ZHd4RhDZkV6Q554H/y7 Nx8oPcyGPnZbxrCjEc000XZ3J9KCgAJSXJUVZtlai3cecJeeuvU6ivJaDYaYpi1D Zq/LU3gcs3zlnOdLxizA220CnE9hmscZiL8IQ/QEfLyRSONTv3qHa7xGMVr3yPtd Vtv3Cv0ljnR00hnpMQMCeYtSXuHnO5ddbTkWBXi0GrRFWORj+ABbYHQ5wZPsT92R b8qd5nigOuXkZoG1ENEQAJJlYedNSozYgrpllXNZX2j786YFM2T8xCGWyZHXirjg +Mnc23vR4vQ3tHkelZM/MWhjd9V20us= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:03 2025 by rpki-client