$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa File: f00191ea-7649-3395-af77-d4da4f50995c.roa (raw, json) Hash identifier: DsxytDh9tr40tk3N0A+sxL0Ybiw2vl42Iq6mH9nQdqU= Subject key identifier: C0:AF:E7:E0:49:C2:2D:26:6E:A7:55:12:15:4C:B9:AC:37:1E:29:FF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC9DBB026BF6BF7073F148400 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 170.85.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b0:26:bf:6b:f7:07:3f:14:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=98f2a346-bbef-4267-8fc7-9bc2ccdb72a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ab:26:a1:03:86:e3:43:f6:b9:53:2a:d0:8f: f6:e2:6b:dd:69:d6:a5:fa:0a:d5:cc:12:37:88:85: 19:7a:05:8f:e0:73:11:2f:a0:e8:dc:7b:dd:52:ba: 5f:ea:a6:91:4f:a1:de:39:a7:70:68:3b:47:a7:a0: 8f:0d:79:4e:c6:b5:7e:08:07:33:e4:e5:a4:d3:ee: 9d:b3:a9:e7:2b:e3:46:e4:7b:9f:0a:11:f5:aa:6a: 58:32:a4:79:bf:1c:33:90:a5:6e:a8:a5:57:b4:d2: 19:9a:49:60:73:ee:c1:c0:3f:54:43:38:d0:e8:03: 79:25:f7:13:35:9b:c8:a7:e6:36:16:5a:3c:6d:30: 84:27:29:81:81:90:ab:ac:8e:a5:a1:be:f6:b7:15: 64:c4:6d:1a:6a:f2:a7:6f:0d:46:11:38:d3:c8:27: 3d:36:0c:e6:fc:e2:d6:c0:51:b5:5a:01:99:e4:8c: 9f:86:23:16:75:1f:9a:09:6c:24:ba:d6:ad:7f:39: e5:d4:e1:2d:65:45:09:8c:69:9c:9b:93:87:4a:b1: 09:6c:8f:13:50:3e:37:80:97:15:32:38:83:3a:35: ac:fa:a7:3a:1d:52:94:ec:3a:58:99:81:ae:81:ba: 75:31:08:d9:df:cb:16:e5:19:e2:d8:31:af:98:1c: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AF:E7:E0:49:C2:2D:26:6E:A7:55:12:15:4C:B9:AC:37:1E:29:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:76:99:b8:03:16:5b:d5:36:13:6e:dd:8a:49:eb:b4:c4:a2: 02:9d:48:48:91:b3:3f:99:6a:ee:0c:75:da:89:44:88:95:f3: 07:5e:84:fb:ae:64:f3:55:13:9f:58:aa:11:d3:bd:ff:06:13: 76:6d:7e:b8:80:82:f4:95:57:2a:96:ef:5b:93:d2:61:51:5a: e1:12:1a:f4:66:38:17:12:8d:ef:7b:70:20:71:c9:94:93:90: 27:a9:48:12:31:0d:7f:56:83:45:38:46:79:61:42:b7:ea:22: 03:cb:d5:a7:d4:ff:ff:73:fa:b3:05:66:5b:c3:98:c8:73:68: f9:43:fb:91:40:79:41:a4:f0:73:65:21:be:32:e7:02:ae:48: 85:3f:f7:f3:65:e2:bb:86:c0:2d:72:29:ad:67:ac:28:e1:09: bd:37:ac:61:8f:ce:6f:e6:70:f1:af:78:d5:5f:30:41:1c:da: 02:37:9b:73:7e:a3:eb:a8:8b:05:ff:06:5f:a7:1f:2d:da:0c: 56:44:d2:b3:b3:ac:01:b0:89:69:55:38:25:53:45:4e:c2:80: 74:d5:3b:cf:87:21:80:a5:28:bd:d8:40:03:55:46:ec:d4:0a: a3:25:63:f1:72:d7:87:d1:a2:18:d9:aa:d4:03:b1:7f:65:8c: 47:9a:5d:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27Amv2v3Bz8UhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk OThmMmEzNDYtYmJlZi00MjY3LThmYzctOWJjMmNjZGI3MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66smoQOG40P2uVMq0I/24mvdadal+grVzBI3 iIUZegWP4HMRL6Do3HvdUrpf6qaRT6HeOadwaDtHp6CPDXlOxrV+CAcz5OWk0+6d s6nnK+NG5HufChH1qmpYMqR5vxwzkKVuqKVXtNIZmklgc+7BwD9UQzjQ6AN5JfcT NZvIp+Y2Flo8bTCEJymBgZCrrI6lob72txVkxG0aavKnbw1GETjTyCc9Ngzm/OLW wFG1WgGZ5IyfhiMWdR+aCWwkutatfznl1OEtZUUJjGmcm5OHSrEJbI8TUD43gJcV MjiDOjWs+qc6HVKU7DpYmYGugbp1MQjZ38sW5Rni2DGvmBw2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCv5+BJwi0mbqdVEhVMuaw3Hin/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjAwMTkxZWEtNzY0OS0z Mzk1LWFmNzctZDRkYTRmNTA5OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE92mbgDFlvVNhNu3YpJ67TEogKdSEiRsz+Zau4MddqJRIiV8wdehPuu ZPNVE59YqhHTvf8GE3ZtfriAgvSVVyqW71uT0mFRWuESGvRmOBcSje97cCBxyZST kCepSBIxDX9Wg0U4RnlhQrfqIgPL1afU//9z+rMFZlvDmMhzaPlD+5FAeUGk8HNl Ib4y5wKuSIU/9/Nl4ruGwC1yKa1nrCjhCb03rGGPzm/mcPGveNVfMEEc2gI3m3N+ o+uoiwX/Bl+nHy3aDFZE0rOzrAGwiWlVOCVTRU7CgHTVO8+HIYClKL3YQANVRuzU CqMlY/Fy14fRohjZqtQDsX9ljEeaXRg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:53 2025 by rpki-client