$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa File: 86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa (raw, json) Hash identifier: PtymS3HbwxuNcieO2vGSL03BX1c5QkUp41Qskcj1s0o= Subject key identifier: 84:58:75:C8:FB:79:98:64:0E:91:6E:C2:7E:31:D0:86:2E:EF:8C:BA Certificate issuer: /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Certificate serial: 010D0C9F4328584A331ADE4835C7D3C6A5967FC0 Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 23241 IP address blocks: 170.89.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:de:48:35:c7:d3:c6:a5:96:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=97a90697-12ec-43d4-96fc-735a7287aff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:16:c3:60:9a:84:0d:12:ef:9d:02:2f:bd:09: 94:89:f7:5b:86:5f:38:cf:d9:91:ab:b9:29:af:c0: 34:8e:24:46:7b:21:dc:8a:ef:ec:91:7e:ae:db:de: 4c:f7:05:3c:ec:4a:6d:fa:4d:ba:ca:ba:c5:c4:02: 55:4d:51:0b:67:47:1c:e4:55:80:66:d4:8b:fc:83: c8:a5:59:34:b7:c3:cd:b7:97:e8:76:10:a5:f3:f4: 93:78:19:95:95:11:b5:f5:71:f7:24:5b:43:89:64: 90:b7:66:65:55:3e:27:b7:40:a1:17:ec:a5:dc:7b: 10:a7:54:bb:e9:cf:07:5d:d1:1f:c2:7d:85:ab:5f: 1d:4b:e6:4e:2d:09:20:dd:9f:e1:a6:0c:6d:ed:59: 12:53:d7:ec:b9:be:dd:8b:be:96:0a:b4:26:ea:48: 0a:18:cf:60:e5:57:03:2c:89:5e:76:2d:04:37:5f: b9:9d:da:8f:34:bc:ae:a0:b1:b6:91:c4:e9:3a:a8: 3c:29:b6:df:3d:07:5c:71:ca:90:57:80:2c:c1:b9: 20:41:0a:79:43:25:41:dc:bf:d4:6e:3e:e4:a0:c7: 82:95:84:99:13:24:3c:42:0f:e5:6c:f4:32:0e:ec: 08:7a:eb:d3:36:e9:97:de:48:d5:5f:4b:50:6f:4c: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:58:75:C8:FB:79:98:64:0E:91:6E:C2:7E:31:D0:86:2E:EF:8C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl X509v3 Authority Key Identifier: keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer sbgp-ipAddrBlock: critical IPv4: 170.89.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ac:b6:2b:95:2c:5f:27:c6:5f:99:42:71:78:f0:c7:1a:cb: 8b:38:a2:28:4f:38:5d:88:84:e4:37:1b:eb:50:6b:15:2d:31: 4f:79:b7:e7:f7:e8:c0:2e:79:84:d5:4f:dd:fc:10:dc:76:a8: ed:03:3b:eb:29:6a:03:73:a6:dd:99:6b:30:67:5d:13:89:63: 16:cc:d5:65:77:45:21:99:f3:5b:a6:ff:d5:99:0a:e9:ea:3e: 8a:fe:08:8c:a6:68:4a:0e:a8:a2:34:f7:b7:df:49:fd:92:40: b5:5a:10:9e:1d:0d:e8:60:7e:cc:b7:74:3e:a7:9a:d3:c8:84: 1a:a1:db:20:4f:30:3d:18:12:e6:a5:dd:19:9d:34:e2:33:e7: 63:7e:fc:7f:a0:d1:09:6f:a3:b2:a2:48:67:a1:b0:1a:a7:32: 6a:38:ee:74:cc:ca:93:d3:70:4a:88:8e:fc:85:53:a2:3f:ce: 42:ba:61:fc:97:30:49:88:0f:2a:a1:ca:b5:a4:a4:7c:0d:0c: 37:d1:11:ab:52:a3:5f:d5:7b:63:85:d9:56:be:5e:19:46:2c: ec:f9:e0:4e:55:d6:4a:9b:c4:2b:05:17:33:7e:17:f8:73:56: 79:7b:04:5a:51:fc:92:57:2b:e9:00:cb:f8:04:a5:de:a8:69: 3c:20:73:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGt5INcfTxqWWf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3 Y2ExMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk OTdhOTA2OTctMTJlYy00M2Q0LTk2ZmMtNzM1YTcyODdhZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhbDYJqEDRLvnQIvvQmUifdbhl84z9mRq7kp r8A0jiRGeyHciu/skX6u295M9wU87Ept+k26yrrFxAJVTVELZ0cc5FWAZtSL/IPI pVk0t8PNt5fodhCl8/STeBmVlRG19XH3JFtDiWSQt2ZlVT4nt0ChF+yl3HsQp1S7 6c8HXdEfwn2Fq18dS+ZOLQkg3Z/hpgxt7VkSU9fsub7di76WCrQm6kgKGM9g5VcD LIledi0EN1+5ndqPNLyuoLG2kcTpOqg8KbbfPQdcccqQV4AswbkgQQp5QyVB3L/U bj7koMeClYSZEyQ8Qg/lbPQyDuwIeuvTNumX3kjVX0tQb0wEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRYdcj7eZhkDpFuwn4x0IYu74y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvODZkMjEyNWEtOGQ1Ny0z ZDRhLTkxM2YtYTEwZTg0ZjhkYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCstiuVLF8nxl+ZQnF48Mcay4s4oihPOF2IhOQ3G+tQaxUtMU95t+f3 6MAueYTVT938ENx2qO0DO+spagNzpt2ZazBnXROJYxbM1WV3RSGZ81um/9WZCunq Por+CIymaEoOqKI097ffSf2SQLVaEJ4dDehgfsy3dD6nmtPIhBqh2yBPMD0YEual 3RmdNOIz52N+/H+g0Qlvo7KiSGehsBqnMmo47nTMypPTcEqIjvyFU6I/zkK6YfyX MEmIDyqhyrWkpHwNDDfREatSo1/Ve2OF2Va+XhlGLOz54E5V1kqbxCsFFzN+F/hz Vnl7BFpR/JJXK+kAy/gEpd6oaTwgc5M= -----END CERTIFICATE-----Generated at Sun Jun 29 23:19:22 2025 by rpki-client