$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa File: 970fb05c-2346-393b-a7b7-10ed7f9bd285.roa (raw, json) Hash identifier: Vn+QSxr4zfNd9pL1zymUJH9dkqhU9rOGyytnlbQe7jk= Subject key identifier: 57:FF:69:A2:87:68:87:98:B0:E3:49:CC:F5:4D:CD:AD:19:E5:55:04 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A94D0D9BD47F64C009B46D6A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 170.85.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d9:bd:47:f6:4c:00:9b:46:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=15d12f58-4c62-4e9b-a871-5e5e54d729dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:2d:cd:00:bc:90:67:be:86:94:b9:b2:01: 05:5e:ad:af:b1:bd:ae:13:8a:e2:62:0e:e6:c3:aa: b8:59:e8:4e:7b:f1:c3:7a:e9:6f:d1:46:d2:1f:e4: 3d:95:5a:45:bd:d0:e5:92:ab:c2:6c:f6:dc:2b:74: 27:f8:6c:bb:9a:a1:7a:b1:4f:e7:ff:dc:dc:d0:93: 82:6f:cd:af:e9:bf:93:c1:12:88:b6:64:18:4e:3b: d4:ab:45:bb:1f:c5:16:7a:37:2f:b3:6d:8b:fd:9a: ca:6c:1f:91:01:2a:53:02:3a:9d:50:43:bd:56:25: 1c:07:e1:63:6d:10:ad:3b:b9:14:85:07:e6:a3:6d: 2c:5c:c1:db:e7:1f:f9:ed:8b:e4:c4:e9:fc:92:1a: a7:8d:11:3d:7e:27:47:41:3d:c4:1a:be:a1:36:14: 50:eb:ca:17:23:05:f0:f9:4a:34:05:e9:eb:1a:8e: fa:98:70:48:2a:7a:5b:53:bd:01:c0:1f:97:3c:cb: b8:38:2a:d8:b8:cc:2c:be:74:2a:cb:8d:df:c9:0d: 25:4b:b4:f3:54:08:8d:b5:ff:90:58:a7:d4:b1:be: d8:19:a5:8c:28:ac:ad:13:a4:13:cb:6c:91:8d:82: 88:8a:5e:04:b6:26:0d:19:1c:1b:52:1e:c2:1d:6d: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FF:69:A2:87:68:87:98:B0:E3:49:CC:F5:4D:CD:AD:19:E5:55:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:03:35:06:3a:77:68:91:ac:d5:df:a5:dc:45:a2:40:9e:77: a1:51:26:ba:a8:8e:81:4e:2b:4b:de:d8:86:1c:8d:d0:84:83: ff:63:9c:a0:0b:fa:b2:75:e6:ed:04:31:7c:14:3d:82:a3:09: 7b:27:cb:7a:a3:31:33:a6:74:00:73:4f:03:94:9e:e4:1d:9d: 4d:47:4d:a0:5e:e7:1d:bf:6b:cc:dc:43:59:b5:55:40:56:f5: f5:43:28:84:2d:19:12:b9:2c:2b:2c:10:3b:d7:16:24:55:23: 10:ef:3f:d0:b6:d4:66:ff:56:41:50:4b:86:39:e0:6b:48:cb: 9c:08:c2:05:a9:ba:47:02:6a:9b:f1:ca:ca:45:c5:01:2f:eb: 78:c7:26:37:44:eb:b5:9f:62:b4:b3:bf:3d:47:64:e5:f2:0c: fd:e2:69:a1:e9:a4:8e:91:d9:3d:3f:51:d7:4c:6f:6a:4d:2a: 4d:73:a4:84:d1:da:11:59:8b:47:45:dc:fb:27:5b:4d:71:fe: ba:7f:24:42:94:5a:f6:a2:15:53:92:89:93:18:03:47:96:20: ba:8a:26:24:c8:66:fb:da:ff:33:6f:ca:c0:9b:84:a7:67:65: 58:d9:59:89:7d:51:40:9c:28:96:34:fc:8a:f6:26:d6:3c:99: a7:9c:16:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0Nm9R/ZMAJtG1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk MTVkMTJmNTgtNGM2Mi00ZTliLWE4NzEtNWU1ZTU0ZDcyOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJMtzQC8kGe+hpS5sgEFXq2vsb2uE4riYg7m w6q4WehOe/HDeulv0UbSH+Q9lVpFvdDlkqvCbPbcK3Qn+Gy7mqF6sU/n/9zc0JOC b82v6b+TwRKItmQYTjvUq0W7H8UWejcvs22L/ZrKbB+RASpTAjqdUEO9ViUcB+Fj bRCtO7kUhQfmo20sXMHb5x/57YvkxOn8khqnjRE9fidHQT3EGr6hNhRQ68oXIwXw +Uo0BenrGo76mHBIKnpbU70BwB+XPMu4OCrYuMwsvnQqy43fyQ0lS7TzVAiNtf+Q WKfUsb7YGaWMKKytE6QTy2yRjYKIil4EtiYNGRwbUh7CHW0bowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf/aaKHaIeYsONJzPVNza0Z5VUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTcwZmIwNWMtMjM0Ni0z OTNiLWE3YjctMTBlZDdmOWJkMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4DNQY6d2iRrNXfpdxFokCed6FRJrqojoFOK0ve2IYcjdCEg/9jnKAL +rJ15u0EMXwUPYKjCXsny3qjMTOmdABzTwOUnuQdnU1HTaBe5x2/a8zcQ1m1VUBW 9fVDKIQtGRK5LCssEDvXFiRVIxDvP9C21Gb/VkFQS4Y54GtIy5wIwgWpukcCapvx yspFxQEv63jHJjdE67WfYrSzvz1HZOXyDP3iaaHppI6R2T0/UddMb2pNKk1zpITR 2hFZi0dF3PsnW01x/rp/JEKUWvaiFVOSiZMYA0eWILqKJiTIZvva/zNvysCbhKdn ZVjZWYl9UUCcKJY0/Ir2JtY8maecFiY= -----END CERTIFICATE-----Generated at Thu Jul 24 08:16:01 2025 by rpki-client