$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa File: a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa (raw, json) Hash identifier: cklRhNVb3Bzmn3ys1b4X0bSisf+Q+n7Q0bZSlZgs790= Subject key identifier: 8B:F3:F4:82:1C:2A:E0:19:DC:9D:78:32:B8:03:26:11:81:42:07:B5 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A94D0D3D2A8526C801B7BB200 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d3:d2:a8:52:6c:80:1b:7b:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=017866f6-feeb-4066-aa13-cafad9d72064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:06:1e:92:25:4b:47:d2:a4:37:6e:57:d8: 9a:ce:5d:6c:5e:07:94:d7:ab:66:52:23:19:18:63: de:d7:68:a0:03:1c:e3:78:4b:6c:cb:87:61:ad:af: a4:37:0f:c9:59:b8:52:86:1b:30:f8:c2:4b:d8:a3: 48:59:c1:38:c4:44:2a:9b:d3:9b:3f:f5:fe:22:3c: 3f:71:90:5d:c9:07:5c:9d:58:39:86:7d:08:37:9a: 5d:c3:85:9c:87:1f:36:69:0f:85:21:32:5b:60:4d: d2:b9:7b:ba:3d:ac:e3:fd:fc:5d:61:22:e0:f7:bb: 8f:cc:e0:dc:4d:bd:c0:8a:b2:03:ec:24:ba:c4:57: e3:76:9e:e0:d9:0f:45:32:68:71:b8:58:c4:5f:f7: d7:73:b4:f1:f2:5f:ab:2d:9a:3b:25:7c:85:18:53: d6:9b:33:a8:a1:c3:e1:42:a3:ff:df:8f:84:5f:d9: d4:67:e6:d3:9a:77:0e:e0:2f:4d:dc:89:12:80:29: 91:fa:91:e6:77:4b:7d:ee:89:86:5c:48:ab:d0:d5: 67:d3:0a:43:fd:6e:b4:5f:fe:76:a2:41:fe:78:40: 72:5e:02:9c:94:98:d6:34:54:49:e6:11:f3:00:73: cd:2d:6d:98:d3:08:8a:c6:7a:76:1c:85:eb:52:bd: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F3:F4:82:1C:2A:E0:19:DC:9D:78:32:B8:03:26:11:81:42:07:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f1:e6:28:dd:1e:ec:75:42:5c:39:80:a3:b2:97:7a:b7:f1: 4d:78:c4:37:6e:d6:2c:08:e3:06:11:02:e2:f9:7f:34:7e:df: e1:c4:f8:67:a4:c9:e1:6c:db:f1:12:08:94:5c:b1:34:69:f3: a1:fb:c6:fb:f9:d6:bf:29:64:3d:97:b8:9c:0d:13:f0:1a:bc: fd:50:46:43:08:a8:5b:e3:db:e5:d0:25:1a:68:62:4e:16:4a: 65:ce:c0:6a:6d:1d:7b:c0:58:b8:b9:de:9a:73:dd:de:3b:8b: c5:c5:50:33:89:73:84:60:d0:82:1a:78:96:95:e5:db:ea:82: 40:a7:af:1d:f1:99:4a:08:35:20:72:a3:06:94:52:fc:52:2b: 7a:15:48:07:1d:e5:1d:0b:53:cf:c5:a5:cf:e4:38:36:dc:04: 55:63:17:c4:70:95:c4:bd:3f:ea:97:1c:c5:d3:81:ea:cf:15: b3:16:5c:ae:6a:dd:ac:e4:5d:c0:3e:ed:4f:ba:ab:00:84:34: 18:49:1b:6d:81:3b:5f:17:71:ce:bc:a0:19:8b:95:6e:b2:c8: 8f:ef:63:32:2c:18:d6:07:73:95:6e:03:7d:3b:8d:98:75:7e: 21:0c:2f:42:6c:b5:bf:3f:81:ad:f8:f8:7a:f5:a3:e1:e3:46: ff:5a:0a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NPSqFJsgBt7sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk MDE3ODY2ZjYtZmVlYi00MDY2LWFhMTMtY2FmYWQ5ZDcyMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlusGHpIlS0fSpDduV9iazl1sXgeU16tmUiMZ GGPe12igAxzjeEtsy4dhra+kNw/JWbhShhsw+MJL2KNIWcE4xEQqm9ObP/X+Ijw/ cZBdyQdcnVg5hn0IN5pdw4Wchx82aQ+FITJbYE3SuXu6Pazj/fxdYSLg97uPzODc Tb3AirID7CS6xFfjdp7g2Q9FMmhxuFjEX/fXc7Tx8l+rLZo7JXyFGFPWmzOoocPh QqP/34+EX9nUZ+bTmncO4C9N3IkSgCmR+pHmd0t97omGXEir0NVn0wpD/W60X/52 okH+eEByXgKclJjWNFRJ5hHzAHPNLW2Y0wiKxnp2HIXrUr0LwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvz9IIcKuAZ3J14MrgDJhGBQge1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4Mzc4YWMtMzQxNC0z MDRhLWJhN2MtNWRkN2JjNmRhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPx5ijdHux1Qlw5gKOyl3q38U14xDdu1iwI4wYRAuL5fzR+3+HE+Gek yeFs2/ESCJRcsTRp86H7xvv51r8pZD2XuJwNE/AavP1QRkMIqFvj2+XQJRpoYk4W SmXOwGptHXvAWLi53ppz3d47i8XFUDOJc4Rg0IIaeJaV5dvqgkCnrx3xmUoINSBy owaUUvxSK3oVSAcd5R0LU8/Fpc/kODbcBFVjF8RwlcS9P+qXHMXTgerPFbMWXK5q 3azkXcA+7U+6qwCENBhJG22BO18Xcc68oBmLlW6yyI/vYzIsGNYHc5VuA307jZh1 fiEML0Jstb8/ga34+Hr1o+HjRv9aCpA= -----END CERTIFICATE-----Generated at Tue Jul 22 20:06:42 2025 by rpki-client