$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa File: 276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa (raw, json) Hash identifier: abh02d97Yiov0QrleVkutL0yyxLwqav0W2BuBhSAsuw= Subject key identifier: E8:BE:DC:9F:0B:27:EE:46:A1:48:5A:E9:7D:1A:19:79:28:2F:7D:82 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B6E91F83F161C6C965BB8E5B8 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 8070 IP address blocks: 170.85.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f8:3f:16:1c:6c:96:5b:b8:e5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=55e1b8d1-6687-41c5-8155-497e863eb9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:ec:3e:06:63:b3:85:fc:84:4d:63:52:b9: 98:4e:88:fa:58:05:0b:d2:25:0c:14:ed:b3:ce:2d: 27:b0:10:56:80:db:dc:e3:89:12:2b:3e:19:33:98: f5:ba:c7:99:d5:6a:5d:90:49:87:51:39:4f:44:88: 93:3e:ed:d7:12:e7:ae:16:7e:0f:33:70:dc:e4:d4: 61:bc:a0:f4:4f:21:53:af:36:83:93:2f:29:a4:c2: 67:1e:67:52:64:85:ca:d9:fa:10:f1:22:dc:b9:0c: 14:c2:6e:95:ba:b8:0e:27:2f:75:35:2d:1e:0b:35: 37:40:78:40:da:2b:7a:1b:52:9e:40:a5:cb:44:10: c0:b7:3e:42:e5:10:96:5b:55:8a:7b:91:1d:7b:7d: 50:0d:06:d6:dc:5a:84:40:6d:df:d5:af:c8:f7:a3: 08:cf:1e:05:75:ea:63:75:58:55:a7:e0:20:3f:f7: 0b:3f:32:31:f5:bf:3c:cd:68:16:8f:52:0e:d4:2f: 80:a4:ea:02:2e:61:c9:73:c7:dd:27:76:5c:cc:6d: fd:1a:55:ac:4c:2e:a7:6f:8c:33:d6:e9:eb:a4:ed: 48:bc:2f:1e:b0:bb:90:f5:aa:6a:4b:72:2b:a9:fa: e7:39:ae:85:56:8a:15:fc:b7:f1:53:8b:81:fa:57: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BE:DC:9F:0B:27:EE:46:A1:48:5A:E9:7D:1A:19:79:28:2F:7D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/276203f1-be22-3c00-bbd8-a7d5d0a0bdfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:70:2b:43:a3:e7:bf:bc:87:a6:97:bb:5d:6a:6d:d9:3b:c9: b9:0d:fb:91:15:f2:24:98:05:39:56:30:ec:94:fc:bc:d2:47: ba:16:9a:ad:a5:46:53:40:1b:9d:04:ae:f9:48:4d:76:d9:51: 63:9b:e8:90:1a:cb:b2:ea:ff:cc:9f:9a:08:5e:6d:0b:dd:15: cf:ad:31:e8:ec:53:fc:8d:09:9b:25:3f:42:fa:0b:f5:e7:ac: 2d:e4:dd:6d:d5:a5:b6:c0:b3:75:7f:00:42:2b:5d:26:57:6c: 7a:36:8f:86:12:18:ee:7d:de:e6:1e:fb:98:8b:75:40:99:09: 8e:61:b0:53:a8:0d:a4:da:96:c9:19:3e:ba:7a:30:09:9d:10: 43:12:f8:98:6b:a1:d6:e1:97:46:87:99:d9:49:5a:8c:34:78: ed:66:71:b9:d1:36:ab:76:c9:9b:d1:78:5c:62:ea:96:19:2d: 14:52:e1:4b:33:16:38:d2:99:e0:14:5b:db:19:3a:7a:f0:10: bf:80:48:df:74:ba:8f:75:a8:cd:cb:f7:c9:9d:bb:b5:6a:ef: ee:df:2d:c5:84:32:f6:d4:f3:3d:6a:fc:ca:06:c2:cf:35:73: 83:33:ba:da:29:0d:ff:c9:90:1d:92:0b:9c:ab:b3:e7:5c:58: d3:65:f7:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfg/Fhxsllu45bgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTVlMWI4ZDEtNjY4Ny00MWM1LTgxNTUtNDk3ZTg2M2ViOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfbsPgZjs4X8hE1jUrmYToj6WAUL0iUMFO2z zi0nsBBWgNvc44kSKz4ZM5j1useZ1WpdkEmHUTlPRIiTPu3XEueuFn4PM3Dc5NRh vKD0TyFTrzaDky8ppMJnHmdSZIXK2foQ8SLcuQwUwm6VurgOJy91NS0eCzU3QHhA 2it6G1KeQKXLRBDAtz5C5RCWW1WKe5Ede31QDQbW3FqEQG3f1a/I96MIzx4Fdepj dVhVp+AgP/cLPzIx9b88zWgWj1IO1C+ApOoCLmHJc8fdJ3ZczG39GlWsTC6nb4wz 1unrpO1IvC8esLuQ9apqS3IrqfrnOa6FVooV/LfxU4uB+lcg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi+3J8LJ+5GoUha6X0aGXkoL32CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjc2MjAzZjEtYmUyMi0z YzAwLWJiZDgtYTdkNWQwYTBiZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRwK0Oj57+8h6aXu11qbdk7ybkN+5EV8iSYBTlWMOyU/LzSR7oWmq2l RlNAG50ErvlITXbZUWOb6JAay7Lq/8yfmghebQvdFc+tMejsU/yNCZslP0L6C/Xn rC3k3W3VpbbAs3V/AEIrXSZXbHo2j4YSGO593uYe+5iLdUCZCY5hsFOoDaTalskZ Prp6MAmdEEMS+Jhrodbhl0aHmdlJWow0eO1mcbnRNqt2yZvReFxi6pYZLRRS4Usz FjjSmeAUW9sZOnrwEL+ASN90uo91qM3L98mdu7Vq7+7fLcWEMvbU8z1q/MoGws81 c4MzutopDf/JkB2SC5yrs+dcWNNl9/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:35 2025 by rpki-client