$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa File: 89eb4a2e-99f2-3a78-bf19-ad260014a446.roa (raw, json) Hash identifier: RGL2o8Lw67VlDOtHV5McaxobpjPqH8ZUkaJkwh61KMA= Subject key identifier: 27:15:CC:CA:7F:B2:B3:34:82:35:F6:69:45:34:52:5A:C6:76:69:E2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B758C95055698EE6CCF4F3EA0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 16509 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:95:05:56:98:ee:6c:cf:4f:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=77ba5b43-508a-4a4d-99b8-273911b7a23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:0c:2d:49:f0:11:52:e1:82:c2:5c:b0:29: 9a:b3:66:b4:74:f2:59:0d:44:10:bf:ac:69:96:2f: ae:b3:15:03:76:ef:0c:60:dd:b8:d0:7f:4f:9c:94: dd:e7:7d:85:6a:70:6f:40:5d:aa:b5:37:1f:94:95: 65:68:b8:d0:8a:3f:e1:a6:d9:79:3b:d4:d3:48:08: a0:24:b8:ac:5c:19:23:b9:32:03:3c:a5:14:cd:ba: 42:b0:46:65:e7:c1:20:8e:41:0f:72:17:1e:ea:f7: 59:61:d3:13:90:a1:c5:b2:a0:6e:76:34:d4:9c:ac: d5:fb:e1:dd:2b:6e:03:63:2e:ea:09:20:49:47:3a: 45:ff:f1:e7:7e:af:39:16:6e:45:1c:2c:bc:82:fe: ca:2e:e4:d7:53:ff:1e:40:ce:5d:74:ce:ed:dd:b7: 2f:64:4a:75:86:91:d9:8f:11:4f:2b:61:36:ff:8a: 5e:7e:b3:75:6d:a8:17:32:7c:42:9b:85:6b:5e:f6: c0:f3:b5:8f:ca:93:e1:bd:c5:5c:19:55:88:aa:36: 54:52:77:31:9f:96:cd:ce:e2:8c:e5:c2:28:91:3d: 9f:af:0d:d6:95:4d:ac:c1:78:52:1f:e3:6c:ab:3d: 1d:a5:e6:f2:87:e7:20:52:5f:78:14:cd:b6:11:90: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:15:CC:CA:7F:B2:B3:34:82:35:F6:69:45:34:52:5A:C6:76:69:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/89eb4a2e-99f2-3a78-bf19-ad260014a446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bb:ec:1f:ec:18:56:91:b8:8b:7b:53:88:8c:32:a0:18:84: 75:ab:4f:95:01:e2:81:c4:a2:ac:ae:05:86:19:ef:72:06:8a: 99:5d:28:f0:f4:5d:b2:9e:da:80:0b:ed:55:a4:b8:b6:a3:11: e3:87:d3:c1:bf:d1:43:53:f3:e3:a1:76:01:5c:03:e5:cb:3f: 43:b3:84:ad:a7:36:55:b7:dc:c4:74:da:55:5f:31:d8:6a:25: a8:05:0e:f4:67:2a:60:99:cf:61:69:b1:15:3d:52:f3:e3:fe: f2:06:c7:15:9d:23:0f:07:68:86:94:cb:92:a8:12:5a:39:01: 87:29:ac:83:d1:8d:dc:b3:9e:bc:1f:54:93:a6:cb:d9:09:d7: 7c:b5:1c:35:1a:ff:5d:02:c6:c7:66:80:20:90:4f:62:9e:e0: 42:0c:93:a3:08:54:72:11:cd:44:99:1c:ab:49:f6:67:db:3d: 70:c8:59:53:90:d4:31:5a:c9:ea:f4:26:6b:a0:2d:36:82:ba: a7:af:c6:a7:60:d7:fc:6f:c9:ef:eb:bf:6a:f5:98:02:71:f8: f7:63:8a:f2:63:97:9c:1c:d9:cb:eb:27:19:6d:3c:28:72:5c: 1a:c7:51:d5:9f:c0:af:a6:ba:8b:8f:35:50:10:74:8e:2c:13: fa:b0:6f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJUFVpjubM9PPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NzdiYTViNDMtNTA4YS00YTRkLTk5YjgtMjczOTExYjdhMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMQMLUnwEVLhgsJcsCmas2a0dPJZDUQQv6xp li+usxUDdu8MYN240H9PnJTd532FanBvQF2qtTcflJVlaLjQij/hptl5O9TTSAig JLisXBkjuTIDPKUUzbpCsEZl58EgjkEPchce6vdZYdMTkKHFsqBudjTUnKzV++Hd K24DYy7qCSBJRzpF//Hnfq85Fm5FHCy8gv7KLuTXU/8eQM5ddM7t3bcvZEp1hpHZ jxFPK2E2/4pefrN1bagXMnxCm4VrXvbA87WPypPhvcVcGVWIqjZUUncxn5bNzuKM 5cIokT2frw3WlU2swXhSH+Nsqz0dpebyh+cgUl94FM22EZAeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcVzMp/srM0gjX2aUU0UlrGdmniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODllYjRhMmUtOTlmMi0z YTc4LWJmMTktYWQyNjAwMTRhNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq77B/sGFaRuIt7U4iMMqAYhHWrT5UB4oHEoqyuBYYZ73IGipldKPD0 XbKe2oAL7VWkuLajEeOH08G/0UNT8+OhdgFcA+XLP0OzhK2nNlW33MR02lVfMdhq JagFDvRnKmCZz2FpsRU9UvPj/vIGxxWdIw8HaIaUy5KoElo5AYcprIPRjdyznrwf VJOmy9kJ13y1HDUa/10CxsdmgCCQT2Ke4EIMk6MIVHIRzUSZHKtJ9mfbPXDIWVOQ 1DFayer0JmugLTaCuqevxqdg1/xvye/rv2r1mAJx+PdjivJjl5wc2cvrJxltPChy XBrHUdWfwK+muouPNVAQdI4sE/qwb9o= -----END CERTIFICATE-----Generated at Mon Oct 20 12:57:08 2025 by rpki-client