$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa File: a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa (raw, json) Hash identifier: QIswQ2EV4qdGriWbFbJu3ihqy1BxJt+UDvsX3+2jPa8= Subject key identifier: A2:FF:61:D9:9A:3D:FB:C7:5B:77:34:C5:BC:8B:84:1C:70:B9:CC:9D Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B758C94EF1EA28378FFB1E760 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 14618 IP address blocks: 170.85.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:94:ef:1e:a2:83:78:ff:b1:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=9288edfc-4e30-43d7-8305-e93a0436bed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:08:8b:57:cb:66:20:c7:aa:78:b7:ff:6c: ec:34:d9:80:c5:2b:eb:76:06:58:b8:9e:f5:8f:c2: 7b:ea:d3:60:12:f3:0a:3a:44:c1:e0:79:90:2c:86: 5a:e7:42:e5:da:61:50:1a:10:90:6c:ec:48:22:78: fd:e6:4b:20:bd:f5:f9:84:2a:1c:54:be:0a:e0:b3: 36:e3:a5:1a:37:92:50:10:bc:20:6a:71:0f:62:83: ef:af:15:7b:78:09:50:e3:33:ba:91:96:26:63:68: d0:1c:b4:7f:fe:69:3f:27:1a:14:3f:1b:d8:17:ef: d2:5e:c4:8f:82:39:55:f2:23:77:53:f2:fb:e7:c0: ed:07:f5:74:fe:45:ad:64:91:85:ca:0b:12:99:ea: 5a:b2:51:0a:42:93:69:5d:28:bc:8c:53:8a:65:09: 0c:e6:76:a0:a6:eb:b9:53:1f:94:76:41:0c:2a:18: ab:1f:8b:c9:a1:f4:62:35:80:7e:45:ee:11:ee:64: 5a:2b:36:67:6d:dc:d9:3b:8d:67:99:e0:2d:07:be: d0:41:f1:cf:35:60:56:a6:98:50:b5:a4:e6:57:0e: bc:89:eb:8a:f6:09:15:b7:a8:88:1e:71:47:40:b3: 46:94:05:e2:11:56:dc:25:9e:76:d5:59:58:5c:55: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:61:D9:9A:3D:FB:C7:5B:77:34:C5:BC:8B:84:1C:70:B9:CC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38378ac-3414-304a-ba7c-5dd7bc6dab62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f8:9b:6a:8e:a6:de:2d:42:74:c6:8f:1f:fe:ef:74:2c:6d: d9:10:14:9b:2d:3d:dc:2c:15:52:45:66:ba:fb:13:c7:d2:37: 7e:1d:fd:02:37:d8:15:df:c8:1d:57:70:f2:fb:a8:d4:0f:22: 44:3e:ef:f7:d4:8b:94:77:ad:03:c0:66:a3:45:aa:56:35:05: 48:c9:08:c6:ce:31:4a:57:e8:35:e9:e7:e2:ca:a7:9b:aa:da: c2:b2:8a:cb:73:42:37:96:79:6e:10:13:5b:f8:32:a6:43:da: 9b:1f:ad:21:4d:f9:75:2c:4e:f5:49:a2:44:76:5b:fd:f1:d7: 37:f6:87:01:02:c7:bf:65:56:de:7a:f5:c4:4c:9f:64:e9:96: 08:bc:1d:15:d5:bb:7a:05:50:dd:b0:71:aa:c0:ef:ce:7f:2f: 49:c2:85:23:7e:5c:2d:ff:24:2e:de:2b:d5:94:70:35:ec:d7: 47:9c:8c:bd:b1:e6:75:dd:e9:1b:25:4a:b7:1d:5c:d1:d5:8d: fa:73:9a:88:f4:fe:e8:9f:28:b7:e5:8c:b3:0e:a9:fc:0d:d0: 86:ee:08:77:57:8b:a0:35:fc:3e:ba:46:61:7d:1a:d9:02:41: 2b:6c:b1:8b:6a:7f:5b:08:92:e8:23:5a:b2:ed:e2:68:af:55: 8d:fc:51:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJTvHqKDeP+x52AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk OTI4OGVkZmMtNGUzMC00M2Q3LTgzMDUtZTkzYTA0MzZiZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0oIi1fLZiDHqni3/2zsNNmAxSvrdgZYuJ71 j8J76tNgEvMKOkTB4HmQLIZa50Ll2mFQGhCQbOxIInj95ksgvfX5hCocVL4K4LM2 46UaN5JQELwganEPYoPvrxV7eAlQ4zO6kZYmY2jQHLR//mk/JxoUPxvYF+/SXsSP gjlV8iN3U/L758DtB/V0/kWtZJGFygsSmepaslEKQpNpXSi8jFOKZQkM5nagpuu5 Ux+UdkEMKhirH4vJofRiNYB+Re4R7mRaKzZnbdzZO41nmeAtB77QQfHPNWBWpphQ taTmVw68ieuK9gkVt6iIHnFHQLNGlAXiEVbcJZ521VlYXFVSewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL/YdmaPfvHW3c0xbyLhBxwucydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4Mzc4YWMtMzQxNC0z MDRhLWJhN2MtNWRkN2JjNmRhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr4m2qOpt4tQnTGjx/+73QsbdkQFJstPdwsFVJFZrr7E8fSN34d/QI3 2BXfyB1XcPL7qNQPIkQ+7/fUi5R3rQPAZqNFqlY1BUjJCMbOMUpX6DXp5+LKp5uq 2sKyistzQjeWeW4QE1v4MqZD2psfrSFN+XUsTvVJokR2W/3x1zf2hwECx79lVt56 9cRMn2Tplgi8HRXVu3oFUN2wcarA785/L0nChSN+XC3/JC7eK9WUcDXs10ecjL2x 5nXd6RslSrcdXNHVjfpzmoj0/uifKLfljLMOqfwN0IbuCHdXi6A1/D66RmF9GtkC QStssYtqf1sIkugjWrLt4mivVY38URo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:29:49 2025 by rpki-client