$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7a9bffe3-432a-3fd8-9790-8603f8d933fb.roa File: 7a9bffe3-432a-3fd8-9790-8603f8d933fb.roa (raw, json) Hash identifier: ln0dLSHKyT1sE03/1Nv5C/VTrx6e5jHpnuTm8rRmDGk= Subject key identifier: F9:48:1E:6C:6C:D6:2B:A7:AE:FB:91:94:CF:D4:40:78:5D:B8:D2:EC Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F4328584BA237899596E3542A3AF8A423 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7a9bffe3-432a-3fd8-9790-8603f8d933fb.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 8075 IP address blocks: 170.39.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:89:95:96:e3:54:2a:3a:f8:a4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=6b8edaf5-5e83-48b3-8131-b0701bf94f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e5:d9:1c:cf:4e:1a:96:79:c7:5d:40:a1:3a: 0f:61:9a:f2:a0:89:f5:53:8e:b6:b6:e2:93:e9:e5: 6c:c7:82:b0:5f:35:11:33:02:11:d4:0c:75:b4:51: 69:29:0b:4d:41:43:a9:44:bc:69:80:1a:4e:0a:52: 9f:7e:c5:63:9c:40:4c:e9:55:84:b3:89:87:bc:b9: bc:ca:37:d8:28:56:f0:1b:04:82:da:19:30:f0:a6: 7d:9d:e3:ae:26:49:93:b8:35:43:ac:10:fa:f2:3d: 74:24:79:71:e3:82:5c:ea:f5:95:c7:f2:02:86:30: 4d:80:25:c9:78:bf:4e:12:3c:52:c9:57:9b:08:65: 71:6f:64:0b:5f:26:9b:bf:a8:e5:1a:6a:14:19:5f: 5b:ea:b3:e1:88:63:95:fc:5e:f9:2a:5b:d3:07:dc: 1c:b9:c0:a9:3b:e5:ed:f7:fc:e0:43:de:28:82:03: ef:9b:02:14:84:b0:6a:65:0f:07:11:fb:10:bb:b5: 97:63:9b:d2:7c:f2:e8:74:15:00:d9:65:ce:2c:b3: 69:53:c9:c7:b7:d0:28:34:9f:7f:4b:c2:b0:42:9f: e1:52:11:0c:61:5c:a5:fc:ba:82:b9:6c:42:9d:fa: 2c:d5:14:25:11:4a:ba:c7:af:78:50:c0:ea:04:2a: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:1E:6C:6C:D6:2B:A7:AE:FB:91:94:CF:D4:40:78:5D:B8:D2:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7a9bffe3-432a-3fd8-9790-8603f8d933fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv4: 170.39.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a5:bd:68:5f:06:50:6e:af:1a:4d:f0:af:6d:6a:7c:93:6c: bd:0a:70:04:24:e5:46:72:d8:82:a1:31:3e:3b:3b:e8:1c:eb: d1:99:3d:b8:05:0f:9c:e5:07:f2:78:e1:91:d3:fb:e3:25:a1: 8d:d7:cd:a4:d5:8c:4d:53:e6:82:22:b6:8e:81:32:42:f2:04: 2b:0f:21:5a:94:40:49:22:6e:37:00:e1:ae:f1:ad:49:50:c7: ac:24:f7:00:85:20:02:53:0f:92:af:a1:09:9b:a3:90:4a:ad: 44:3e:b0:5d:a1:52:28:50:e0:42:62:10:10:96:c2:d7:0a:d8: 6f:80:f6:29:81:67:aa:f5:a1:ed:3b:dc:1e:1e:cd:9d:42:bd: ee:a0:2d:77:e4:77:83:54:35:35:55:5f:d1:74:31:46:0a:16: 91:5c:ec:d1:2f:53:ae:6d:5d:ab:24:5b:b2:cb:1d:12:57:76: 14:82:f4:21:ac:13:c4:66:47:2a:6d:54:ce:e5:3d:20:36:a4: 1f:b7:4d:86:b9:81:12:ef:35:dd:48:57:81:39:bb:48:d8:bb: ee:f7:5f:79:43:c8:83:77:6a:d6:ec:4c:c2:37:d4:11:ec:31: ba:58:d5:cf:cf:be:66:fa:f0:5e:58:2c:90:18:14:e3:f9:94: 87:73:cc:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN4mVluNUKjr4pCMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NmI4ZWRhZjUtNWU4My00OGIzLTgxMzEtYjA3MDFiZjk0ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OXZHM9OGpZ5x11AoToPYZryoIn1U462tuKT 6eVsx4KwXzURMwIR1Ax1tFFpKQtNQUOpRLxpgBpOClKffsVjnEBM6VWEs4mHvLm8 yjfYKFbwGwSC2hkw8KZ9neOuJkmTuDVDrBD68j10JHlx44Jc6vWVx/IChjBNgCXJ eL9OEjxSyVebCGVxb2QLXyabv6jlGmoUGV9b6rPhiGOV/F75KlvTB9wcucCpO+Xt 9/zgQ94oggPvmwIUhLBqZQ8HEfsQu7WXY5vSfPLodBUA2WXOLLNpU8nHt9AoNJ9/ S8KwQp/hUhEMYVyl/LqCuWxCnfos1RQlEUq6x694UMDqBCrosQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlIHmxs1iunrvuRlM/UQHhduNLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvN2E5YmZmZTMtNDMyYS0z ZmQ4LTk3OTAtODYwM2Y4ZDkzM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqidUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSlvWhfBlBurxpN8K9tanyTbL0KcAQk5UZy2IKhMT47O+gc69GZPbgF D5zlB/J44ZHT++MloY3XzaTVjE1T5oIito6BMkLyBCsPIVqUQEkibjcA4a7xrUlQ x6wk9wCFIAJTD5KvoQmbo5BKrUQ+sF2hUihQ4EJiEBCWwtcK2G+A9imBZ6r1oe07 3B4ezZ1Cve6gLXfkd4NUNTVVX9F0MUYKFpFc7NEvU65tXaskW7LLHRJXdhSC9CGs E8RmRyptVM7lPSA2pB+3TYa5gRLvNd1IV4E5u0jYu+73X3lDyIN3atbsTMI31BHs MbpY1c/Pvmb68F5YLJAYFOP5lIdzzLE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:59 2025 by rpki-client