$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7d3d713c-cc60-3241-9e21-c98ee285d28c.roa File: 7d3d713c-cc60-3241-9e21-c98ee285d28c.roa (raw, json) Hash identifier: YvRFtroXyyhqk47wQeaRglt96j/QoIwJl3K71ddxRmo= Subject key identifier: C6:25:71:72:11:6E:1C:21:4E:64:55:E3:4E:7D:29:E0:01:5E:57:BB Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Certificate serial: 010D0C9F4328584B0B76AA3EC7C974D3ACD55400 Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7d3d713c-cc60-3241-9e21-c98ee285d28c.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 170.39.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:aa:3e:c7:c9:74:d3:ac:d5:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=47b1762c-deb2-4f1e-8537-e68e4d1a59e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:5a:5f:6d:c9:c9:8a:7d:c1:a3:55:9d:90: 31:11:c6:e6:4e:8b:01:08:ff:6c:7d:70:5a:5b:db: b4:ec:b4:28:8a:71:98:cf:98:37:0d:0d:4a:cf:af: 10:c9:a9:24:0f:e8:76:40:17:ea:b3:fc:da:8a:08: 04:42:bc:cc:d5:d1:51:30:44:10:ee:f9:0a:79:4d: 5d:2f:c9:01:1c:fd:b4:cb:a9:e2:b0:94:0a:fa:ff: 3e:db:d9:62:05:f4:61:27:14:44:04:b1:e0:dc:eb: fb:a2:cd:db:b3:cd:5f:be:ca:3a:2e:09:8c:10:71: cb:ed:14:de:74:22:6a:a4:d9:28:81:7a:5a:0c:7f: 35:d0:27:6b:71:60:bf:4f:a3:00:29:a3:56:cd:b8: d4:b8:50:71:f5:47:a1:73:78:d6:78:80:7d:d9:ff: 8f:b4:67:88:73:6d:57:7b:0c:e5:77:3d:54:98:3e: 82:db:5f:da:15:70:22:29:13:c9:e7:85:05:77:97: 82:aa:7c:31:35:64:01:2c:bc:4c:2b:47:45:14:a0: da:a1:78:f3:28:4b:bb:d3:61:15:9a:b0:65:a2:a0: ee:ab:1a:9e:a7:ab:3a:c6:57:d2:23:e0:53:8f:91: 88:58:a4:2c:a8:df:e2:72:f6:70:fd:c7:bd:7c:7e: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:71:72:11:6E:1C:21:4E:64:55:E3:4E:7D:29:E0:01:5E:57:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/7d3d713c-cc60-3241-9e21-c98ee285d28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl X509v3 Authority Key Identifier: keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer sbgp-ipAddrBlock: critical IPv4: 170.39.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:21:56:e3:2a:1b:b6:a9:38:63:dd:fe:c2:7b:f3:45:c6:40: 13:c2:e4:a6:b8:f2:44:69:62:90:66:cd:66:42:ca:d2:be:9e: ca:12:a0:1c:20:1e:8a:89:cc:20:06:cb:1f:1b:c0:37:62:a2: 8b:11:b7:ae:b1:67:50:e8:73:27:81:71:31:a9:ea:6d:40:c9: 56:d0:7d:62:9f:e1:a8:f5:70:24:ae:f2:99:2d:03:43:f2:04: 92:8b:a0:aa:f9:f2:fb:6a:7b:d8:7e:6e:84:2f:b4:59:26:06: 37:33:90:a5:6e:83:7b:d8:4e:af:d4:0b:df:af:96:e0:c6:7d: ed:a5:fa:3c:c2:13:91:b2:b8:7e:d9:aa:95:0d:62:6e:2f:60: 5d:13:c6:55:b3:83:ed:34:67:1e:b0:17:36:b4:c2:d5:a3:7f: 80:c6:33:8b:32:9f:cc:3d:c7:80:03:8b:33:99:b2:d7:96:98: ea:54:e2:b8:2c:8e:e0:85:31:e7:10:24:a3:e8:4b:5c:89:b0: fb:cc:8b:91:e3:5a:9e:26:5c:8c:31:ce:04:8e:36:f9:8c:b6: e1:c1:3d:95:a0:07:52:85:ff:80:3c:b0:e6:0e:4f:92:1a:eb: 50:bb:06:4b:2c:8f:f2:6e:3a:95:0a:f1:ee:55:5e:ad:94:b9: da:57:53:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqo+x8l006zVVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3 MTQ0MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NDdiMTc2MmMtZGViMi00ZjFlLTg1MzctZTY4ZTRkMWE1OWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SRaX23JyYp9waNVnZAxEcbmTosBCP9sfXBa W9u07LQoinGYz5g3DQ1Kz68QyakkD+h2QBfqs/zaiggEQrzM1dFRMEQQ7vkKeU1d L8kBHP20y6nisJQK+v8+29liBfRhJxREBLHg3Ov7os3bs81fvso6LgmMEHHL7RTe dCJqpNkogXpaDH810CdrcWC/T6MAKaNWzbjUuFBx9Uehc3jWeIB92f+PtGeIc21X ewzldz1UmD6C21/aFXAiKRPJ54UFd5eCqnwxNWQBLLxMK0dFFKDaoXjzKEu702EV mrBloqDuqxqep6s6xlfSI+BTj5GIWKQsqN/icvZw/ce9fH7ktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYlcXIRbhwhTmRV4059KeABXle7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvN2QzZDcxM2MtY2M2MC0z MjQxLTllMjEtYzk4ZWUyODVkMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5 NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2 NWRjOTcxNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqidVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABohVuMqG7apOGPd/sJ780XGQBPC5Ka48kRpYpBmzWZCytK+nsoSoBwg HoqJzCAGyx8bwDdioosRt66xZ1DocyeBcTGp6m1AyVbQfWKf4aj1cCSu8pktA0Py BJKLoKr58vtqe9h+boQvtFkmBjczkKVug3vYTq/UC9+vluDGfe2l+jzCE5GyuH7Z qpUNYm4vYF0TxlWzg+00Zx6wFza0wtWjf4DGM4syn8w9x4ADizOZsteWmOpU4rgs juCFMecQJKPoS1yJsPvMi5HjWp4mXIwxzgSONvmMtuHBPZWgB1KF/4A8sOYOT5Ia 61C7Bkssj/JuOpUK8e5VXq2UudpXU/g= -----END CERTIFICATE-----Generated at Tue Nov 4 23:43:14 2025 by rpki-client