$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa File: 06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa (raw, json) Hash identifier: eb52hGJo8Mz62FW45T1CjzaOAdyqerpamB8v7zor3pQ= Subject key identifier: 49:0E:D0:AC:1E:93:B6:EE:F8:13:48:95:25:7C:1A:5E:44:E6:D4:C7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D010DE03291384C637800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:0d:e0:32:91:38:4c:63:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=49a04f30-2dd9-468c-819b-fb589414c725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:95:54:b3:4e:13:bc:b3:52:fe:e4:46:3e: e0:b7:d1:8f:6c:be:10:c4:5c:e7:33:3d:5e:a1:8c: e4:ee:5f:3a:e2:77:7b:72:40:c5:26:c7:ed:b0:e9: 8e:69:a9:aa:5c:e3:7d:4d:64:02:98:6a:04:49:db: 31:3b:e7:60:18:ea:47:10:a2:c8:32:bf:c0:c8:4e: cd:a1:5c:34:34:06:bf:23:27:e2:ca:03:db:2c:50: a3:be:20:9d:f7:5c:67:22:19:58:72:ce:26:bd:75: 2a:7d:4a:6e:c3:f8:6c:b1:0e:a7:40:23:f1:03:61: 88:f2:96:21:bd:95:ec:94:9d:ca:6d:a7:00:15:b7: e7:48:6e:a9:fd:7f:9e:be:da:00:1c:79:76:22:1f: eb:34:1b:27:90:36:e0:41:04:33:6c:2a:18:a4:a8: 75:0b:23:42:64:2a:8e:e4:1c:fc:5c:b5:d2:ef:c4: 47:8b:a3:08:52:ad:f5:4c:0a:6c:e8:e3:e5:0a:14: dc:77:58:2d:2d:42:7c:71:bd:2b:17:9a:52:3b:9c: 15:97:37:0d:5e:6d:93:16:89:9d:85:32:65:9f:be: 5b:e7:82:d8:54:17:41:14:74:ce:e5:33:1f:5c:a7: 4d:e1:fa:70:96:e1:c3:9a:23:c7:e1:6a:17:45:4d: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0E:D0:AC:1E:93:B6:EE:F8:13:48:95:25:7C:1A:5E:44:E6:D4:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/06f1afa8-cf6b-3ffb-8c49-179a495b8486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ac:a4:61:cd:c5:db:d2:a9:f2:ea:51:eb:f5:ee:51:2b:8e: 09:b5:d1:9b:5b:2f:4e:8b:c7:a7:15:4e:57:9a:ed:89:ce:88: 5b:58:56:a3:41:7e:08:bc:ad:ed:1e:e7:8d:d6:aa:c3:68:bf: 1f:36:04:b5:90:d1:e0:2e:d4:82:8d:0f:50:64:f5:0a:63:f9: 5d:87:51:85:e9:46:44:ed:76:cf:6d:38:b5:4d:38:16:d1:04: 37:3e:0b:3d:e4:4f:49:b4:b4:03:c3:65:ca:7f:cc:64:a7:8a: b4:77:94:72:1f:42:0e:86:64:7a:4a:de:23:cc:7c:41:4b:75: ff:0a:0d:67:68:dd:ce:70:e7:91:a5:a5:e0:cf:9e:5c:ed:8c: 1f:d4:28:09:79:40:8b:62:d0:92:92:da:3f:84:f2:77:79:e8: 1f:05:28:c1:72:08:ba:f3:dd:63:ed:26:ec:89:cf:b9:c2:00: 35:d1:39:91:b7:52:4b:92:13:e1:4d:65:b0:5a:7b:bd:e4:d6: dd:f9:7b:1d:0e:b4:9b:4d:d5:b4:ce:7c:8b:81:56:a1:51:47: 69:34:d5:6c:a1:41:52:45:02:ac:0d:8a:88:b6:25:b4:22:5e: 68:05:0a:a9:3c:a1:49:81:f8:dc:b0:4d:6c:aa:70:a2:53:1b: db:9a:23:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQEN4DKROExjeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NDlhMDRmMzAtMmRkOS00NjhjLTgxOWItZmI1ODk0MTRjNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/GVVLNOE7yzUv7kRj7gt9GPbL4QxFznMz1e oYzk7l864nd7ckDFJsftsOmOaamqXON9TWQCmGoESdsxO+dgGOpHEKLIMr/AyE7N oVw0NAa/IyfiygPbLFCjviCd91xnIhlYcs4mvXUqfUpuw/hssQ6nQCPxA2GI8pYh vZXslJ3KbacAFbfnSG6p/X+evtoAHHl2Ih/rNBsnkDbgQQQzbCoYpKh1CyNCZCqO 5Bz8XLXS78RHi6MIUq31TAps6OPlChTcd1gtLUJ8cb0rF5pSO5wVlzcNXm2TFomd hTJln75b54LYVBdBFHTO5TMfXKdN4fpwluHDmiPH4WoXRU0vswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkO0Kwek7bu+BNIlSV8Gl5E5tTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDZmMWFmYTgtY2Y2Yi0z ZmZiLThjNDktMTc5YTQ5NWI4NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACspGHNxdvSqfLqUev17lErjgm10ZtbL06Lx6cVTlea7YnOiFtYVqNB fgi8re0e543WqsNovx82BLWQ0eAu1IKND1Bk9Qpj+V2HUYXpRkTtds9tOLVNOBbR BDc+Cz3kT0m0tAPDZcp/zGSnirR3lHIfQg6GZHpK3iPMfEFLdf8KDWdo3c5w55Gl peDPnlztjB/UKAl5QIti0JKS2j+E8nd56B8FKMFyCLrz3WPtJuyJz7nCADXROZG3 UkuSE+FNZbBae73k1t35ex0OtJtN1bTOfIuBVqFRR2k01WyhQVJFAqwNioi2JbQi XmgFCqk8oUmB+NywTWyqcKJTG9uaI2k= -----END CERTIFICATE-----Generated at Wed Nov 5 08:40:33 2025 by rpki-client