$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa File: 0c08ffb5-9234-3de8-badf-f6244630e256.roa (raw, json) Hash identifier: w2fB7fqfLCg8N/7nRXVYQAiLE++QSJYuRoSE4UEyc6k= Subject key identifier: 4C:A1:8D:37:2C:C4:28:CE:BE:4B:D4:81:B5:11:2B:E0:9F:E4:B3:9E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BAA97B08C6DF84DF24F7B8000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 170.85.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b0:8c:6d:f8:4d:f2:4f:7b:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=0ef74161-7544-49b3-b2eb-aa7d0da969fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:07:ec:55:09:30:44:91:64:0c:58:02:38: 80:2d:17:dc:72:30:ac:04:9f:77:e3:34:ae:79:1c: 87:18:a0:d9:c3:0b:f3:e3:43:68:66:8d:36:f0:3b: 01:6c:ce:37:55:31:5a:fe:a0:e9:f1:36:cd:73:fd: e0:09:a8:54:56:f0:3e:b9:39:d7:ed:02:27:53:e8: 7e:14:c8:8b:a4:0c:d4:0b:1a:53:3e:cc:bd:09:ab: 4a:cd:55:8f:86:f3:56:0c:87:f7:60:3e:80:e4:1c: 8a:1e:c1:d4:f5:a5:db:6a:20:ef:da:09:77:cf:14: 85:77:eb:a1:00:5a:82:d8:7d:ef:20:cf:c0:f5:05: bf:e1:f1:b4:66:71:4b:2a:74:cc:c2:6e:de:76:c2: d8:8a:60:b6:fc:4a:a9:93:87:45:60:9e:4a:4b:8b: 32:ee:67:ea:01:f3:d7:e7:0e:49:e6:59:76:ba:15: 8d:cc:f0:5c:93:51:94:44:c4:83:1a:42:05:16:8f: 38:ca:87:66:61:9e:67:69:db:87:2b:f4:c1:58:d8: 15:70:da:a3:4e:60:c8:9b:9d:75:f3:50:2f:6a:36: 73:64:81:65:b2:59:87:af:8f:af:a1:00:63:82:81: 35:d5:bc:76:1a:0a:30:19:99:34:11:fd:10:c7:00: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A1:8D:37:2C:C4:28:CE:BE:4B:D4:81:B5:11:2B:E0:9F:E4:B3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0c08ffb5-9234-3de8-badf-f6244630e256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:15:66:4c:43:3f:cb:4e:4d:d9:df:9d:e9:8e:0e:26:6d:a4: 41:41:f8:14:d0:db:50:00:1f:e0:c0:ad:eb:15:7c:45:dd:d6: 1e:4b:d6:1e:c7:11:87:03:df:0a:c6:e3:d5:b9:df:17:95:32: 7f:45:c2:d7:5e:2d:7f:3e:3a:01:fc:20:7c:7d:81:37:c1:98: 45:53:cf:66:13:dc:4f:f5:66:66:5a:7a:13:ea:50:71:7a:82: cf:b5:ac:48:f2:ed:e2:a7:b3:2f:ea:0b:4a:4d:76:64:9c:5b: 6a:40:a3:6b:b5:04:1b:02:b2:c2:b8:14:4c:af:81:e8:bf:87: 49:49:ce:7d:df:64:3d:50:92:90:8a:1d:bf:a4:b4:14:13:18: a2:93:cb:89:2e:8a:fc:89:a9:8a:e6:7f:4c:a6:15:d9:0e:82: 12:72:d1:26:2d:06:26:bf:37:2a:6d:22:1f:2b:c9:f1:3b:1d: 37:d3:2b:6a:25:89:47:03:7f:4c:7c:a6:db:bf:9b:5c:46:30: 40:df:81:0f:96:e8:ef:5e:bf:8f:74:c2:33:32:ee:bb:32:5e: 4e:d8:2f:95:0f:f9:98:aa:71:57:68:01:14:fd:04:d1:c2:9c: 07:ba:c7:f5:94:e7:f1:78:73:e0:b5:c8:74:e9:09:4b:f1:ec: 99:a4:e2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7CMbfhN8k97gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MGVmNzQxNjEtNzU0NC00OWIzLWIyZWItYWE3ZDBkYTk2OWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrYH7FUJMESRZAxYAjiALRfccjCsBJ934zSu eRyHGKDZwwvz40NoZo028DsBbM43VTFa/qDp8TbNc/3gCahUVvA+uTnX7QInU+h+ FMiLpAzUCxpTPsy9CatKzVWPhvNWDIf3YD6A5ByKHsHU9aXbaiDv2gl3zxSFd+uh AFqC2H3vIM/A9QW/4fG0ZnFLKnTMwm7edsLYimC2/Eqpk4dFYJ5KS4sy7mfqAfPX 5w5J5ll2uhWNzPBck1GURMSDGkIFFo84yodmYZ5naduHK/TBWNgVcNqjTmDIm511 81AvajZzZIFlslmHr4+voQBjgoE11bx2GgowGZk0Ef0QxwDT7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyhjTcsxCjOvkvUgbURK+Cf5LOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGMwOGZmYjUtOTIzNC0z ZGU4LWJhZGYtZjYyNDQ2MzBlMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwVZkxDP8tOTdnfnemODiZtpEFB+BTQ21AAH+DAresVfEXd1h5L1h7H EYcD3wrG49W53xeVMn9FwtdeLX8+OgH8IHx9gTfBmEVTz2YT3E/1ZmZaehPqUHF6 gs+1rEjy7eKnsy/qC0pNdmScW2pAo2u1BBsCssK4FEyvgei/h0lJzn3fZD1QkpCK Hb+ktBQTGKKTy4kuivyJqYrmf0ymFdkOghJy0SYtBia/NyptIh8ryfE7HTfTK2ol iUcDf0x8ptu/m1xGMEDfgQ+W6O9ev490wjMy7rsyXk7YL5UP+ZiqcVdoART9BNHC nAe6x/WU5/F4c+C1yHTpCUvx7Jmk4tQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:04 2025 by rpki-client