$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d61c73f-5f3e-384e-a032-d147485deb5e.roa File: 0d61c73f-5f3e-384e-a032-d147485deb5e.roa (raw, json) Hash identifier: bjaOPc1JNJR9HWX+cX5ksGPD7m4J88DlSc24KZHbQK4= Subject key identifier: F1:54:81:59:B1:33:1B:71:5E:BE:25:93:52:84:7C:0B:83:F2:95:DA Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0493E6CA03A82F5C2B80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d61c73f-5f3e-384e-a032-d147485deb5e.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:04:93:e6:ca:03:a8:2f:5c:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=cb2969cb-443d-4ea5-ac8d-03325baa8b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:8b:82:2a:b5:de:0c:a0:70:af:c4:68:a9: 06:fd:c4:9f:49:f2:a4:84:57:c6:89:a1:2f:04:fe: c0:a1:be:79:6e:a6:21:2e:b9:6f:59:94:da:94:17: 90:d1:89:f3:78:67:b9:c5:de:18:33:fd:ff:ac:6e: 5c:29:4e:26:b5:93:93:62:1e:78:03:04:6d:8a:92: 82:e0:fd:ef:f5:0c:09:23:10:0c:6d:25:c4:d4:a8: d6:2c:3a:66:73:15:1b:93:7d:6d:8a:76:07:e3:0d: 75:be:fa:16:b4:8b:50:91:bc:9b:58:ef:17:bf:c6: 7d:2d:52:a5:a0:fc:c2:df:9f:c3:df:ad:e9:f6:be: 59:c6:d0:ed:77:92:bf:6b:69:ca:d7:b0:7b:4e:56: 95:94:9a:61:e2:02:36:60:53:05:63:b1:ab:08:3e: 7d:42:6b:a0:12:5d:3d:97:10:90:a2:80:c7:1a:ec: b1:8f:c7:ed:28:07:52:ca:6d:51:6f:e5:11:17:9c: 38:dc:d2:21:63:55:50:07:ff:5c:17:ee:48:36:1e: cd:04:a5:ec:36:65:75:9c:15:1b:96:d3:24:be:db: b8:8c:82:a6:6a:59:c4:f4:83:6a:f1:5e:77:d3:e4: 38:c5:ae:a6:c2:1b:cd:2e:1f:91:97:05:78:62:fb: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:81:59:B1:33:1B:71:5E:BE:25:93:52:84:7C:0B:83:F2:95:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d61c73f-5f3e-384e-a032-d147485deb5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:50:c5:0b:fd:91:d7:0a:23:d8:6b:17:fb:fc:11:59:e4:6a: 72:7d:15:f6:b1:a3:c4:ac:cf:c9:87:58:84:18:40:24:0a:cb: ab:cb:69:c6:95:9d:eb:23:f6:0e:38:a6:ef:43:5b:35:c2:ff: e8:5b:6a:65:c0:e1:73:dc:37:62:3f:04:92:ab:52:4d:6b:65: 8a:48:2d:ec:0e:41:ef:a6:c9:46:11:e7:38:d1:50:40:da:c6: c8:4a:31:99:5a:9f:ef:81:4b:59:a2:e2:88:11:b4:eb:bd:be: 75:ef:11:66:32:b7:4e:e8:57:2a:73:03:7a:d9:60:0e:ec:44: d4:ca:59:17:d0:17:28:06:da:f9:35:6f:e4:06:01:05:24:67: 10:af:e3:fa:c9:40:5f:4c:88:00:cc:47:dc:7d:4a:8d:98:00: e3:9b:c9:af:b8:ac:65:66:83:7f:08:26:b1:20:77:32:f2:9f: 01:bb:a0:88:6a:90:50:62:52:81:93:0b:de:33:b0:fe:fe:08: 94:d1:b6:cd:64:b0:ea:ef:b5:94:99:b3:5f:5f:af:89:56:7a: a6:25:5d:72:98:d4:38:af:89:3e:2c:98:49:38:7e:ce:c4:ca: 06:62:b2:2a:92:22:57:9e:21:96:71:01:4d:e1:5d:4e:97:fb: ee:8b:ac:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQST5soDqC9cK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk Y2IyOTY5Y2ItNDQzZC00ZWE1LWFjOGQtMDMzMjViYWE4YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKaLgiq13gygcK/EaKkG/cSfSfKkhFfGiaEv BP7Aob55bqYhLrlvWZTalBeQ0YnzeGe5xd4YM/3/rG5cKU4mtZOTYh54AwRtipKC 4P3v9QwJIxAMbSXE1KjWLDpmcxUbk31tinYH4w11vvoWtItQkbybWO8Xv8Z9LVKl oPzC35/D363p9r5ZxtDtd5K/a2nK17B7TlaVlJph4gI2YFMFY7GrCD59QmugEl09 lxCQooDHGuyxj8ftKAdSym1Rb+URF5w43NIhY1VQB/9cF+5INh7NBKXsNmV1nBUb ltMkvtu4jIKmalnE9INq8V530+Q4xa6mwhvNLh+RlwV4YvsW7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFUgVmxMxtxXr4lk1KEfAuD8pXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGQ2MWM3M2YtNWYzZS0z ODRlLWEwMzItZDE0NzQ4NWRlYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtQxQv9kdcKI9hrF/v8EVnkanJ9Ffaxo8Ssz8mHWIQYQCQKy6vLacaV nesj9g44pu9DWzXC/+hbamXA4XPcN2I/BJKrUk1rZYpILewOQe+myUYR5zjRUEDa xshKMZlan++BS1mi4ogRtOu9vnXvEWYyt07oVypzA3rZYA7sRNTKWRfQFygG2vk1 b+QGAQUkZxCv4/rJQF9MiADMR9x9So2YAOObya+4rGVmg38IJrEgdzLynwG7oIhq kFBiUoGTC94zsP7+CJTRts1ksOrvtZSZs19fr4lWeqYlXXKY1DiviT4smEk4fs7E ygZisiqSIleeIZZxAU3hXU6X++6LrNk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:05 2025 by rpki-client