$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0e12af72-9661-37cd-b0b1-2e0126864788.roa File: 0e12af72-9661-37cd-b0b1-2e0126864788.roa (raw, json) Hash identifier: +hkGoa1//EePj2kckTdKEgWFferuSon01SGvaE3lBT0= Subject key identifier: C4:C3:5F:0B:6C:2B:6E:7A:86:F4:2A:AC:C1:21:CD:17:8D:04:35:DE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D00020CF994A7295C6EC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0e12af72-9661-37cd-b0b1-2e0126864788.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:00:02:0c:f9:94:a7:29:5c:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=588cfa7f-a077-45fb-bdbf-9b1df1103d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:57:1f:04:c8:74:d3:27:fb:c4:91:17:a1: ac:5c:5a:9e:a0:a1:ee:2e:28:43:65:a2:cd:a7:cc: 3b:f9:e5:44:d7:a8:c2:2a:17:c7:20:00:5f:25:b1: db:9d:2b:45:c5:fc:4a:9e:b4:09:ba:e1:1e:27:eb: 66:da:76:1b:92:d3:c6:53:47:89:0e:20:47:74:12: a5:bf:97:c1:2f:c8:a9:d1:48:a4:71:16:e0:d2:6a: 7c:f0:3f:23:c8:5e:6b:84:50:e9:c4:17:75:1f:aa: f9:8f:31:bc:48:cf:77:59:89:18:08:48:82:ac:24: db:79:38:47:4b:a2:db:1a:e2:4d:15:1b:b9:ba:92: e3:59:f9:f8:99:66:e9:2f:30:8e:88:ae:e7:8f:82: 24:3c:58:29:ff:c3:b0:ba:3f:95:45:ae:35:ff:59: 8d:fe:a9:7d:f6:46:03:23:c7:dd:9f:a3:11:1e:71: ee:ca:ce:a0:36:e0:f3:f7:4a:2d:e9:7d:62:b7:e7: be:4a:02:6e:ea:80:24:d8:4c:40:fa:8d:ad:24:53: 6c:64:3b:a7:16:81:94:0b:8f:29:04:fd:1a:70:9f: 65:2a:0d:c4:a3:be:d7:9e:10:7d:52:09:d9:39:13: 93:cc:b1:0f:8e:78:93:2b:d4:5c:3b:01:3a:8a:ed: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C3:5F:0B:6C:2B:6E:7A:86:F4:2A:AC:C1:21:CD:17:8D:04:35:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0e12af72-9661-37cd-b0b1-2e0126864788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b6:6a:e3:ef:16:af:28:75:11:7c:39:1c:98:a5:49:37:80: 7c:4f:07:a8:6b:fd:59:e4:0f:01:78:6c:91:0b:c7:ff:8f:a7: ec:8a:6a:f1:fc:d0:aa:1c:07:c8:d0:57:01:93:46:2f:d4:4f: 0e:31:1e:e5:e6:5b:ed:bc:cf:9e:e5:b5:cd:0f:e3:bd:70:5d: 82:50:d8:0e:7a:d3:e5:d6:b2:93:b2:b5:46:b1:0f:84:b1:90: 53:b1:b5:96:ce:ee:f4:a0:52:ca:ec:25:c5:fa:4d:1b:8f:d5: c2:fe:1b:98:ae:c1:c1:2c:9d:29:fa:01:a2:3d:43:45:6a:30: 2a:5c:db:30:c4:2b:b8:1a:1d:8a:97:1c:f7:17:4e:dd:9d:28: 8d:d9:e1:8a:e9:3f:61:3b:c6:c5:c0:0f:f6:f6:22:b3:0b:b9: 98:84:82:5f:6b:38:42:a2:de:9b:e3:63:9c:ff:ef:1c:04:60: 4f:dd:6c:89:5f:2f:ed:19:b0:52:15:49:5e:9a:d2:3d:9f:b9: 40:15:a4:9d:ec:6f:49:9d:68:bd:15:66:7d:5a:01:1f:6f:c8: 71:b1:9e:0b:21:a4:06:a2:1a:01:aa:39:d1:3e:a2:77:d8:83: f0:5e:1c:3a:12:38:80:10:64:fa:c8:57:15:7e:2f:dd:4c:87: 94:7f:79:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQACDPmUpylcbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NTg4Y2ZhN2YtYTA3Ny00NWZiLWJkYmYtOWIxZGYxMTAzZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfdXHwTIdNMn+8SRF6GsXFqeoKHuLihDZaLN p8w7+eVE16jCKhfHIABfJbHbnStFxfxKnrQJuuEeJ+tm2nYbktPGU0eJDiBHdBKl v5fBL8ip0UikcRbg0mp88D8jyF5rhFDpxBd1H6r5jzG8SM93WYkYCEiCrCTbeThH S6LbGuJNFRu5upLjWfn4mWbpLzCOiK7nj4IkPFgp/8Owuj+VRa41/1mN/ql99kYD I8fdn6MRHnHuys6gNuDz90ot6X1it+e+SgJu6oAk2ExA+o2tJFNsZDunFoGUC48p BP0acJ9lKg3Eo77XnhB9UgnZOROTzLEPjniTK9RcOwE6iu12PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTDXwtsK256hvQqrMEhzReNBDXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGUxMmFmNzItOTY2MS0z N2NkLWIwYjEtMmUwMTI2ODY0Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu2auPvFq8odRF8ORyYpUk3gHxPB6hr/VnkDwF4bJELx/+Pp+yKavH8 0KocB8jQVwGTRi/UTw4xHuXmW+28z57ltc0P471wXYJQ2A560+XWspOytUaxD4Sx kFOxtZbO7vSgUsrsJcX6TRuP1cL+G5iuwcEsnSn6AaI9Q0VqMCpc2zDEK7gaHYqX HPcXTt2dKI3Z4YrpP2E7xsXAD/b2IrMLuZiEgl9rOEKi3pvjY5z/7xwEYE/dbIlf L+0ZsFIVSV6a0j2fuUAVpJ3sb0mdaL0VZn1aAR9vyHGxngshpAaiGgGqOdE+onfY g/BeHDoSOIAQZPrIVxV+L91Mh5R/eWY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:52:23 2025 by rpki-client