$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa File: 1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa (raw, json) Hash identifier: 9stqIs/Gl9XTblzHdvnin0xwXAplMgVdZM0YDNggotg= Subject key identifier: 48:EC:B8:96:2B:2A:BF:1F:24:98:B8:A8:5E:50:35:51:AD:01:1A:54 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D01CB921EA0FCA56D5C90 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:cb:92:1e:a0:fc:a5:6d:5c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=22582ff7-e266-43a5-90c2-ba756f565a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:18:dc:17:c1:d4:44:80:cb:3b:a2:60:d2: 36:ab:e5:ce:12:d9:22:44:9f:e0:09:1b:fb:76:90: c8:56:f4:59:70:c8:11:f3:f6:db:a3:79:b7:c9:17: 6b:4a:a1:c6:57:3e:32:7f:0f:e5:d9:96:b1:6a:f6: 89:4d:e2:d3:1e:f6:47:cb:d1:e0:0b:b6:62:87:4e: 60:66:3c:9e:80:6c:13:f8:db:80:ff:df:be:79:44: 92:dd:81:a6:11:53:fb:a3:ad:a8:a2:83:42:be:04: 0c:1e:0a:12:db:c4:4a:1e:af:e1:d4:b0:8e:80:bc: 96:66:7f:b3:34:90:c9:a8:60:6a:b3:59:9a:3d:23: 01:01:29:ec:61:04:aa:c1:ad:b5:c8:68:3d:91:d1: fb:dd:25:46:b7:a7:75:0e:f0:83:c6:d6:47:55:ec: 3c:6a:d0:be:86:75:b8:8b:f4:43:5f:05:7b:d2:32: e7:7c:bb:de:a8:57:e4:09:16:29:bc:68:ed:ac:e7: 57:25:f6:f9:c2:ef:6b:a6:f0:3e:9e:c0:e3:84:40: d5:e7:9d:bf:59:78:13:49:b8:e8:26:d2:a8:8f:22: d6:40:02:9d:75:0b:31:36:96:8a:65:e4:fa:8a:94: ba:a5:89:9b:cc:e1:90:ea:98:c7:d0:76:6e:53:93: 8d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EC:B8:96:2B:2A:BF:1F:24:98:B8:A8:5E:50:35:51:AD:01:1A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1cf555ca-a9bd-3e9e-abbe-f242d720db3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6b:ad:54:17:34:08:1a:eb:03:f8:ed:e8:f4:5f:5f:96:69: 54:06:75:cb:13:f4:58:d9:57:5c:24:fd:33:77:e6:b4:ee:cb: f2:7c:b6:dc:d0:dd:9c:dd:9d:b8:06:3c:af:77:ed:16:c5:11: 58:d4:6a:9e:a7:31:75:d5:38:78:e6:1c:a5:50:c9:f5:56:33: 87:77:69:83:d3:37:6c:63:15:20:56:9d:08:80:22:af:d3:38: eb:ff:cc:82:2a:76:cc:76:05:62:35:48:d0:0a:37:b3:2f:46: 0c:ca:39:60:25:cf:7e:07:63:c9:df:23:3d:a8:9a:6b:f5:61: 01:9f:09:a2:dc:57:8e:d1:88:e7:af:2c:41:d3:66:cc:b5:76: 4b:73:18:b5:ff:96:ac:1a:dd:c5:9d:39:d5:a9:0d:2b:2c:bb: 35:ee:c4:a3:b2:05:11:46:1f:26:10:c3:49:31:d8:72:1d:cb: ae:57:93:47:1e:8e:4a:0f:88:00:4e:ad:b7:08:e0:2e:f8:4d: 60:2d:eb:2c:57:eb:a7:89:2e:8f:0d:56:44:f2:86:f6:b8:82: a8:32:7a:7a:5f:83:62:56:a1:f6:b3:e7:0a:8e:f0:8c:e0:98: 0a:c9:ef:01:f1:e5:10:9a:27:a8:00:bc:e2:6b:ba:6c:cf:2c: 48:98:57:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQHLkh6g/KVtXJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MjI1ODJmZjctZTI2Ni00M2E1LTkwYzItYmE3NTZmNTY1YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0cY3BfB1ESAyzuiYNI2q+XOEtkiRJ/gCRv7 dpDIVvRZcMgR8/bbo3m3yRdrSqHGVz4yfw/l2ZaxavaJTeLTHvZHy9HgC7Zih05g ZjyegGwT+NuA/9++eUSS3YGmEVP7o62oooNCvgQMHgoS28RKHq/h1LCOgLyWZn+z NJDJqGBqs1maPSMBASnsYQSqwa21yGg9kdH73SVGt6d1DvCDxtZHVew8atC+hnW4 i/RDXwV70jLnfLveqFfkCRYpvGjtrOdXJfb5wu9rpvA+nsDjhEDV552/WXgTSbjo JtKojyLWQAKddQsxNpaKZeT6ipS6pYmbzOGQ6pjH0HZuU5ONPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjsuJYrKr8fJJi4qF5QNVGtARpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMWNmNTU1Y2EtYTliZC0z ZTllLWFiYmUtZjI0MmQ3MjBkYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhrrVQXNAga6wP47ej0X1+WaVQGdcsT9FjZV1wk/TN35rTuy/J8ttzQ 3ZzdnbgGPK937RbFEVjUap6nMXXVOHjmHKVQyfVWM4d3aYPTN2xjFSBWnQiAIq/T OOv/zIIqdsx2BWI1SNAKN7MvRgzKOWAlz34HY8nfIz2ommv1YQGfCaLcV47RiOev LEHTZsy1dktzGLX/lqwa3cWdOdWpDSssuzXuxKOyBRFGHyYQw0kx2HIdy65Xk0ce jkoPiABOrbcI4C74TWAt6yxX66eJLo8NVkTyhva4gqgyenpfg2JWofaz5wqO8Izg mArJ7wHx5RCaJ6gAvOJrumzPLEiYV9g= -----END CERTIFICATE-----Generated at Wed Nov 5 04:15:45 2025 by rpki-client