$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1d7923fa-b95c-3494-b5e9-d874f48e58bd.roa File: 1d7923fa-b95c-3494-b5e9-d874f48e58bd.roa (raw, json) Hash identifier: 4ThOuLqSuIlZkwokJH1DCfEzCjZfWBqsjnRkrr86I4M= Subject key identifier: 21:E5:76:99:81:5F:A1:04:26:B0:0C:93:FA:4C:29:50:F7:B4:7F:21 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0208518F1426ECB4AB80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1d7923fa-b95c-3494-b5e9-d874f48e58bd.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:02:08:51:8f:14:26:ec:b4:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=8df938bc-dc28-4250-9e7b-36350cda284b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:f8:0d:c6:d1:10:82:74:86:a3:0c:4f:97: 7c:95:45:9d:f2:43:d2:c6:ec:21:33:e3:c3:d4:d4: 68:af:82:da:69:9f:bc:aa:18:89:44:08:33:5a:58: 33:d7:57:19:0a:8a:a2:40:04:9a:d4:83:09:6d:43: c0:75:cb:e3:2b:fb:ad:f8:d3:da:5c:3b:4a:56:d5: 86:67:26:16:b0:d9:71:24:19:3f:aa:f5:16:82:bc: ca:a8:97:43:49:53:0f:7c:8e:27:17:10:e2:b1:6d: 3d:bd:f8:bb:3c:92:09:35:27:99:73:c2:b2:63:c8: 94:00:80:57:b3:15:ae:f2:65:8d:d6:23:e8:ab:3c: 2a:8b:8c:b0:8d:15:b5:98:c8:14:6e:70:66:88:07: 2a:5b:e3:30:db:7e:7a:63:09:fe:59:1c:18:f9:bf: cd:af:6d:15:c4:f3:a2:6b:49:4f:7d:af:0b:86:5b: 4a:dc:43:58:2c:01:8d:d9:96:da:5c:3d:b6:9b:f9: b1:e1:c2:e7:32:df:79:6f:6e:f0:0a:51:4c:1b:1e: 9b:3a:7a:40:f4:db:00:10:d7:cb:d6:6a:40:0c:8f: 3e:ce:74:88:c4:f8:e2:08:f8:89:70:57:99:92:de: 7c:b2:d1:d4:5a:de:c9:21:32:b3:00:22:9e:82:3f: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E5:76:99:81:5F:A1:04:26:B0:0C:93:FA:4C:29:50:F7:B4:7F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1d7923fa-b95c-3494-b5e9-d874f48e58bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5f:35:e0:0f:81:b7:f5:49:6b:b8:ca:ee:32:42:6c:f5:ed: b9:3d:71:28:88:2d:95:c5:96:f5:87:77:5c:fc:f8:50:99:b2: 8e:52:a4:f9:c3:24:1a:5d:05:e4:df:28:41:b5:f0:e9:94:09: af:db:c8:96:2f:85:a8:bb:b4:d1:48:7b:65:18:e7:ed:98:d8: 97:d7:67:3f:19:70:11:85:cb:79:fe:d5:90:8a:a2:d4:0d:f6: dc:fd:d0:76:4d:f9:ae:24:c2:49:78:2d:25:32:62:70:64:ba: 27:5f:8b:6c:54:36:cb:aa:8d:90:f5:1e:20:08:50:c3:55:f4: 75:4a:22:33:ee:f8:8f:46:b9:4b:19:00:98:cd:40:71:85:80: a5:71:30:03:3d:0d:87:5d:35:d5:07:ae:03:b0:d4:0f:74:f8: 60:d0:ff:94:4d:8f:0f:9c:0f:29:a9:cf:59:d9:ed:94:85:74: 22:d5:5e:e7:c0:a1:b3:8c:64:4e:ff:cc:f7:1a:03:c7:57:46: 0e:ea:82:66:e2:5b:85:6a:bf:ea:cd:ad:ed:09:ec:44:ba:5f: a8:95:2c:80:10:06:fe:dc:86:5f:cf:46:11:98:e1:23:dd:33: 83:c3:fd:a1:ab:d6:1c:5a:a1:ae:25:07:61:8e:64:f8:22:07: b0:4d:ba:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQIIUY8UJuy0q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OGRmOTM4YmMtZGMyOC00MjUwLTllN2ItMzYzNTBjZGEyODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JH4DcbREIJ0hqMMT5d8lUWd8kPSxuwhM+PD 1NRor4LaaZ+8qhiJRAgzWlgz11cZCoqiQASa1IMJbUPAdcvjK/ut+NPaXDtKVtWG ZyYWsNlxJBk/qvUWgrzKqJdDSVMPfI4nFxDisW09vfi7PJIJNSeZc8KyY8iUAIBX sxWu8mWN1iPoqzwqi4ywjRW1mMgUbnBmiAcqW+Mw2356Ywn+WRwY+b/Nr20VxPOi a0lPfa8LhltK3ENYLAGN2ZbaXD22m/mx4cLnMt95b27wClFMGx6bOnpA9NsAENfL 1mpADI8+znSIxPjiCPiJcFeZkt58stHUWt7JITKzACKegj+9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHldpmBX6EEJrAMk/pMKVD3tH8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMWQ3OTIzZmEtYjk1Yy0z NDk0LWI1ZTktZDg3NGY0OGU1OGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBfNeAPgbf1SWu4yu4yQmz17bk9cSiILZXFlvWHd1z8+FCZso5SpPnD JBpdBeTfKEG18OmUCa/byJYvhai7tNFIe2UY5+2Y2JfXZz8ZcBGFy3n+1ZCKotQN 9tz90HZN+a4kwkl4LSUyYnBkuidfi2xUNsuqjZD1HiAIUMNV9HVKIjPu+I9GuUsZ AJjNQHGFgKVxMAM9DYddNdUHrgOw1A90+GDQ/5RNjw+cDympz1nZ7ZSFdCLVXufA obOMZE7/zPcaA8dXRg7qgmbiW4Vqv+rNre0J7ES6X6iVLIAQBv7chl/PRhGY4SPd M4PD/aGr1hxaoa4lB2GOZPgiB7BNugY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:12 2025 by rpki-client