$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2012a809-9833-3141-ad67-e748fd941160.roa File: 2012a809-9833-3141-ad67-e748fd941160.roa (raw, json) Hash identifier: kO6p+qgiPY2sBe++9i/VAj4W0/ObW9pkTNqdwiGUeYE= Subject key identifier: 1A:C9:BA:97:0A:78:0F:E0:61:E6:DB:85:DF:01:DC:A5:4A:16:3B:1B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D037FFE333D77C27C9900 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2012a809-9833-3141-ad67-e748fd941160.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:7f:fe:33:3d:77:c2:7c:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=81682267-53b6-4576-9f9b-6cb24999051f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9c:c9:27:2d:c5:f3:c9:10:81:83:63:0c:e9: 6e:58:8f:00:51:7b:db:de:a6:3b:3f:1b:10:bd:ed: 60:08:ad:33:a1:32:f6:65:08:0c:92:7b:8b:f3:a6: ef:5d:21:e1:81:e2:a9:39:2d:a7:5f:a9:9c:cb:3d: 22:3c:3e:b7:53:b0:f9:9f:a0:db:1c:84:ce:10:a6: 27:4a:44:6a:6e:0d:70:99:be:cb:d0:58:5b:4a:8a: a0:a3:ea:0d:ac:cb:d3:8d:09:56:4e:f5:07:3c:fc: 73:42:e5:c2:8b:c0:3a:88:d1:42:89:fd:e5:93:d5: e8:b1:2b:b9:7c:17:d5:f6:c7:86:ac:a9:22:ba:10: 81:f3:70:d9:fd:6e:ec:ed:ad:f0:c9:6b:09:2f:7e: 8a:81:a9:91:e5:1e:78:74:a6:6f:71:fa:28:68:e3: 82:28:96:da:75:b6:da:68:9f:d8:99:c2:c8:8f:8b: e2:06:11:b7:c3:33:cc:6c:4e:cf:d9:18:e9:5f:60: cd:24:43:e6:dd:31:5d:92:bb:7f:13:77:8d:e2:9d: b5:3b:39:c6:29:7d:42:8b:97:0c:34:9f:6d:70:b3: 79:40:fb:68:7f:88:00:c6:42:fc:3f:f5:75:4e:2b: 80:9b:16:c2:02:bc:cc:84:7b:c8:30:5b:3f:d5:bb: 30:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C9:BA:97:0A:78:0F:E0:61:E6:DB:85:DF:01:DC:A5:4A:16:3B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2012a809-9833-3141-ad67-e748fd941160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3f:38:3e:e9:3b:7a:3e:f7:7a:e8:4b:5d:73:b8:ee:95:7f: d3:70:17:5d:01:2d:d5:42:45:d4:d1:b4:75:9c:a9:b8:b1:a9: d0:45:a5:56:9b:83:b1:55:93:d8:9e:42:f3:bf:a7:91:b4:bf: d6:22:fe:61:3c:3e:03:34:5f:6b:53:4a:ae:4c:6f:05:4f:98: 62:2d:16:1a:fd:60:56:04:30:1f:d4:f6:aa:fa:1f:86:06:a3: 20:e5:c1:e2:c1:58:a5:44:bc:5d:43:0c:44:8c:b4:07:27:a6: 51:87:e9:94:4b:96:26:d5:44:e2:4b:bf:58:33:f0:17:03:67: 4e:64:5e:b4:aa:8a:0c:f9:aa:e6:60:1e:2f:76:ec:a0:5c:6c: 46:1c:c5:1c:7c:bd:3e:48:8f:b6:da:27:00:19:c1:84:29:bc: 36:85:7e:c3:1d:73:a2:fe:49:89:d4:20:3d:25:0e:f6:91:ca: 31:a1:cc:0c:b5:09:85:e3:8c:d9:0d:39:0c:3d:32:a0:55:33: 5d:d4:06:ae:d3:93:4e:60:0b:7b:4e:fb:53:54:4c:02:2f:8a: 9f:70:46:a5:6b:bf:38:9c:01:3e:4f:62:b8:ea:d7:3f:23:20: dc:f2:a2:20:49:0f:c5:e9:82:b3:67:8d:5b:73:95:20:ab:81: 7c:ba:fc:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQN//jM9d8J8mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ODE2ODIyNjctNTNiNi00NTc2LTlmOWItNmNiMjQ5OTkwNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJzJJy3F88kQgYNjDOluWI8AUXvb3qY7PxsQ ve1gCK0zoTL2ZQgMknuL86bvXSHhgeKpOS2nX6mcyz0iPD63U7D5n6DbHITOEKYn SkRqbg1wmb7L0FhbSoqgo+oNrMvTjQlWTvUHPPxzQuXCi8A6iNFCif3lk9XosSu5 fBfV9seGrKkiuhCB83DZ/W7s7a3wyWsJL36KgamR5R54dKZvcfooaOOCKJbadbba aJ/YmcLIj4viBhG3wzPMbE7P2RjpX2DNJEPm3TFdkrt/E3eN4p21OznGKX1Ci5cM NJ9tcLN5QPtof4gAxkL8P/V1TiuAmxbCArzMhHvIMFs/1bswJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrJupcKeA/gYebbhd8B3KVKFjsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjAxMmE4MDktOTgzMy0z MTQxLWFkNjctZTc0OGZkOTQxMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM/OD7pO3o+93roS11zuO6Vf9NwF10BLdVCRdTRtHWcqbixqdBFpVab g7FVk9ieQvO/p5G0v9Yi/mE8PgM0X2tTSq5MbwVPmGItFhr9YFYEMB/U9qr6H4YG oyDlweLBWKVEvF1DDESMtAcnplGH6ZRLlibVROJLv1gz8BcDZ05kXrSqigz5quZg Hi927KBcbEYcxRx8vT5Ij7baJwAZwYQpvDaFfsMdc6L+SYnUID0lDvaRyjGhzAy1 CYXjjNkNOQw9MqBVM13UBq7Tk05gC3tO+1NUTAIvip9wRqVrvzicAT5PYrjq1z8j INzyoiBJD8XpgrNnjVtzlSCrgXy6/NU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:16:41 2025 by rpki-client