$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233bc561-700e-3ef2-8a82-8e7d136ab1bd.roa File: 233bc561-700e-3ef2-8a82-8e7d136ab1bd.roa (raw, json) Hash identifier: UQYCFprn3L3bHlKQOgJLKZKGnehoggL8Q+gCd8NAMTE= Subject key identifier: E1:0B:02:0B:08:DD:FD:A1:4B:11:7A:1A:2B:A5:8A:90:AB:D3:A1:FA Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFD65A8A77BB4A3685880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233bc561-700e-3ef2-8a82-8e7d136ab1bd.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fd:65:a8:a7:7b:b4:a3:68:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=edfe877a-0788-40fd-a09f-745e2eca7884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:c7:99:47:22:fb:25:c3:ad:02:87:0b:cd: b1:cc:c9:48:ac:f5:8f:65:4e:8d:26:41:3c:03:9d: 04:ad:58:4d:69:4f:cc:e4:5c:89:74:4f:6a:02:ad: 66:cf:a1:a0:04:cc:52:90:12:73:54:b0:a8:82:12: 38:94:9d:31:da:a1:ff:86:d4:7e:df:54:64:65:a4: 25:55:a3:54:ff:2e:4e:83:ab:77:84:fd:f8:54:4b: 8b:95:1d:70:1d:3d:0c:52:a7:56:e0:71:22:52:97: 21:1c:b7:c2:6d:53:0c:53:82:f7:eb:1b:6d:3b:a0: 92:cb:90:f5:0f:14:d7:28:af:02:62:5e:db:b6:84: fd:0a:56:ed:cf:36:6f:ad:1d:4e:49:a1:39:ac:1e: 8b:ac:4b:8a:1a:10:b9:58:b6:41:bb:66:2a:8e:9f: 9f:58:a6:50:3d:e4:c8:b9:c9:3a:f2:29:ec:9e:f8: 08:dd:6c:38:27:59:30:84:fd:0f:7e:2d:7b:56:4e: e5:22:c6:11:74:8c:1b:7d:75:74:41:2d:a6:81:dc: b3:c8:38:95:f9:ea:25:54:70:73:5b:97:2d:9b:dd: 2b:62:a2:50:50:ea:e4:fb:83:63:ce:9b:dd:75:85: 43:1f:60:50:2e:20:2a:53:26:e1:d2:4d:e7:3c:ee: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:02:0B:08:DD:FD:A1:4B:11:7A:1A:2B:A5:8A:90:AB:D3:A1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233bc561-700e-3ef2-8a82-8e7d136ab1bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:40:39:5e:28:69:ed:dc:71:de:3a:ae:67:9c:54:9d:4f:e2: 44:36:d1:71:6f:b6:23:c0:6b:6b:84:71:bb:43:9e:de:2c:f5: d1:76:fe:39:c7:cb:f0:1a:81:91:c1:ff:50:dd:67:bf:1f:53: 97:43:e3:30:e4:6b:f2:3c:a7:1f:91:d3:0d:4a:b9:d9:c5:39: d2:71:8c:45:14:c1:a3:e6:70:5a:20:46:0c:dc:fb:11:a3:7c: 3a:64:83:11:02:67:dd:24:a2:a5:67:8c:54:25:c9:47:6a:16: 0a:6a:be:e1:3b:53:c4:1f:50:9f:ad:99:56:a9:45:ad:c3:8d: 74:0a:3b:c3:aa:f0:19:21:47:05:0b:6d:80:bf:65:5a:c8:65: 8a:f2:ae:ac:cd:21:f3:c1:5f:1e:a1:65:be:03:23:64:fc:f5: 4d:04:f4:f6:ae:b9:36:18:c5:9d:a5:5a:67:2f:8b:9a:bb:86: 8e:f3:22:3c:07:00:86:67:a8:86:bd:ab:0d:76:f5:33:1a:c8: 6f:c7:e9:16:f1:3e:6e:52:85:d0:2a:4a:58:6c:de:12:c3:9e: 16:7c:9b:fc:09:93:6d:58:ce:ad:58:17:6d:02:d5:2e:bf:b7: 97:6c:45:09:f4:1e:dc:de:f4:d5:97:b3:b5:dd:f8:b5:c9:0b: 2b:f9:a4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP1lqKd7tKNoWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZWRmZTg3N2EtMDc4OC00MGZkLWEwOWYtNzQ1ZTJlY2E3ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuDHmUci+yXDrQKHC82xzMlIrPWPZU6NJkE8 A50ErVhNaU/M5FyJdE9qAq1mz6GgBMxSkBJzVLCoghI4lJ0x2qH/htR+31RkZaQl VaNU/y5Og6t3hP34VEuLlR1wHT0MUqdW4HEiUpchHLfCbVMMU4L36xttO6CSy5D1 DxTXKK8CYl7btoT9ClbtzzZvrR1OSaE5rB6LrEuKGhC5WLZBu2Yqjp+fWKZQPeTI uck68insnvgI3Ww4J1kwhP0Pfi17Vk7lIsYRdIwbfXV0QS2mgdyzyDiV+eolVHBz W5ctm90rYqJQUOrk+4NjzpvddYVDH2BQLiAqUybh0k3nPO4scQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOELAgsI3f2hSxF6GiulipCr06H6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjMzYmM1NjEtNzAwZS0z ZWYyLThhODItOGU3ZDEzNmFiMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFAOV4oae3ccd46rmecVJ1P4kQ20XFvtiPAa2uEcbtDnt4s9dF2/jnH y/AagZHB/1DdZ78fU5dD4zDka/I8px+R0w1KudnFOdJxjEUUwaPmcFogRgzc+xGj fDpkgxECZ90koqVnjFQlyUdqFgpqvuE7U8QfUJ+tmVapRa3DjXQKO8Oq8BkhRwUL bYC/ZVrIZYryrqzNIfPBXx6hZb4DI2T89U0E9PauuTYYxZ2lWmcvi5q7ho7zIjwH AIZnqIa9qw129TMayG/H6RbxPm5ShdAqSlhs3hLDnhZ8m/wJk21Yzq1YF20C1S6/ t5dsRQn0Htze9NWXs7Xd+LXJCyv5pJQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:00:50 2025 by rpki-client