$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa File: 233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa (raw, json) Hash identifier: mqtueqp/A+LixJFf4rJZffK2O8HTJcgLVvNi26aVc9Q= Subject key identifier: D4:F5:C0:71:D1:6B:7B:47:D4:BB:E1:B4:14:B6:8A:FB:AD:9C:F3:77 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D017BE1D97610FFB19AD0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:7b:e1:d9:76:10:ff:b1:9a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=d7528f0c-0601-4fd4-ba92-4f7dca8f36d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:a2:72:78:11:da:2d:06:17:14:28:65:cd: 48:50:82:50:51:ab:ad:43:6f:1f:95:e8:f2:28:0d: e4:db:d1:bf:fc:32:67:99:49:62:b8:e4:43:a4:6c: 86:43:3a:4c:cf:19:9f:f4:c6:c4:e8:22:d7:76:ac: 3d:49:e7:d5:21:e3:97:24:c7:ba:f1:f1:02:68:ee: 1b:50:24:60:4e:0d:2e:aa:84:c1:ad:95:6e:10:5c: 1c:65:d4:78:e7:96:ec:fa:43:d9:76:b7:d2:3d:6e: b8:60:f9:e5:5c:5d:2c:50:73:2f:f8:83:c2:11:7a: d9:27:aa:f8:6b:3f:7d:6f:d4:f9:33:12:6d:db:d4: ef:2e:3f:ca:5f:8e:d3:ff:40:61:00:68:05:be:6b: e6:ee:36:f2:15:a4:f7:07:d1:71:f3:77:ab:5e:0c: c1:2a:3b:69:c5:6e:f5:01:6b:4a:61:df:65:19:72: 8f:5f:c0:13:09:75:3d:ea:4a:9c:e1:94:c2:14:eb: b5:7f:c0:0c:a6:0b:cf:a9:35:d9:11:2e:4f:ce:a0: dd:3a:26:65:86:ba:11:90:ef:c1:1f:c6:19:bc:d7: 35:2c:64:96:cf:b8:76:ac:bc:84:4a:b2:a2:16:16: 34:4c:76:c9:7c:56:67:b6:95:9b:eb:80:46:53:30: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F5:C0:71:D1:6B:7B:47:D4:BB:E1:B4:14:B6:8A:FB:AD:9C:F3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8f:97:c4:5a:6f:04:73:92:61:6c:7a:81:0e:ed:92:28:df: cf:4b:f0:44:bd:e2:d7:d9:55:9b:95:8a:10:b9:00:25:a0:43: 77:5b:bd:4b:4c:15:7e:f7:df:6d:a8:ef:3c:99:6e:7b:35:07: 8f:33:5f:8a:4e:0b:ed:b9:d4:1a:74:49:46:f1:f7:57:60:7c: 53:1e:24:a5:9d:c0:c5:cb:3e:08:f3:4f:dc:e5:ab:42:08:76: a6:8d:60:5e:ab:47:5b:fe:f9:1d:18:d3:a1:81:d2:2a:64:6d: 42:ae:e5:f6:e2:6a:a3:f6:fb:4b:92:70:22:1f:fc:e2:be:1e: b0:39:70:0e:9c:6e:6e:95:bf:97:fe:a5:36:8b:88:e0:7a:b9: 96:78:e6:ca:e1:6e:0b:63:92:d6:e7:09:dc:db:62:9d:39:10: 67:fa:46:c4:42:b9:ce:61:7b:3b:61:e8:39:da:55:cf:f3:7c: f3:79:f5:b4:03:59:4c:ae:0d:9d:f6:0a:6e:22:e8:0e:bc:24: bb:33:8e:7e:df:18:8d:93:16:01:b3:46:3c:cc:cf:f2:ca:26: 23:40:4b:bb:78:ad:a3:7e:d8:01:c5:34:36:ad:7e:be:fc:db: c5:99:47:df:80:22:9c:41:1f:18:bd:85:b6:9d:b3:c5:24:51: 4d:06:de:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQF74dl2EP+xmtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZDc1MjhmMGMtMDYwMS00ZmQ0LWJhOTItNGY3ZGNhOGYzNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpeicngR2i0GFxQoZc1IUIJQUautQ28flejy KA3k29G//DJnmUliuORDpGyGQzpMzxmf9MbE6CLXdqw9SefVIeOXJMe68fECaO4b UCRgTg0uqoTBrZVuEFwcZdR455bs+kPZdrfSPW64YPnlXF0sUHMv+IPCEXrZJ6r4 az99b9T5MxJt29TvLj/KX47T/0BhAGgFvmvm7jbyFaT3B9Fx83erXgzBKjtpxW71 AWtKYd9lGXKPX8ATCXU96kqc4ZTCFOu1f8AMpgvPqTXZES5PzqDdOiZlhroRkO/B H8YZvNc1LGSWz7h2rLyESrKiFhY0THbJfFZntpWb64BGUzCeOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT1wHHRa3tH1LvhtBS2ivutnPN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjMzZWFhZGUtMWZhMC0z MjcwLTlhYWQtYWU0ZDc2YThiOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCPl8RabwRzkmFseoEO7ZIo389L8ES94tfZVZuVihC5ACWgQ3dbvUtM FX73322o7zyZbns1B48zX4pOC+251Bp0SUbx91dgfFMeJKWdwMXLPgjzT9zlq0II dqaNYF6rR1v++R0Y06GB0ipkbUKu5fbiaqP2+0uScCIf/OK+HrA5cA6cbm6Vv5f+ pTaLiOB6uZZ45srhbgtjktbnCdzbYp05EGf6RsRCuc5hezth6DnaVc/zfPN59bQD WUyuDZ32Cm4i6A68JLszjn7fGI2TFgGzRjzMz/LKJiNAS7t4raN+2AHFNDatfr78 28WZR9+AIpxBHxi9hbads8UkUU0G3g8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:02 2025 by rpki-client