$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa File: 261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa (raw, json) Hash identifier: bQEJkhCy0hiSRhejbnbslC0gr/4ITb+R2BowFxXBUdM= Subject key identifier: D2:B5:A7:00:67:92:07:40:E5:BB:AF:EE:C0:29:FF:26:08:2B:A6:D3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BAA97B6B9BCB392CD99C56500 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 170.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b6:b9:bc:b3:92:cd:99:c5:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=ae8aa496-0d2c-4612-9706-25e1f133a1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:ab:df:c1:ac:4d:4f:cf:5b:82:fc:d0:2f: 7f:09:7a:17:c9:1d:48:14:35:aa:bc:53:03:87:b0: 5b:30:06:3a:7b:81:e2:d9:8c:e1:ac:70:1a:43:0e: 2c:50:de:43:4f:3c:0f:2b:83:3c:69:86:24:e5:e2: ba:f0:83:c4:eb:74:de:0a:7d:3c:de:d0:0f:b6:d9: be:d9:03:56:44:7f:a6:5b:04:ac:69:ef:73:a4:82: 7c:a8:0d:1a:15:e5:de:9b:61:a1:5a:33:2a:83:11: be:1b:85:98:34:00:a5:92:f5:88:91:a0:42:cb:1c: ae:27:b0:ac:a4:5d:e5:91:ad:26:00:eb:b7:cc:d6: 7f:8d:95:1f:ac:58:35:22:d5:e3:52:86:9a:c2:cf: 53:af:6f:5d:ab:51:73:52:a0:f7:9c:e9:f0:e5:af: e7:61:63:0a:77:6c:74:6b:0a:af:d5:76:ba:8b:ab: c4:50:94:e7:f8:0e:d1:f8:36:ca:d8:59:84:3c:fd: 26:2f:43:06:a3:53:85:31:8f:fc:ab:2c:04:a3:00: 65:5b:7c:5d:37:63:5c:9c:7a:6d:71:24:23:79:64: 7c:19:e4:78:99:c6:27:e3:d2:8d:0c:8d:33:5a:6a: 4f:00:d8:0b:e7:70:24:ff:89:f8:cf:f4:d2:d2:56: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B5:A7:00:67:92:07:40:E5:BB:AF:EE:C0:29:FF:26:08:2B:A6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/261f3f23-a2fe-3abd-b7e3-249b0ce2829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6c:3c:4e:f0:53:e5:86:71:3e:35:0a:bc:53:7f:5c:84:d4: 1b:95:ab:67:87:c1:a3:7a:bc:b6:0d:5d:06:c2:bc:ce:23:e9: f9:c4:08:a5:c4:be:92:df:a6:5c:9f:81:67:92:ad:4a:1f:07: e3:b4:80:e8:67:42:ff:7c:cc:bc:76:3c:39:e0:a2:c5:d0:f8: 7c:dd:d6:4c:45:28:6e:99:b2:25:15:65:e5:87:8c:7b:39:f9: 55:6e:f9:c7:c2:45:fd:aa:9a:0e:59:81:d5:34:fb:dd:5c:3e: 73:7b:1d:23:d7:84:1d:a8:e5:62:04:d9:a9:c9:90:57:d4:3c: d5:16:4d:77:47:0d:7c:cb:95:e4:54:b8:9d:fa:f1:45:54:78: 62:7b:f1:4c:8e:21:0b:2d:32:40:5d:75:69:9d:41:27:d8:15: 6f:af:87:d1:78:29:68:ea:cd:56:b4:b5:7d:63:01:3f:54:cd: de:c5:6b:3c:95:4e:33:9f:c7:3c:15:44:2c:f5:8f:75:db:08: 53:39:08:e5:f8:3a:5c:5c:c0:d0:21:15:d7:a7:41:13:cd:21: 5a:64:7a:9f:ba:8e:02:b5:27:94:59:2d:8b:19:f1:20:80:25: 70:f7:cc:96:8b:48:09:a5:88:4f:5b:5a:b3:61:6c:e7:2f:bb: fc:85:3e:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7a5vLOSzZnFZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YWU4YWE0OTYtMGQyYy00NjEyLTk3MDYtMjVlMWYxMzNhMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iGr38GsTU/PW4L80C9/CXoXyR1IFDWqvFMD h7BbMAY6e4Hi2YzhrHAaQw4sUN5DTzwPK4M8aYYk5eK68IPE63TeCn083tAPttm+ 2QNWRH+mWwSsae9zpIJ8qA0aFeXem2GhWjMqgxG+G4WYNAClkvWIkaBCyxyuJ7Cs pF3lka0mAOu3zNZ/jZUfrFg1ItXjUoaaws9Tr29dq1FzUqD3nOnw5a/nYWMKd2x0 awqv1Xa6i6vEUJTn+A7R+DbK2FmEPP0mL0MGo1OFMY/8qywEowBlW3xdN2NcnHpt cSQjeWR8GeR4mcYn49KNDI0zWmpPANgL53Ak/4n4z/TS0laxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK1pwBnkgdA5buv7sAp/yYIK6bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjYxZjNmMjMtYTJmZS0z YWJkLWI3ZTMtMjQ5YjBjZTI4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9sPE7wU+WGcT41CrxTf1yE1BuVq2eHwaN6vLYNXQbCvM4j6fnECKXE vpLfplyfgWeSrUofB+O0gOhnQv98zLx2PDngosXQ+Hzd1kxFKG6ZsiUVZeWHjHs5 +VVu+cfCRf2qmg5ZgdU0+91cPnN7HSPXhB2o5WIE2anJkFfUPNUWTXdHDXzLleRU uJ368UVUeGJ78UyOIQstMkBddWmdQSfYFW+vh9F4KWjqzVa0tX1jAT9Uzd7FazyV TjOfxzwVRCz1j3XbCFM5COX4OlxcwNAhFdenQRPNIVpkep+6jgK1J5RZLYsZ8SCA JXD3zJaLSAmliE9bWrNhbOcvu/yFPtI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:16 2025 by rpki-client