$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa File: 2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa (raw, json) Hash identifier: yLq2bUiiJjxK+XwJunBDLvoMt0/1wKupr+c+i4uVr04= Subject key identifier: 6A:6F:2F:21:4E:BD:6B:EA:1C:0E:6D:99:E3:05:28:1B:28:1D:5C:19 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D03386AFBA85922452BC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:38:6a:fb:a8:59:22:45:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=fd43cfa4-dd76-4fca-b15a-70dae3c44ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:7d:b8:57:c0:f3:0f:41:95:c2:a9:ef:1b: 7b:f8:b0:9e:97:eb:43:b2:b3:b2:33:ee:cd:4c:a6: a2:67:0f:d3:55:e7:05:57:55:22:db:bd:28:8f:04: a0:c0:93:a9:16:78:fb:27:19:bd:ad:93:cf:fd:bd: 3b:9e:ec:ab:ad:78:8a:b8:76:25:dc:2b:1e:d8:20: ac:18:15:99:29:00:a1:94:02:71:f4:d4:5b:07:5b: 6c:16:99:4f:d2:1c:14:78:66:9b:ac:13:77:3b:fb: 9c:4c:24:59:55:cd:62:5e:37:64:44:c8:9f:30:35: d9:78:9e:9f:47:9c:b3:63:42:f8:18:25:fb:fd:a0: dc:b3:51:6b:9e:14:33:37:10:0c:44:03:a4:33:82: 02:77:4f:91:bb:81:f0:7e:83:d2:ce:79:9a:11:7c: 3f:73:20:30:db:be:eb:25:2e:ba:d2:0f:ed:96:7a: c8:81:16:2a:04:38:87:d1:e5:ed:62:69:0c:4e:4b: eb:5a:47:e3:fe:39:61:bb:f4:c9:b6:1f:e6:ca:17: ea:0c:54:47:bb:8f:76:a2:ec:13:be:26:40:24:74: 55:45:84:80:a7:e5:7b:d7:4e:da:47:62:89:cf:5c: 09:fc:b6:87:5f:3a:84:20:e7:6e:24:d6:a7:4e:3a: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:2F:21:4E:BD:6B:EA:1C:0E:6D:99:E3:05:28:1B:28:1D:5C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2d7ca8ae-c0c6-3448-94ad-4da4584ef5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:c3:a7:ec:7e:dc:55:bd:6f:a3:22:96:7b:43:60:79:95: a0:fe:c4:a2:67:03:9f:65:12:c0:ca:8d:62:46:ef:b4:b0:58: aa:44:e2:2d:df:95:1a:d1:4d:0d:ac:25:ad:d1:fb:ff:a9:5d: 46:b8:82:8a:05:ef:c8:e5:df:cd:48:4a:a8:12:4c:78:6f:a2: 5c:4a:68:7f:8d:2a:52:f0:25:60:47:9a:cc:8d:90:54:55:a4: f8:b4:2b:80:da:86:18:1e:7c:71:b6:2d:b9:9e:2a:a1:97:e0: 18:3e:a5:ce:9a:38:64:09:7f:bb:3a:81:53:cf:cc:6a:c2:28: 28:69:a0:fa:8d:18:c2:58:ed:c6:cf:2e:8c:e4:1a:f5:ae:95: 1f:9e:a1:5c:52:4e:72:92:23:aa:54:5e:80:f5:56:09:25:7d: f8:1f:3e:b8:1a:60:84:96:95:dc:8c:ef:72:ca:db:04:83:3f: c0:57:12:1f:c4:f4:73:97:05:ac:d6:c0:c0:0e:33:5d:29:9a: a2:65:b5:4f:19:45:48:ab:7f:3a:47:93:00:c3:36:00:f5:4a: 59:0d:4d:84:af:92:20:2e:8b:2c:7b:98:c3:70:e2:6a:da:f5: aa:38:07:9a:46:d4:68:7a:75:db:cc:e1:54:1a:3f:44:c0:08: 85:34:58:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQM4avuoWSJFK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZmQ0M2NmYTQtZGQ3Ni00ZmNhLWIxNWEtNzBkYWUzYzQ0YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRJ9uFfA8w9BlcKp7xt7+LCel+tDsrOyM+7N TKaiZw/TVecFV1Ui270ojwSgwJOpFnj7Jxm9rZPP/b07nuyrrXiKuHYl3Cse2CCs GBWZKQChlAJx9NRbB1tsFplP0hwUeGabrBN3O/ucTCRZVc1iXjdkRMifMDXZeJ6f R5yzY0L4GCX7/aDcs1FrnhQzNxAMRAOkM4ICd0+Ru4HwfoPSznmaEXw/cyAw277r JS660g/tlnrIgRYqBDiH0eXtYmkMTkvrWkfj/jlhu/TJth/myhfqDFRHu492ouwT viZAJHRVRYSAp+V7107aR2KJz1wJ/LaHXzqEIOduJNanTjoOYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpvLyFOvWvqHA5tmeMFKBsoHVwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmQ3Y2E4YWUtYzBjNi0z NDQ4LTk0YWQtNGRhNDU4NGVmNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1Ow6fsftxVvW+jIpZ7Q2B5laD+xKJnA59lEsDKjWJG77SwWKpE4i3f lRrRTQ2sJa3R+/+pXUa4gooF78jl381ISqgSTHhvolxKaH+NKlLwJWBHmsyNkFRV pPi0K4DahhgefHG2LbmeKqGX4Bg+pc6aOGQJf7s6gVPPzGrCKChpoPqNGMJY7cbP LozkGvWulR+eoVxSTnKSI6pUXoD1VgklffgfPrgaYISWldyM73LK2wSDP8BXEh/E 9HOXBazWwMAOM10pmqJltU8ZRUirfzpHkwDDNgD1SlkNTYSvkiAuiyx7mMNw4mra 9ao4B5pG1Gh6ddvM4VQaP0TACIU0WME= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:32 2025 by rpki-client