$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/38032e1b-4682-3033-98a3-a3d5abfeb0db.roa File: 38032e1b-4682-3033-98a3-a3d5abfeb0db.roa (raw, json) Hash identifier: z76pGjmW4ufi1FfuAVSIu/ehNOC10DfcHProYjEgen4= Subject key identifier: 96:A4:32:C9:89:C2:CC:30:A4:58:5C:70:14:C6:F1:E4:4D:88:D8:E6 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D03152F8BDABF09A5EF40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/38032e1b-4682-3033-98a3-a3d5abfeb0db.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:15:2f:8b:da:bf:09:a5:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3f098e38-62d0-4d6a-931e-5616674aab79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c1:91:a0:7d:f7:3b:e7:71:3a:c8:77:c7:2b: 05:6a:86:8b:03:68:83:ad:25:ae:2e:a2:8f:24:43: ac:64:ab:dc:1a:9f:52:2e:4b:b9:ec:d9:15:e1:b8: 34:b7:da:ef:47:fd:54:cb:10:93:7e:0b:0b:86:1e: 38:f4:65:0b:de:04:d1:97:7f:97:f0:21:2b:23:78: f5:8b:7b:88:04:13:61:a2:33:d0:45:0e:ce:71:e8: 87:8b:ec:08:b5:61:54:a2:64:bb:78:b8:12:34:82: 0f:30:0b:60:40:90:46:ea:37:41:ea:a3:b9:3d:f9: 26:40:9e:37:fd:3e:a1:d9:3f:fd:75:4f:eb:8f:fd: 69:81:9e:af:44:81:10:e1:78:27:2b:ae:34:1f:6a: e4:cd:f9:81:bd:37:e8:d5:af:2e:13:9a:4c:02:8b: 8e:ee:47:14:d1:4a:aa:39:92:08:17:87:93:8a:62: 3d:85:46:70:e7:10:80:7b:c0:9f:09:4b:f6:f0:7e: 6a:f5:98:48:b0:a6:20:da:12:d8:40:e9:ed:9d:bc: a5:6d:02:97:30:29:e1:51:ad:57:4d:8b:18:d1:ca: 91:54:7b:c5:cf:54:04:df:16:f9:e8:b3:73:c2:1b: 11:a6:0a:ed:9b:c8:4d:4f:9e:bc:4e:d7:70:39:b4: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A4:32:C9:89:C2:CC:30:A4:58:5C:70:14:C6:F1:E4:4D:88:D8:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/38032e1b-4682-3033-98a3-a3d5abfeb0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:45:3e:46:10:bc:50:28:d2:0a:d7:c8:cb:ab:04:c9:12:9d: 25:b8:a9:63:fe:fe:46:22:e7:f4:fc:f2:76:68:c8:eb:38:7a: c8:79:46:77:82:20:fb:a1:3d:bb:10:e5:d6:40:84:38:5c:a5: d6:46:38:4f:ee:1f:cf:2e:b4:96:72:22:38:19:3d:58:18:c7: 7d:49:a6:55:a3:cf:41:a6:81:5b:4c:fc:16:c2:10:d0:96:0b: 73:06:5d:e9:b9:94:70:20:a1:1d:1b:a5:d1:45:2f:98:f2:7c: 18:70:16:a2:db:1c:d7:44:7a:83:db:8d:0d:e6:ef:4b:b2:f6: b4:fe:5c:50:fb:ef:69:fd:f9:fe:7e:4a:ca:e8:5a:77:9c:7b: bd:91:55:3f:72:7a:9f:b2:43:aa:0b:33:d0:81:73:fb:fb:06: 2e:e3:af:79:1a:8e:15:bc:82:e8:d8:c0:60:96:53:4f:d3:3e: c9:0e:23:c1:66:22:2b:99:2f:5b:78:f8:19:37:b1:1b:ba:48: c5:43:ec:3b:d2:77:00:c7:56:da:2f:2e:76:ed:42:dd:87:c1: 61:84:49:7f:d6:fc:7e:41:66:dc:a7:45:36:e7:e1:e6:cc:22: bb:1e:2c:7f:cb:b4:95:f7:74:c7:e8:f9:b6:01:61:2e:c8:2f: 58:87:25:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQMVL4vavwml70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2YwOThlMzgtNjJkMC00ZDZhLTkzMWUtNTYxNjY3NGFhYjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8GRoH33O+dxOsh3xysFaoaLA2iDrSWuLqKP JEOsZKvcGp9SLku57NkV4bg0t9rvR/1UyxCTfgsLhh449GUL3gTRl3+X8CErI3j1 i3uIBBNhojPQRQ7OceiHi+wItWFUomS7eLgSNIIPMAtgQJBG6jdB6qO5PfkmQJ43 /T6h2T/9dU/rj/1pgZ6vRIEQ4XgnK640H2rkzfmBvTfo1a8uE5pMAouO7kcU0Uqq OZIIF4eTimI9hUZw5xCAe8CfCUv28H5q9ZhIsKYg2hLYQOntnbylbQKXMCnhUa1X TYsY0cqRVHvFz1QE3xb56LNzwhsRpgrtm8hNT568TtdwObTC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJakMsmJwswwpFhccBTG8eRNiNjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzgwMzJlMWItNDY4Mi0z MDMzLTk4YTMtYTNkNWFiZmViMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlW+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtFPkYQvFAo0grXyMurBMkSnSW4qWP+/kYi5/T88nZoyOs4esh5RneC IPuhPbsQ5dZAhDhcpdZGOE/uH88utJZyIjgZPVgYx31JplWjz0GmgVtM/BbCENCW C3MGXem5lHAgoR0bpdFFL5jyfBhwFqLbHNdEeoPbjQ3m70uy9rT+XFD772n9+f5+ SsroWnece72RVT9yep+yQ6oLM9CBc/v7Bi7jr3kajhW8gujYwGCWU0/TPskOI8Fm IiuZL1t4+Bk3sRu6SMVD7DvSdwDHVtovLnbtQt2HwWGESX/W/H5BZtynRTbn4ebM IrseLH/LtJX3dMfo+bYBYS7IL1iHJfA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:25 2025 by rpki-client