$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa File: 3a1dad2c-2d3a-3061-9575-faf007fac428.roa (raw, json) Hash identifier: sPnW3Eb/JsM3h1nz4dXvxFNokn0Gp8gp6coFQUN+N1k= Subject key identifier: 17:D4:F1:0A:7F:86:99:81:74:FA:B1:18:FB:A5:9F:B7:09:28:43:DF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0144102B5EA1F7886100 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:44:10:2b:5e:a1:f7:88:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=0dbac5c1-68ab-4916-bc35-aca21bc22306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:30:e9:a1:b9:20:e3:86:80:71:59:9f:47: 3c:74:d2:bd:4c:24:b7:3f:de:a7:b8:69:c7:4c:7f: 17:49:6c:09:33:ee:10:04:49:04:ed:6a:0c:be:85: 6f:ab:69:83:5f:48:1c:70:d9:08:a4:c7:04:6a:2a: 0a:20:e2:6b:2f:cc:76:73:5c:84:a7:c1:8c:3a:a2: 1d:11:f6:f1:7a:20:de:c9:78:92:01:71:a6:38:18: 7e:27:88:7d:0b:81:3c:32:6f:de:32:3d:a6:eb:e0: 1f:86:02:1b:b2:12:08:da:89:de:d2:f8:c9:4e:6c: cd:c8:08:9b:1f:19:c2:de:7d:37:2c:45:94:82:bc: 37:b7:47:1e:8d:1a:09:95:1c:1d:15:ae:c4:64:b4: 0f:d6:d4:3d:36:c3:73:58:40:e7:c9:25:2b:4e:a0: 92:25:3e:b8:65:c7:04:44:b5:5f:94:e5:de:81:f6: cb:04:6b:37:02:99:08:76:9e:08:08:23:b7:e0:ad: 08:00:42:9f:35:e3:f4:e4:9b:50:59:3c:32:38:f2: cb:95:d7:c0:54:ef:de:06:40:80:15:61:20:8c:d5: 73:c0:75:b2:08:7b:eb:88:6c:14:db:c1:33:03:b4: 0c:39:38:01:43:6c:9e:df:c9:7a:8a:bf:93:15:e6: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D4:F1:0A:7F:86:99:81:74:FA:B1:18:FB:A5:9F:B7:09:28:43:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a1dad2c-2d3a-3061-9575-faf007fac428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:92:02:49:37:0e:b3:ce:e0:d6:64:04:11:2c:42:3e:b5:2f: 5c:ec:b0:2a:1a:8e:53:8a:66:01:d0:00:11:c6:c9:9f:d3:6b: e5:e9:77:a5:3a:92:b5:3a:0c:3b:68:a0:68:67:2c:6c:31:0c: fd:2e:46:72:77:77:78:3b:aa:97:4e:0b:40:b7:97:12:a4:7e: 9c:e1:2b:d0:d5:c4:da:bc:0a:6c:d1:7a:df:63:3b:cd:58:4b: 2a:a9:67:49:f4:6d:a6:58:e1:55:8d:60:3c:ce:c5:29:3c:68: 1c:bf:52:bd:d5:e3:a1:5d:f1:e4:3d:39:0c:16:96:29:9a:73: 7e:63:f1:43:fc:71:98:1f:a7:cc:3b:6b:54:a6:c4:64:3a:94: d9:57:0f:11:07:13:c4:b2:f1:d3:f5:dd:d3:a1:6d:81:28:48: 78:f1:e6:58:9c:c7:c1:23:52:d6:12:6f:5c:30:3a:69:7b:1a: ab:f6:ab:69:0d:82:1d:1e:2f:45:3f:a0:77:1a:38:f6:87:84: 5a:85:12:70:84:fc:95:75:dd:24:f5:01:85:ca:ec:a3:17:7f: 5d:d0:98:40:02:52:37:59:27:a0:6e:b8:b0:38:f8:86:68:73: 14:01:3b:14:a9:72:9e:65:c5:a6:9a:47:02:d2:8a:17:ff:c5: a9:5c:b2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQFEECteofeIYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MGRiYWM1YzEtNjhhYi00OTE2LWJjMzUtYWNhMjFiYzIyMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNQw6aG5IOOGgHFZn0c8dNK9TCS3P96nuGnH TH8XSWwJM+4QBEkE7WoMvoVvq2mDX0gccNkIpMcEaioKIOJrL8x2c1yEp8GMOqId EfbxeiDeyXiSAXGmOBh+J4h9C4E8Mm/eMj2m6+AfhgIbshII2one0vjJTmzNyAib HxnC3n03LEWUgrw3t0cejRoJlRwdFa7EZLQP1tQ9NsNzWEDnySUrTqCSJT64ZccE RLVflOXegfbLBGs3ApkIdp4ICCO34K0IAEKfNeP05JtQWTwyOPLLldfAVO/eBkCA FWEgjNVzwHWyCHvriGwU28EzA7QMOTgBQ2ye38l6ir+TFeZmtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfU8Qp/hpmBdPqxGPuln7cJKEPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ExZGFkMmMtMmQzYS0z MDYxLTk1NzUtZmFmMDA3ZmFjNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWSAkk3DrPO4NZkBBEsQj61L1zssCoajlOKZgHQABHGyZ/Ta+Xpd6U6 krU6DDtooGhnLGwxDP0uRnJ3d3g7qpdOC0C3lxKkfpzhK9DVxNq8CmzRet9jO81Y SyqpZ0n0baZY4VWNYDzOxSk8aBy/Ur3V46Fd8eQ9OQwWlimac35j8UP8cZgfp8w7 a1SmxGQ6lNlXDxEHE8Sy8dP13dOhbYEoSHjx5licx8EjUtYSb1wwOml7Gqv2q2kN gh0eL0U/oHcaOPaHhFqFEnCE/JV13ST1AYXK7KMXf13QmEACUjdZJ6BuuLA4+IZo cxQBOxSpcp5lxaaaRwLSihf/xalcskQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:10 2025 by rpki-client