$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa File: 3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa (raw, json) Hash identifier: 69mV9UHSMw/RF2T6wj/FkXAXLXEXtyeMF8g5UpHcQpA= Subject key identifier: 24:D4:C1:1A:8E:69:C5:0C:81:45:B5:F7:64:35:45:1E:45:A7:2E:0B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D02739E3A196703AE5E84 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:02:73:9e:3a:19:67:03:ae:5e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=ae85ba74-3373-4cd2-a1e7-d097f9d6ab56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:44:cf:1a:97:39:10:50:dc:76:49:32:41: 65:e9:5d:ee:e0:6d:94:3d:a0:92:03:6d:42:69:04: 8d:6b:9b:57:35:b0:ac:e8:98:0d:b7:9b:32:5e:c6: e6:3a:76:73:29:ed:1f:f8:f7:36:5e:f7:00:b6:77: 80:79:20:84:85:ed:3f:b8:0f:a8:78:23:ab:17:e1: f7:c4:11:49:46:72:b1:c1:15:61:32:7e:38:c9:95: e9:a5:d8:c5:da:c3:f0:9e:47:12:e7:81:39:c0:47: 9f:42:71:e5:8e:c5:6c:35:1b:94:8b:e8:a2:aa:0c: 5e:0b:fc:93:3e:af:6e:79:f7:81:93:2e:2d:0c:86: bd:58:3e:9b:ef:00:7e:5a:45:eb:dc:56:86:e4:59: a2:ba:58:77:59:ff:3a:97:25:32:81:e7:70:b6:41: 5b:b2:e6:d6:1b:d2:28:a9:7d:8e:6f:44:33:7c:30: 02:c1:40:87:3d:90:0a:be:4b:b8:54:ea:75:5f:7a: eb:ae:6f:34:ea:9e:49:b5:5f:57:f0:00:01:28:99: 04:52:b7:0a:ef:3b:19:fd:b6:eb:1e:f5:03:11:bc: 1e:25:f6:66:3e:99:fa:97:4a:ce:b0:3e:74:8c:85: 40:39:38:36:a0:d8:bd:44:dc:98:fb:f8:ed:7f:13: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D4:C1:1A:8E:69:C5:0C:81:45:B5:F7:64:35:45:1E:45:A7:2E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3afb08d9-b761-3e41-a7fa-5a474eee1fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:40:9d:b8:85:5b:24:7d:d0:df:98:45:31:d1:e2:2b:28:d3: c9:5b:f2:53:98:36:53:67:58:90:fe:7c:fc:dc:fc:86:ff:6c: 9b:8a:22:86:32:42:7c:a6:be:d7:42:86:a6:72:fb:85:6a:da: 16:8d:ac:b6:b4:24:e9:af:e5:8c:e7:eb:48:28:81:8e:6f:34: 8d:b2:14:dc:b4:c6:3f:b0:c2:37:11:45:50:9d:f5:ac:94:c5: 28:7a:29:43:a7:3f:09:2d:c5:58:79:9f:e4:1f:25:b9:cf:e9: d3:67:77:d2:24:fd:8f:99:cf:cc:e8:82:db:46:97:0e:08:d0: e7:dd:cc:fe:59:65:b6:45:83:51:62:f2:6b:3c:16:e2:21:33: a5:19:8a:5e:1b:7b:87:68:3e:a2:c3:8b:eb:e9:98:d2:5d:dd: 3c:8c:f2:e7:72:f7:31:06:80:94:a2:1b:ba:39:08:d0:38:a6: 24:06:6e:8f:a0:32:aa:d2:71:df:07:95:7e:1c:2d:a2:38:4c: d0:7a:63:d4:99:cb:5d:64:a9:11:66:c0:39:73:06:45:8e:e8: 58:9a:ce:79:08:5e:fd:75:cb:2b:c0:8d:48:39:8e:3a:e5:57: 53:7f:86:f7:ba:6a:dc:4f:96:31:1f:06:a8:bb:98:41:3a:94: db:15:01:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQJznjoZZwOuXoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YWU4NWJhNzQtMzM3My00Y2QyLWExZTctZDA5N2Y5ZDZhYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbhEzxqXORBQ3HZJMkFl6V3u4G2UPaCSA21C aQSNa5tXNbCs6JgNt5syXsbmOnZzKe0f+Pc2XvcAtneAeSCEhe0/uA+oeCOrF+H3 xBFJRnKxwRVhMn44yZXppdjF2sPwnkcS54E5wEefQnHljsVsNRuUi+iiqgxeC/yT Pq9uefeBky4tDIa9WD6b7wB+WkXr3FaG5Fmiulh3Wf86lyUygedwtkFbsubWG9Io qX2Ob0QzfDACwUCHPZAKvku4VOp1X3rrrm806p5JtV9X8AABKJkEUrcK7zsZ/bbr HvUDEbweJfZmPpn6l0rOsD50jIVAOTg2oNi9RNyY+/jtfxOlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTUwRqOacUMgUW192Q1RR5Fpy4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2FmYjA4ZDktYjc2MS0z ZTQxLWE3ZmEtNWE0NzRlZWUxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5AnbiFWyR90N+YRTHR4iso08lb8lOYNlNnWJD+fPzc/Ib/bJuKIoYy QnymvtdChqZy+4Vq2haNrLa0JOmv5Yzn60gogY5vNI2yFNy0xj+wwjcRRVCd9ayU xSh6KUOnPwktxVh5n+QfJbnP6dNnd9Ik/Y+Zz8zogttGlw4I0OfdzP5ZZbZFg1Fi 8ms8FuIhM6UZil4be4doPqLDi+vpmNJd3TyM8udy9zEGgJSiG7o5CNA4piQGbo+g MqrScd8HlX4cLaI4TNB6Y9SZy11kqRFmwDlzBkWO6FiaznkIXv11yyvAjUg5jjrl V1N/hve6atxPljEfBqi7mEE6lNsVAXY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:11 2025 by rpki-client