$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa File: 3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa (raw, json) Hash identifier: h5fODPl8re1/DYIV9Vc+2kTXH1KXyzf2w1PmfSjDPSU= Subject key identifier: 66:AF:B3:24:DD:B6:4E:8E:7E:2F:48:F2:8F:70:AC:2C:2E:9E:66:2E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D022B8BEF920746065740 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:02:2b:8b:ef:92:07:46:06:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=24da6282-664b-4480-9a8b-c1bc1948a7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:d5:0a:07:21:fc:ba:63:a5:19:ec:dc:31: 55:62:d8:2c:9d:98:c5:00:f8:07:67:a8:77:0d:2c: 73:8e:32:af:3d:79:1a:0e:1f:f6:38:31:c1:6d:30: 82:c5:63:4d:d5:a8:4d:b9:7a:99:3f:44:cf:0b:f3: 63:2c:89:66:1a:5e:69:45:99:1c:5d:78:e2:43:36: 01:0c:e6:c8:98:d0:c9:66:9f:b0:70:33:53:51:fa: af:55:e2:95:fd:c8:92:db:2e:75:f2:65:e7:a4:b8: 80:c9:ca:08:66:3b:b2:a3:54:91:88:9d:8b:0f:60: 10:be:0e:78:fa:29:9a:6b:16:58:ea:3d:da:c7:c2: 2b:62:d3:28:55:c5:0a:66:c0:bf:90:b6:a0:51:a9: 90:98:54:ac:80:50:6d:b5:79:1c:ed:0d:80:12:1d: 68:6f:59:9f:06:6e:c6:ba:f3:a8:90:87:fe:4e:36: 46:df:a3:4c:49:3c:30:47:14:43:75:57:3b:36:6e: 13:f6:24:24:92:0a:40:5b:41:e2:5a:c1:77:c9:1c: 43:1d:67:ab:9d:f3:66:29:4d:d8:ef:6b:91:9b:9c: f9:e1:a7:42:b9:f3:d8:0a:a7:88:7e:ce:93:91:76: 19:ab:66:60:2e:88:77:c7:02:76:f3:fd:78:93:c7: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AF:B3:24:DD:B6:4E:8E:7E:2F:48:F2:8F:70:AC:2C:2E:9E:66:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:38:5f:ee:db:50:68:78:13:f8:45:b4:da:47:a5:82:dc:e5: 38:f3:ab:83:4a:d3:62:27:2e:90:17:d3:c4:6f:09:87:a8:c6: 40:96:b1:9e:2b:df:6f:11:9e:49:d6:00:e5:aa:e4:66:6d:b7: 9f:95:cc:0a:07:1f:79:91:ef:dd:d1:10:2f:54:56:a9:3e:25: 62:40:4e:1a:6e:a0:51:15:5c:f5:7f:43:78:26:b3:6a:aa:a2: 55:9c:ea:fe:2a:fe:1d:79:e6:9b:6a:7b:55:e2:8f:c6:5c:32: 9d:bf:a7:fc:0d:a6:9b:b7:8a:fd:a0:32:02:75:28:7b:a0:f3: ad:7f:b5:ee:a8:79:fc:30:39:ba:6e:3d:7b:aa:5d:67:79:ba: c3:73:14:98:58:cc:04:26:a8:32:74:97:78:ea:28:49:b0:d4: 8c:ee:4f:82:4a:22:f5:7c:5f:bf:36:aa:0f:db:0e:cc:bb:de: 2a:e7:b0:2b:a6:8d:b5:7a:05:23:01:bb:e3:2f:0e:f7:e0:ce: 64:1b:cf:e6:8f:f1:8c:a4:6e:87:b9:40:61:be:f4:d6:46:62: 53:65:7f:61:ba:df:72:15:6a:7a:b5:d2:0d:b6:23:d9:09:01: 8c:d9:29:38:ae:24:e5:5b:b6:53:56:df:e3:07:f2:08:3b:16: 39:88:bd:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQIri++SB0YGV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MjRkYTYyODItNjY0Yi00NDgwLTlhOGItYzFiYzE5NDhhN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7DVCgch/LpjpRns3DFVYtgsnZjFAPgHZ6h3 DSxzjjKvPXkaDh/2ODHBbTCCxWNN1ahNuXqZP0TPC/NjLIlmGl5pRZkcXXjiQzYB DObImNDJZp+wcDNTUfqvVeKV/ciS2y518mXnpLiAycoIZjuyo1SRiJ2LD2AQvg54 +imaaxZY6j3ax8IrYtMoVcUKZsC/kLagUamQmFSsgFBttXkc7Q2AEh1ob1mfBm7G uvOokIf+TjZG36NMSTwwRxRDdVc7Nm4T9iQkkgpAW0HiWsF3yRxDHWernfNmKU3Y 72uRm5z54adCufPYCqeIfs6TkXYZq2ZgLoh3xwJ28/14k8cMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGavsyTdtk6Ofi9I8o9wrCwunmYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2JkNWE0YzItOWM1Ni0z NGJlLTk0YTgtNmIyM2RjZTU5M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ44X+7bUGh4E/hFtNpHpYLc5Tjzq4NK02InLpAX08RvCYeoxkCWsZ4r 328RnknWAOWq5GZtt5+VzAoHH3mR793REC9UVqk+JWJAThpuoFEVXPV/Q3gms2qq olWc6v4q/h155ptqe1Xij8ZcMp2/p/wNppu3iv2gMgJ1KHug861/te6oefwwObpu PXuqXWd5usNzFJhYzAQmqDJ0l3jqKEmw1IzuT4JKIvV8X782qg/bDsy73irnsCum jbV6BSMBu+MvDvfgzmQbz+aP8Yykboe5QGG+9NZGYlNlf2G633IVanq10g22I9kJ AYzZKTiuJOVbtlNW3+MH8gg7FjmIvc8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:02:59 2025 by rpki-client