$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa File: 3faf91e5-6c81-3d67-b498-f913437fa73a.roa (raw, json) Hash identifier: L7aY+fZWvVGmT3wsl1UBXLm+CyKZzs7+XRTq5b925dM= Subject key identifier: 1C:8E:2E:04:13:B9:DA:27:DD:67:E2:31:DF:20:C1:9A:2B:E5:99:3E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D02858761A61533EBE840 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:02:85:87:61:a6:15:33:eb:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=d99ab169-3baf-4f6d-9da9-b031b08a76eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:89:3e:43:fc:01:78:3b:39:97:79:0e:a6: 25:33:5d:a0:ac:f5:dc:e4:93:8b:64:b3:a4:fc:4e: e5:09:76:90:31:1e:6c:0c:32:5d:dc:a7:c3:a7:19: 29:bb:3a:57:cf:6a:79:bb:b2:10:1f:5e:ac:d8:d0: a7:0a:4c:c5:1a:5f:42:1f:cb:1b:42:29:16:2a:99: cb:60:e5:cd:57:c6:20:bd:ec:74:8d:7a:21:e9:da: 40:b6:43:59:0a:7f:64:d8:dc:d0:16:89:95:28:72: e1:bf:4c:38:df:19:9c:37:2a:42:eb:81:de:dc:6a: 6c:a7:f3:6d:f7:8c:8d:b9:78:e7:f3:cb:4d:58:24: 61:27:92:b2:3e:97:1b:4a:68:9a:e6:80:86:da:fb: cc:d8:8c:1f:e8:00:8d:e5:18:54:05:83:5e:28:d4: f0:b7:d5:32:22:06:ee:3b:f4:00:0c:71:f2:69:1d: e5:c9:32:9c:8a:cd:81:7b:a2:10:12:82:fb:06:5e: be:04:89:02:ab:7e:cb:8a:f4:05:bd:26:b6:dd:a2: 24:fc:0a:c0:0f:c1:d2:42:b9:0d:47:5d:8a:5c:42: f5:41:b8:13:2a:21:72:90:be:53:2c:fd:06:3f:c7: a0:71:43:10:e5:54:27:37:e1:70:1f:f8:30:45:7d: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:2E:04:13:B9:DA:27:DD:67:E2:31:DF:20:C1:9A:2B:E5:99:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3faf91e5-6c81-3d67-b498-f913437fa73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d4:03:6c:fc:59:1d:1d:96:e3:3c:11:ba:79:73:16:1f:cb: 2f:a2:33:1a:83:60:13:48:4b:95:93:a2:f8:40:63:ea:86:ce: ae:0d:37:bd:6a:3d:8b:ea:70:e5:db:e2:e9:5a:f5:80:a9:52: d5:1b:d0:3f:ad:db:a6:c1:e8:c0:45:6c:c0:64:c1:34:44:11: d6:92:a1:fe:4b:e3:39:78:00:c4:97:8a:fa:75:5e:44:28:c0: 6a:92:98:6d:8f:55:57:07:ff:0f:43:8a:98:78:fc:f4:93:04: e4:b5:d8:f5:02:d4:a0:a3:3b:14:2f:22:29:03:64:4f:95:fc: 60:a5:70:06:a4:b1:03:01:61:e5:ce:8b:b4:ed:2a:08:58:03: 42:30:fd:09:bf:ea:48:b8:5f:07:95:60:df:26:db:c2:82:25: ed:97:10:4b:49:bd:9c:e3:ac:17:0f:59:dd:fa:28:d6:f5:a6: 89:69:3d:15:18:ae:2c:fe:3b:27:91:e1:47:0f:f1:65:90:65: 50:b0:09:6b:b7:af:1e:ae:f1:72:32:75:0a:af:c9:f4:70:d1: 6b:aa:3c:b2:f1:58:e6:aa:2f:3a:9f:1c:a6:ce:7d:52:a6:c8: e5:97:36:6b:23:e9:26:d6:28:30:c4:fe:48:5d:f4:bb:aa:2e: b9:3d:90:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQKFh2GmFTPr6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZDk5YWIxNjktM2JhZi00ZjZkLTlkYTktYjAzMWIwOGE3NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDqJPkP8AXg7OZd5DqYlM12grPXc5JOLZLOk /E7lCXaQMR5sDDJd3KfDpxkpuzpXz2p5u7IQH16s2NCnCkzFGl9CH8sbQikWKpnL YOXNV8Ygvex0jXoh6dpAtkNZCn9k2NzQFomVKHLhv0w43xmcNypC64He3Gpsp/Nt 94yNuXjn88tNWCRhJ5KyPpcbSmia5oCG2vvM2Iwf6ACN5RhUBYNeKNTwt9UyIgbu O/QADHHyaR3lyTKcis2Be6IQEoL7Bl6+BIkCq37LivQFvSa23aIk/ArAD8HSQrkN R12KXEL1QbgTKiFykL5TLP0GP8egcUMQ5VQnN+FwH/gwRX2D8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByOLgQTudon3WfiMd8gwZor5Zk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ZhZjkxZTUtNmM4MS0z ZDY3LWI0OTgtZjkxMzQzN2ZhNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlWvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATUA2z8WR0dluM8Ebp5cxYfyy+iMxqDYBNIS5WTovhAY+qGzq4NN71q PYvqcOXb4ula9YCpUtUb0D+t26bB6MBFbMBkwTREEdaSof5L4zl4AMSXivp1XkQo wGqSmG2PVVcH/w9Diph4/PSTBOS12PUC1KCjOxQvIikDZE+V/GClcAaksQMBYeXO i7TtKghYA0Iw/Qm/6ki4XweVYN8m28KCJe2XEEtJvZzjrBcPWd36KNb1polpPRUY riz+OyeR4UcP8WWQZVCwCWu3rx6u8XIydQqvyfRw0WuqPLLxWOaqLzqfHKbOfVKm yOWXNmsj6SbWKDDE/khd9LuqLrk9kJE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:03 2025 by rpki-client