$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/464d58f7-ce5f-34b7-a291-e3fb9d00fb35.roa File: 464d58f7-ce5f-34b7-a291-e3fb9d00fb35.roa (raw, json) Hash identifier: l8VBDg6mn3WM5NpTkmjrdW5/tpeK96iV4ULPrGsbGjw= Subject key identifier: D8:6C:FD:E2:66:0F:2A:1F:F9:12:0C:31:E4:CD:84:ED:F8:6F:15:51 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFDA8DC1BC4488F39E880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/464d58f7-ce5f-34b7-a291-e3fb9d00fb35.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fd:a8:dc:1b:c4:48:8f:39:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=95025fc9-04cb-404b-bcae-bb4cb6d159ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:d4:b4:5d:27:45:3d:52:c9:6c:88:bc:58: ea:b5:0a:f3:cd:4d:a5:42:9e:b5:78:53:9c:8f:09: 08:11:b8:6a:8f:2f:d9:5f:cf:75:c3:0d:5d:cd:20: b8:48:2c:a1:b1:91:99:44:3a:35:c3:bf:1c:21:3e: 8e:1b:45:05:d2:ac:28:6b:33:22:c8:70:fc:58:82: ee:c5:d8:03:2f:15:ce:bf:e3:aa:ad:72:51:bb:81: 94:8c:d1:93:8c:1c:d1:4a:c1:c3:c2:88:ca:7b:21: d0:e3:8f:95:af:fc:e3:6b:10:9f:b3:d4:24:49:8a: 52:6a:d5:12:7a:81:db:30:e9:7b:a1:e6:17:a6:85: e6:f0:3b:10:5f:dd:00:15:cf:23:9a:c1:5d:ea:62: 20:c6:b8:21:ae:a0:ee:fb:75:6e:d4:10:c6:99:1a: 1b:c2:f9:3e:67:25:91:a7:15:cc:d6:05:4b:d5:3a: b7:72:67:f7:59:5d:a9:57:30:16:cd:09:d5:24:f6: 9a:5a:24:61:e7:b6:f0:c0:17:50:9a:64:f9:55:49: 76:3a:52:8c:52:0a:79:75:7c:18:38:cb:86:77:7c: 2a:6c:d6:28:12:80:52:71:b7:71:06:24:4e:81:a8: 41:24:28:54:08:39:ef:a3:de:40:df:df:5a:d8:e1: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6C:FD:E2:66:0F:2A:1F:F9:12:0C:31:E4:CD:84:ED:F8:6F:15:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/464d58f7-ce5f-34b7-a291-e3fb9d00fb35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1e:08:f9:a8:0c:1d:c8:36:ec:32:e6:a7:93:86:f2:cf:56: 99:47:5f:03:13:f4:f6:fd:7e:f9:a0:ce:c7:94:1d:2b:e2:c7: 6b:26:6b:13:96:32:14:56:a7:92:73:f4:16:b3:c3:95:b3:a4: 8d:dd:db:a1:c9:0b:e2:24:35:83:e6:30:68:13:8a:aa:1b:89: 5a:79:8f:4b:b5:42:db:4b:9f:5b:78:60:b4:9d:6f:43:6c:09: 88:53:08:e4:24:17:ea:31:bc:e6:ce:ef:b8:cf:bf:61:82:a5: f3:99:c8:ac:6c:20:09:ed:97:b2:80:bf:fd:b6:56:c9:15:a0: 60:58:b5:9e:be:ec:b3:52:c5:33:aa:8e:6e:07:15:05:13:83: 79:82:65:86:b7:34:b1:04:e6:96:da:cc:cf:41:95:16:21:37: e1:00:8d:e9:c9:ad:51:92:19:47:26:e5:02:52:18:ad:42:a9: a1:21:80:c7:1f:a9:4c:d9:a5:b7:27:0c:57:fa:dc:d4:0d:11: 53:ba:a0:0d:ab:fd:2c:a6:ad:2c:47:be:5b:1b:c7:55:f1:18: 2a:0a:61:f9:b7:d7:91:f2:f5:f2:e1:af:a9:82:36:7d:8d:95: b6:de:64:d0:51:f0:20:77:d1:0d:b1:93:7b:31:36:ab:10:b2: 58:68:88:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP2o3BvESI856IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OTUwMjVmYzktMDRjYi00MDRiLWJjYWUtYmI0Y2I2ZDE1OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR3UtF0nRT1SyWyIvFjqtQrzzU2lQp61eFOc jwkIEbhqjy/ZX891ww1dzSC4SCyhsZGZRDo1w78cIT6OG0UF0qwoazMiyHD8WILu xdgDLxXOv+OqrXJRu4GUjNGTjBzRSsHDwojKeyHQ44+Vr/zjaxCfs9QkSYpSatUS eoHbMOl7oeYXpoXm8DsQX90AFc8jmsFd6mIgxrghrqDu+3Vu1BDGmRobwvk+ZyWR pxXM1gVL1Tq3cmf3WV2pVzAWzQnVJPaaWiRh57bwwBdQmmT5VUl2OlKMUgp5dXwY OMuGd3wqbNYoEoBScbdxBiROgahBJChUCDnvo95A399a2OGuFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhs/eJmDyof+RIMMeTNhO34bxVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDY0ZDU4ZjctY2U1Zi0z NGI3LWEyOTEtZTNmYjlkMDBmYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQeCPmoDB3INuwy5qeThvLPVplHXwMT9Pb9fvmgzseUHSvix2smaxOW MhRWp5Jz9Bazw5WzpI3d26HJC+IkNYPmMGgTiqobiVp5j0u1QttLn1t4YLSdb0Ns CYhTCOQkF+oxvObO77jPv2GCpfOZyKxsIAntl7KAv/22VskVoGBYtZ6+7LNSxTOq jm4HFQUTg3mCZYa3NLEE5pbazM9BlRYhN+EAjenJrVGSGUcm5QJSGK1CqaEhgMcf qUzZpbcnDFf63NQNEVO6oA2r/SymrSxHvlsbx1XxGCoKYfm315Hy9fLhr6mCNn2N lbbeZNBR8CB30Q2xk3sxNqsQslhoiOw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:07 2025 by rpki-client