$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa File: 4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa (raw, json) Hash identifier: 0QVMAldLdhBIhe5gvxpToEJp3ZW5ihEl034O+PcppeQ= Subject key identifier: AB:25:58:A0:B6:2E:A6:DE:E2:AA:DD:89:06:9F:83:5C:B7:6C:F5:A7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D008057FD2D8E21DBD7B8 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:00:80:57:fd:2d:8e:21:db:d7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=0b3e8f38-593c-4274-a185-4a169f013440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:18:33:19:3d:dc:2e:60:c5:a2:2c:30:84: 32:f3:11:31:af:69:c8:7b:e1:b6:81:a1:fa:35:18: 20:f3:56:34:c9:82:51:2b:dd:10:bd:f3:03:21:08: 84:9a:f1:92:52:06:4f:09:37:f6:25:8c:ea:2b:a2: 72:a3:ea:e5:3f:5c:29:a7:9d:8c:21:eb:bb:49:cc: 1a:49:d4:67:5e:c2:f5:8a:cd:24:a3:9b:96:45:ed: 46:22:8d:93:f7:78:42:3e:5f:e5:80:50:72:33:29: 19:e1:d1:b6:c6:10:09:e9:cc:98:74:89:a6:ca:b8: d5:bb:1b:24:9f:1e:aa:7e:16:58:87:a4:bc:e3:a7: 70:34:4c:43:ec:21:20:2f:ac:6b:3b:f7:b3:d1:5b: f1:9c:c4:33:cd:10:e1:97:47:69:5b:2b:05:0d:a5: 85:24:95:e7:fa:0e:e7:50:53:da:b5:97:c6:ad:d9: 93:8d:ca:5e:41:0a:7f:95:8a:23:65:d5:89:8f:92: 26:e3:4c:fc:7f:bf:59:bd:de:6c:82:64:8b:d0:b3: 46:85:87:66:98:3f:fd:59:09:46:eb:71:55:57:80: eb:4e:aa:24:2e:cd:5b:49:94:0d:e2:91:7f:fc:ee: 43:91:95:0d:2d:4e:c5:59:25:d4:d3:22:38:86:7b: 11:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:25:58:A0:B6:2E:A6:DE:E2:AA:DD:89:06:9F:83:5C:B7:6C:F5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ab:16:b1:50:5b:b7:b3:8d:bf:54:c2:88:a6:c7:7e:ca:4c: 86:d0:dd:1e:f6:2e:30:97:07:2e:8b:98:f3:57:01:72:f2:4f: 3f:45:e3:d6:81:76:a2:20:51:81:97:5e:cc:bf:34:f6:ea:73: 35:19:5d:47:8b:68:ba:b7:47:5e:38:ed:e2:10:a9:43:58:4f: b7:6e:26:0e:62:44:92:4a:bc:ce:4b:c4:23:dc:dd:c0:56:8a: ea:d4:c7:00:62:21:ef:41:9d:de:4f:fb:34:78:cb:3d:d8:6a: 36:24:f9:8d:60:be:95:cb:07:c5:85:fb:5a:83:71:42:60:64: cd:bd:24:64:de:64:8b:8d:84:6a:75:9f:72:14:f4:d4:50:b7: 05:7f:e4:d3:2f:2d:e4:43:90:e5:92:9e:d1:b7:2f:90:e1:ed: 07:67:30:60:c3:68:40:b4:f8:5f:1f:7c:bc:09:e4:67:05:e5: ad:a6:aa:b9:d6:7d:34:bc:82:13:97:b2:45:77:3f:19:d5:f0: 82:9b:3d:24:65:c5:b4:b5:6c:e4:7e:9f:ed:ca:7d:ed:aa:39: 99:20:c6:67:db:0c:65:a9:d9:30:28:d6:d8:00:c2:11:f2:01: 79:3b:48:1f:c5:ac:cf:5c:3d:3a:29:b1:aa:5f:5a:1f:9f:9e: 80:eb:3f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQCAV/0tjiHb17gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MGIzZThmMzgtNTkzYy00Mjc0LWExODUtNGExNjlmMDEzNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqkYMxk93C5gxaIsMIQy8xExr2nIe+G2gaH6 NRgg81Y0yYJRK90QvfMDIQiEmvGSUgZPCTf2JYzqK6Jyo+rlP1wpp52MIeu7Scwa SdRnXsL1is0ko5uWRe1GIo2T93hCPl/lgFByMykZ4dG2xhAJ6cyYdImmyrjVuxsk nx6qfhZYh6S846dwNExD7CEgL6xrO/ez0VvxnMQzzRDhl0dpWysFDaWFJJXn+g7n UFPatZfGrdmTjcpeQQp/lYojZdWJj5Im40z8f79Zvd5sgmSL0LNGhYdmmD/9WQlG 63FVV4DrTqokLs1bSZQN4pF//O5DkZUNLU7FWSXU0yI4hnsRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKslWKC2Lqbe4qrdiQafg1y3bPWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDc2NGVlYjMtYjQ1NC0z ODI1LThkMWMtYWQ4ZTUxODhkMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGrFrFQW7ezjb9Uwoimx37KTIbQ3R72LjCXBy6LmPNXAXLyTz9F49aB dqIgUYGXXsy/NPbqczUZXUeLaLq3R1447eIQqUNYT7duJg5iRJJKvM5LxCPc3cBW iurUxwBiIe9Bnd5P+zR4yz3YajYk+Y1gvpXLB8WF+1qDcUJgZM29JGTeZIuNhGp1 n3IU9NRQtwV/5NMvLeRDkOWSntG3L5Dh7QdnMGDDaEC0+F8ffLwJ5GcF5a2mqrnW fTS8ghOXskV3PxnV8IKbPSRlxbS1bOR+n+3Kfe2qOZkgxmfbDGWp2TAo1tgAwhHy AXk7SB/FrM9cPTopsapfWh+fnoDrP2w= -----END CERTIFICATE-----Generated at Wed Nov 5 01:00:53 2025 by rpki-client