$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa File: 4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa (raw, json) Hash identifier: gPH5yAkpkgdLUmrmXVlU7tXwVS/HwJg0xzY1xNVlia8= Subject key identifier: 69:D7:3E:37:11:BC:26:27:D0:78:DC:3F:70:8C:47:F8:27:1B:F5:4E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D036E160412EBB6B71680 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:6e:16:04:12:eb:b6:b7:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=a45451f0-0596-4585-88ed-169d93e716f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:2b:e3:87:7b:f4:6c:1e:dc:30:b7:52:19: 67:a8:66:a5:5d:7e:47:62:aa:2e:69:91:21:0a:7d: e2:28:20:67:15:7c:8c:f9:c7:23:23:3d:13:28:74: ec:ea:e4:f8:98:93:74:0e:6e:04:8a:86:51:f2:44: dd:c1:ed:38:37:37:8b:c0:26:53:6e:d1:22:f3:ae: e3:7b:d8:32:a6:fe:e3:dd:91:16:a5:5a:01:3d:8f: 2a:bf:21:b1:e3:65:d7:82:66:de:1b:92:04:1d:c1: 8e:4c:c8:d8:4d:f9:56:2a:43:50:b3:44:d6:6c:18: 00:ff:16:4e:f2:81:23:b6:6c:8f:af:ab:0f:82:96: 1b:be:96:96:89:a4:4c:81:e5:00:2a:d8:54:e2:10: 4b:c4:14:8d:64:18:dc:91:0d:da:4f:e5:68:ec:cc: 3e:0a:87:55:4f:be:fe:83:f0:95:16:90:91:f1:07: 1d:35:52:15:da:96:25:59:99:07:8c:c0:56:7e:05: 14:0d:63:14:0f:21:fb:c6:3b:5c:5f:e0:b0:f2:e1: 57:2b:7e:4b:a9:16:65:6b:04:78:45:94:3f:91:42: 06:b8:55:04:8b:98:7d:ea:cd:ba:f1:ec:e1:bd:34: a2:e3:aa:3a:49:41:6f:18:40:e1:79:b8:63:2e:79: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D7:3E:37:11:BC:26:27:D0:78:DC:3F:70:8C:47:F8:27:1B:F5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4d10efa7-5af8-3e26-93cd-4782abdaa2c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:03:36:45:d8:19:3e:b9:38:ae:3e:8a:ec:76:05:5c:0f:f7: 95:e0:fe:4a:60:f9:90:38:b4:89:53:34:98:5c:b5:ac:d9:76: 5a:40:f3:f2:28:41:40:ab:29:d5:b8:36:89:f5:da:0c:c2:07: 98:6f:3e:7b:31:37:9f:5d:2c:fe:27:b8:f0:23:51:13:ec:f2: d6:3f:25:03:09:0e:5e:a4:cf:1f:92:69:ed:a1:a2:52:1d:45: 6f:97:d9:12:97:08:4d:6d:bb:ff:a0:b0:eb:f5:57:07:0a:d3: f3:2a:73:6e:86:50:bc:45:f0:c5:47:f2:92:13:6d:04:7c:53: d1:b8:75:b0:2b:05:75:32:58:b9:6c:e1:e1:6c:a6:43:4f:f6: 25:1a:66:6f:9d:cd:24:1a:6c:07:8b:1a:c2:2c:21:3f:f4:35: 32:bf:a0:4f:ba:35:86:e9:39:b8:c4:d7:36:c0:b4:77:9f:59: 69:8b:35:a2:80:a0:6d:38:c8:50:69:70:ec:41:6a:b4:f4:d1: 00:6b:98:d7:ad:62:73:23:86:33:82:f3:e6:0c:ac:e0:9b:bd: 36:49:86:ff:ac:d1:1f:83:d2:f5:ff:de:ed:f9:2b:72:51:6d: e4:9d:89:04:8b:24:d9:8d:7d:d3:c0:28:c2:21:a2:fb:2c:8e: a9:47:c0:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQNuFgQS67a3FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YTQ1NDUxZjAtMDU5Ni00NTg1LTg4ZWQtMTY5ZDkzZTcxNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Qr44d79Gwe3DC3UhlnqGalXX5HYqouaZEh Cn3iKCBnFXyM+ccjIz0TKHTs6uT4mJN0Dm4EioZR8kTdwe04NzeLwCZTbtEi867j e9gypv7j3ZEWpVoBPY8qvyGx42XXgmbeG5IEHcGOTMjYTflWKkNQs0TWbBgA/xZO 8oEjtmyPr6sPgpYbvpaWiaRMgeUAKthU4hBLxBSNZBjckQ3aT+Vo7Mw+CodVT77+ g/CVFpCR8QcdNVIV2pYlWZkHjMBWfgUUDWMUDyH7xjtcX+Cw8uFXK35LqRZlawR4 RZQ/kUIGuFUEi5h96s268ezhvTSi46o6SUFvGEDhebhjLnnEYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnXPjcRvCYn0HjcP3CMR/gnG/VOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNGQxMGVmYTctNWFmOC0z ZTI2LTkzY2QtNDc4MmFiZGFhMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsDNkXYGT65OK4+iux2BVwP95Xg/kpg+ZA4tIlTNJhctazZdlpA8/Io QUCrKdW4Non12gzCB5hvPnsxN59dLP4nuPAjURPs8tY/JQMJDl6kzx+Sae2holId RW+X2RKXCE1tu/+gsOv1VwcK0/Mqc26GULxF8MVH8pITbQR8U9G4dbArBXUyWLls 4eFspkNP9iUaZm+dzSQabAeLGsIsIT/0NTK/oE+6NYbpObjE1zbAtHefWWmLNaKA oG04yFBpcOxBarT00QBrmNetYnMjhjOC8+YMrOCbvTZJhv+s0R+D0vX/3u35K3JR beSdiQSLJNmNfdPAKMIhovssjqlHwPY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:08 2025 by rpki-client