$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4f9af96b-0de4-3b6d-92c3-860874819329.roa File: 4f9af96b-0de4-3b6d-92c3-860874819329.roa (raw, json) Hash identifier: 53NWgPwrEOFDSXqS/oCATovst81BZDO/CDcoc8HC2wc= Subject key identifier: 18:5C:61:C6:55:79:E8:14:7C:28:C2:BE:9B:68:BA:44:F7:A0:6E:D4 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D043ECB6EB9D9190AAD00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4f9af96b-0de4-3b6d-92c3-860874819329.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 170.85.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:04:3e:cb:6e:b9:d9:19:0a:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=4352fa15-b2a1-4ef9-9f38-3173fea0530a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:7b:71:a6:59:80:5c:a3:d1:73:bf:b0:0e: 32:da:53:2d:50:19:5a:8d:88:43:f2:93:dd:68:e8: 2b:be:66:f5:db:be:4e:0e:66:ca:4a:a9:51:7e:01: 0a:ab:40:ec:29:eb:a4:e7:e8:7f:e6:33:5b:7a:94: 34:64:99:71:34:4e:ac:00:6e:69:37:35:ce:e3:7e: 8d:78:8e:23:32:71:23:9f:b9:0a:48:82:b6:db:3a: b6:4a:8f:81:3e:6d:9b:d7:e7:e5:e7:d5:03:3c:99: ee:1f:30:b8:ca:ed:73:93:57:5a:d2:88:ff:57:25: 98:75:85:3f:d6:d7:9e:38:c2:d6:5b:78:d0:79:48: b9:de:a2:5c:63:ab:f0:b6:3a:52:41:0c:1f:19:dd: e4:59:8c:4f:58:54:89:4b:e5:ba:7a:ba:97:b4:08: 23:74:37:49:e6:5b:42:ea:42:7e:63:14:96:28:c5: 36:59:41:44:19:b3:d8:f6:90:93:88:fb:9e:f5:56: e6:f8:b1:4a:08:5a:18:7d:7f:bf:dd:39:fd:99:3a: c0:b1:29:2a:40:a7:10:92:f1:11:8f:b3:89:a7:75: ad:1d:e3:b1:87:2e:37:61:20:eb:65:1e:f9:f9:1a: e0:e0:f4:a8:16:f2:f4:cd:83:df:4f:a4:38:f9:c8: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5C:61:C6:55:79:E8:14:7C:28:C2:BE:9B:68:BA:44:F7:A0:6E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4f9af96b-0de4-3b6d-92c3-860874819329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1e:85:ac:b6:67:5f:e4:7d:a1:ba:70:13:0e:39:69:fe:7c: e4:fb:a0:a6:90:90:7a:98:73:0e:83:8e:ce:54:2d:68:fe:bb: 48:26:c6:9e:de:e6:c1:c8:a8:5f:75:c3:8e:90:8d:70:c3:59: a1:e9:ec:df:5e:d6:9f:62:b0:95:e9:7c:d6:4b:7c:de:a1:37: 10:ec:14:c4:c5:d1:55:4f:1b:bf:f7:36:49:f4:62:4b:5f:d3: b0:59:f6:90:3f:ee:1a:55:d9:fd:fd:93:f9:7f:76:bf:64:69: 6d:bb:dd:3c:da:79:a8:4b:ee:25:12:9f:ca:fd:60:3d:3d:39: e3:80:8c:7a:a7:e9:16:4a:b6:4e:93:02:f1:18:8c:76:76:5a: 9a:7c:6d:08:04:e1:d8:36:c2:f5:79:64:c9:04:70:12:12:71: a7:d3:c0:0b:23:a6:14:09:fa:f1:f8:b2:60:2d:15:3f:0a:a5: 44:0c:30:a4:e0:91:f0:f8:d0:6e:7c:8f:fe:04:99:57:77:fa: 6e:f6:2b:9f:b6:68:30:79:52:51:9b:8f:ff:a1:63:4b:dc:f0: f2:ad:8b:6c:f3:39:f6:85:18:96:3d:57:c7:45:af:f0:16:b8: 3c:11:a5:4b:d6:d0:f4:17:b6:39:d8:cf:95:09:20:72:05:3f: 91:0e:97:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQQ+y2652RkKrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NDM1MmZhMTUtYjJhMS00ZWY5LTlmMzgtMzE3M2ZlYTA1MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv97caZZgFyj0XO/sA4y2lMtUBlajYhD8pPd aOgrvmb1275ODmbKSqlRfgEKq0DsKeuk5+h/5jNbepQ0ZJlxNE6sAG5pNzXO436N eI4jMnEjn7kKSIK22zq2So+BPm2b1+fl59UDPJnuHzC4yu1zk1da0oj/VyWYdYU/ 1teeOMLWW3jQeUi53qJcY6vwtjpSQQwfGd3kWYxPWFSJS+W6erqXtAgjdDdJ5ltC 6kJ+YxSWKMU2WUFEGbPY9pCTiPue9Vbm+LFKCFoYfX+/3Tn9mTrAsSkqQKcQkvER j7OJp3WtHeOxhy43YSDrZR75+Rrg4PSoFvL0zYPfT6Q4+cgDqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhcYcZVeegUfCjCvptoukT3oG7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNGY5YWY5NmItMGRlNC0z YjZkLTkyYzMtODYwODc0ODE5MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUehay2Z1/kfaG6cBMOOWn+fOT7oKaQkHqYcw6Djs5ULWj+u0gmxp7e 5sHIqF91w46QjXDDWaHp7N9e1p9isJXpfNZLfN6hNxDsFMTF0VVPG7/3Nkn0Yktf 07BZ9pA/7hpV2f39k/l/dr9kaW273TzaeahL7iUSn8r9YD09OeOAjHqn6RZKtk6T AvEYjHZ2Wpp8bQgE4dg2wvV5ZMkEcBIScafTwAsjphQJ+vH4smAtFT8KpUQMMKTg kfD40G58j/4EmVd3+m72K5+2aDB5UlGbj/+hY0vc8PKti2zzOfaFGJY9V8dFr/AW uDwRpUvW0PQXtjnYz5UJIHIFP5EOl6s= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:37 2025 by rpki-client