$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50b08129-3558-35a1-9e7a-37e1da083f1e.roa File: 50b08129-3558-35a1-9e7a-37e1da083f1e.roa (raw, json) Hash identifier: qRAzLhAbrCB4SIwoUacSwg3/ICtvGCL9O6FNj1rajRM= Subject key identifier: C8:2E:E2:26:71:AB:D2:3C:5D:3C:B7:95:56:3D:C2:97:25:52:95:C8 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0093E6326B08C06BBA00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50b08129-3558-35a1-9e7a-37e1da083f1e.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:00:93:e6:32:6b:08:c0:6b:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=625e0257-5db0-45af-a9d5-18eaebae62a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:c1:c5:60:74:04:70:4d:bd:a3:f9:48:67: fa:56:3a:b6:41:57:dc:c9:56:db:5a:e1:37:28:df: 75:13:f7:05:b4:f6:ea:97:71:3d:2e:85:a9:e4:47: 2b:60:d7:7a:4c:e9:73:79:d6:79:4f:34:38:57:5f: a1:92:d6:0b:a8:3b:9e:7d:33:f2:fc:ac:cb:e3:7b: f8:0b:ce:9b:fd:4d:56:dd:6d:a2:99:03:58:e0:9f: be:82:15:2a:74:3c:32:20:ed:7a:6a:95:5e:7a:af: 41:0a:aa:19:3b:09:2f:4a:c5:89:cf:11:89:f8:f9: 9f:08:fc:2d:82:ea:cd:c1:13:b5:5c:36:3e:32:40: 07:b1:13:50:fd:c1:c3:07:b9:da:f6:48:38:39:5c: 89:af:bc:6f:01:e3:52:2c:19:73:8a:16:ee:7b:c8: f4:d2:fd:7c:97:83:aa:00:6b:a5:22:12:b0:8d:37: 18:37:cc:91:fd:d8:96:38:eb:a5:4b:b2:2e:50:c1: 92:57:57:3c:4c:5b:59:27:d8:02:bf:7b:8c:12:4a: 55:bb:7b:39:c7:2c:38:b8:74:45:56:69:88:5e:f4: 5d:3d:fd:48:79:4f:12:f9:53:9e:88:e2:89:38:a3: 64:e0:bf:a8:f8:84:b4:d2:b0:5f:8a:19:e1:45:89: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2E:E2:26:71:AB:D2:3C:5D:3C:B7:95:56:3D:C2:97:25:52:95:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50b08129-3558-35a1-9e7a-37e1da083f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0d:de:96:e8:54:8a:64:c0:d7:ef:d9:88:05:71:1a:d6:ad: 00:17:8b:97:ea:bb:29:da:7c:29:61:19:bd:39:fc:78:e7:e1: ea:40:5d:3e:66:f4:6c:a6:9f:f8:d5:51:2a:95:1a:e9:82:de: de:1c:89:fd:6d:da:4f:2d:ac:89:3e:79:52:7d:8f:7f:8f:c9: 48:1f:ea:c0:ed:e8:89:88:95:c9:96:da:d2:75:27:8d:b5:3e: f5:05:c4:93:ec:9b:45:87:e8:9d:2f:a7:79:c9:16:86:65:a1: 86:8b:85:48:ee:33:50:c7:ea:01:4a:19:0a:ac:16:1b:36:40: b1:7d:cb:17:50:16:b1:25:00:b7:ba:92:7e:32:17:d5:f0:5e: 94:66:17:17:c5:5e:3f:f9:2d:7f:bf:79:78:c3:90:8d:cb:0a: 9c:66:5f:f7:78:8e:64:92:ff:e5:a7:e7:a5:20:1b:d7:61:44: 3e:48:5d:88:a4:df:8b:6b:80:99:42:0b:8f:d6:f2:4e:b2:6a: 8a:07:15:6e:f0:50:32:c0:7d:fb:0f:91:d3:92:40:34:b3:d4: c6:c6:c7:17:fc:60:a9:1e:2d:b0:8a:e8:36:1d:d9:88:f9:57: 6c:e9:8b:70:0b:fc:64:64:da:59:a4:13:d0:31:ed:24:84:32: da:58:30:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQCT5jJrCMBrugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NjI1ZTAyNTctNWRiMC00NWFmLWE5ZDUtMThlYWViYWU2MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDvBxWB0BHBNvaP5SGf6Vjq2QVfcyVbbWuE3 KN91E/cFtPbql3E9LoWp5EcrYNd6TOlzedZ5TzQ4V1+hktYLqDuefTPy/KzL43v4 C86b/U1W3W2imQNY4J++ghUqdDwyIO16apVeeq9BCqoZOwkvSsWJzxGJ+PmfCPwt gurNwRO1XDY+MkAHsRNQ/cHDB7na9kg4OVyJr7xvAeNSLBlzihbue8j00v18l4Oq AGulIhKwjTcYN8yR/diWOOulS7IuUMGSV1c8TFtZJ9gCv3uMEkpVu3s5xyw4uHRF VmmIXvRdPf1IeU8S+VOeiOKJOKNk4L+o+IS00rBfihnhRYnTqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgu4iZxq9I8XTy3lVY9wpclUpXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTBiMDgxMjktMzU1OC0z NWExLTllN2EtMzdlMWRhMDgzZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIN3pboVIpkwNfv2YgFcRrWrQAXi5fquynafClhGb05/Hjn4epAXT5m 9Gymn/jVUSqVGumC3t4cif1t2k8trIk+eVJ9j3+PyUgf6sDt6ImIlcmW2tJ1J421 PvUFxJPsm0WH6J0vp3nJFoZloYaLhUjuM1DH6gFKGQqsFhs2QLF9yxdQFrElALe6 kn4yF9XwXpRmFxfFXj/5LX+/eXjDkI3LCpxmX/d4jmSS/+Wn56UgG9dhRD5IXYik 34trgJlCC4/W8k6yaooHFW7wUDLAffsPkdOSQDSz1MbGxxf8YKkeLbCK6DYd2Yj5 V2zpi3AL/GRk2lmkE9Ax7SSEMtpYMLM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:22:25 2025 by rpki-client