$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa File: 52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa (raw, json) Hash identifier: iqEHeUyCR58nkawNsrr9GODGyhXQLD1WI8+jQOIiJ+c= Subject key identifier: BA:0A:1E:89:1D:2C:49:6B:D7:04:03:9B:3F:17:5B:D4:18:2C:D5:70 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFD989FD199D450EBE500 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fd:98:9f:d1:99:d4:50:eb:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=21e6fb4f-100a-4545-884e-cd9b2909e9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:ce:fe:d2:22:c9:7f:d0:8f:b5:d1:83:48: ab:d2:96:8e:75:4b:00:11:1a:e8:12:4d:ff:38:c8: ec:20:8c:ef:c1:26:ed:89:dc:5a:62:93:70:45:25: d0:4e:27:c5:dd:cd:03:d3:db:61:ba:10:d3:a8:12: 05:2b:21:6b:a2:81:68:33:38:ba:d9:46:2e:f5:d2: c8:85:cd:aa:24:13:2e:d9:52:17:30:d7:f5:ab:e2: e0:2d:cd:85:48:15:55:fa:19:fd:ee:c6:a7:06:ae: 66:ff:77:4d:d3:91:7c:a7:07:ec:b8:63:86:88:a5: 01:2e:b7:d9:8f:f1:35:e1:0a:ef:5d:b1:21:d5:29: fa:ff:55:18:c4:05:11:66:ee:90:b8:02:52:ec:57: 79:4a:f3:ff:2d:4e:9e:af:f1:cb:a3:f2:03:09:a9: 9a:09:11:4a:5d:9a:f7:a8:40:5f:cb:12:2d:3c:ff: a8:17:fc:79:a1:38:b1:f5:22:b8:68:9d:2c:4c:f3: 08:8d:cf:f1:e2:ec:b0:4b:cf:0c:f3:a6:25:ed:29: ee:60:7d:76:0d:7b:a5:d0:c4:f1:b8:22:11:54:87: c3:4a:12:8f:77:4e:43:9c:fa:17:11:24:67:1a:19: 9d:82:40:16:46:a3:62:a3:86:54:4d:8b:b5:79:73: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0A:1E:89:1D:2C:49:6B:D7:04:03:9B:3F:17:5B:D4:18:2C:D5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/52ebeacd-8144-3812-ab9f-7b5897eaf0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a8:be:e8:8e:c0:2e:af:20:cf:29:41:1f:d5:4c:8e:e2:4a: f7:9e:21:04:e5:a7:7d:da:c9:5b:30:8b:da:98:a7:26:0d:55: 7a:c0:07:cd:92:64:81:15:c9:a9:9b:71:a0:25:5d:6e:0e:df: b9:28:dd:85:e0:11:7d:fc:9b:d4:36:61:f7:3e:2c:db:22:00: a7:87:21:3b:4b:fb:24:57:42:17:cc:f8:a6:a7:c8:bd:fa:bf: b2:48:05:0b:c3:b4:84:12:4e:36:f0:42:e2:bc:1a:1a:2e:bd: 3b:86:03:5a:ac:47:5f:36:47:9d:11:05:8b:16:0d:38:fb:83: 23:48:e5:8a:2d:d4:d9:3d:6c:71:5f:d4:f3:64:68:9c:68:48: b6:1e:c5:97:5a:76:df:34:f1:4c:e2:10:93:a0:f3:e0:dd:fe: 70:77:f5:91:d9:76:70:6f:51:4e:58:aa:02:5a:3f:0e:c6:ba: 1a:28:dd:ec:34:1a:6f:fb:14:ee:9a:a8:77:c0:89:b9:ff:75: a8:f1:6b:97:b1:20:cb:f0:63:25:78:bb:43:50:73:00:4b:ee: 87:f1:3e:9c:c0:65:0e:1f:3e:6a:91:4f:1e:e2:ce:05:31:f3: b9:80:9f:33:14:18:6e:2c:ea:2c:9a:46:71:bb:34:e7:07:bb: d1:92:49:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP2Yn9GZ1FDr5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MjFlNmZiNGYtMTAwYS00NTQ1LTg4NGUtY2Q5YjI5MDllOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHDO/tIiyX/Qj7XRg0ir0paOdUsAERroEk3/ OMjsIIzvwSbtidxaYpNwRSXQTifF3c0D09thuhDTqBIFKyFrooFoMzi62UYu9dLI hc2qJBMu2VIXMNf1q+LgLc2FSBVV+hn97sanBq5m/3dN05F8pwfsuGOGiKUBLrfZ j/E14QrvXbEh1Sn6/1UYxAURZu6QuAJS7Fd5SvP/LU6er/HLo/IDCamaCRFKXZr3 qEBfyxItPP+oF/x5oTix9SK4aJ0sTPMIjc/x4uywS88M86Yl7SnuYH12DXul0MTx uCIRVIfDShKPd05DnPoXESRnGhmdgkAWRqNio4ZUTYu1eXOHkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoKHokdLElr1wQDmz8XW9QYLNVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTJlYmVhY2QtODE0NC0z ODEyLWFiOWYtN2I1ODk3ZWFmMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6ovuiOwC6vIM8pQR/VTI7iSveeIQTlp33ayVswi9qYpyYNVXrAB82S ZIEVyambcaAlXW4O37ko3YXgEX38m9Q2Yfc+LNsiAKeHITtL+yRXQhfM+KanyL36 v7JIBQvDtIQSTjbwQuK8GhouvTuGA1qsR182R50RBYsWDTj7gyNI5Yot1Nk9bHFf 1PNkaJxoSLYexZdadt808UziEJOg8+Dd/nB39ZHZdnBvUU5YqgJaPw7Guhoo3ew0 Gm/7FO6aqHfAibn/dajxa5exIMvwYyV4u0NQcwBL7ofxPpzAZQ4fPmqRTx7izgUx 87mAnzMUGG4s6iyaRnG7NOcHu9GSSdQ= -----END CERTIFICATE-----Generated at Wed Nov 5 17:48:45 2025 by rpki-client