$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f400819-d6e5-3696-b688-b153a60b73d5.roa File: 5f400819-d6e5-3696-b688-b153a60b73d5.roa (raw, json) Hash identifier: 2hqiSPfa7gLjPAbx4oY4PAXbQNSfhVBjcSZeO0GmwRE= Subject key identifier: 2C:B8:ED:24:C4:81:CA:D2:55:0A:4C:FE:EA:29:F1:24:4B:67:FD:23 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFE295C19CD19A897C480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f400819-d6e5-3696-b688-b153a60b73d5.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fe:29:5c:19:cd:19:a8:97:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=e9d474d1-fabb-487e-8f74-5d807a068743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:5f:82:7c:30:e8:f0:39:5f:23:30:36:81: f4:25:79:ad:bd:c6:4e:af:a2:6f:d7:8a:ae:6f:8c: 3b:55:05:11:26:57:75:aa:1b:03:ec:b0:5f:69:95: fd:59:0d:39:49:82:97:ac:43:89:c9:6c:84:9e:eb: 31:42:b8:1f:bd:1e:46:4e:01:7a:6d:b7:b4:90:3a: dd:4f:09:ce:cc:7f:06:08:fd:5b:98:c3:9d:7f:2d: 3d:98:69:e9:c7:80:40:08:bd:da:8e:31:9a:4d:83: 0a:c9:5a:d6:49:9b:e7:ba:ce:66:a3:28:c6:fa:ff: ec:00:a4:88:85:aa:49:eb:8e:27:d0:aa:0b:dd:80: d1:1a:41:f9:c6:d0:87:ea:8d:5d:bc:77:bc:ba:fe: 4a:64:ba:f7:05:f2:9f:56:94:0d:5e:f5:a3:96:99: 03:e8:f2:b2:90:52:c8:33:42:dc:b2:f2:de:e0:e5: c0:ca:fe:28:04:28:cc:6b:28:2a:f7:e0:08:02:fb: 40:ae:82:38:65:0c:d3:71:8e:8e:23:8b:9a:17:51: 1a:04:fc:96:8f:1a:53:b0:60:c2:92:b4:37:ad:04: f9:96:70:fd:05:ac:e9:65:cb:99:9e:29:d9:50:2b: 51:52:c5:af:be:7e:fe:13:8e:9b:89:2c:df:29:15: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B8:ED:24:C4:81:CA:D2:55:0A:4C:FE:EA:29:F1:24:4B:67:FD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f400819-d6e5-3696-b688-b153a60b73d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:fb:8f:ef:3f:8a:0c:80:e1:60:99:e7:f4:c9:88:e5:41:57: 21:e7:f6:92:75:3b:b5:31:9e:25:a1:58:f9:66:1b:49:62:19: 2d:12:82:55:67:c9:82:1e:36:ec:5b:c5:1f:db:71:f2:0e:e4: a9:f2:83:78:3b:93:77:d2:21:b2:99:57:f3:8a:e7:b9:3d:bc: ed:42:e0:e2:44:55:5c:94:ba:3c:3f:2a:da:ec:01:3c:fa:95: c8:2d:ea:d6:68:f1:65:14:36:1f:6e:9f:4a:74:95:bd:e3:00: b3:ed:fe:b0:5e:0b:bc:c8:15:8e:3f:06:1f:80:26:24:b3:57: f5:9a:5e:ae:ce:de:c5:0a:57:68:f7:f4:9d:ac:e7:91:d4:70: cd:41:b2:11:4e:50:26:e0:7b:de:16:dc:6a:d6:44:e7:c1:1b: 77:78:bb:53:64:1e:b6:e0:5c:a3:ec:72:8c:b6:10:76:40:0b: 07:b9:76:e6:0a:bd:db:c4:59:f9:bc:99:15:04:b0:b2:52:ff: a1:b6:70:47:0b:95:1e:ad:fd:71:74:77:35:d9:ae:81:8d:7b: b5:b7:1d:6e:e2:c1:e5:f2:bd:8d:f2:f2:72:59:2e:30:8e:4b: f6:7f:18:b2:9c:2e:5a:7c:1e:5e:c3:ba:92:0c:87:af:9e:7e: e5:e6:0a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP4pXBnNGaiXxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZTlkNDc0ZDEtZmFiYi00ODdlLThmNzQtNWQ4MDdhMDY4NzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9tfgnww6PA5XyMwNoH0JXmtvcZOr6Jv14qu b4w7VQURJld1qhsD7LBfaZX9WQ05SYKXrEOJyWyEnusxQrgfvR5GTgF6bbe0kDrd TwnOzH8GCP1bmMOdfy09mGnpx4BACL3ajjGaTYMKyVrWSZvnus5moyjG+v/sAKSI hapJ644n0KoL3YDRGkH5xtCH6o1dvHe8uv5KZLr3BfKfVpQNXvWjlpkD6PKykFLI M0LcsvLe4OXAyv4oBCjMaygq9+AIAvtAroI4ZQzTcY6OI4uaF1EaBPyWjxpTsGDC krQ3rQT5lnD9BazpZcuZninZUCtRUsWvvn7+E46biSzfKRUJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy47STEgcrSVQpM/uop8SRLZ/0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNWY0MDA4MTktZDZlNS0z Njk2LWI2ODgtYjE1M2E2MGI3M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb7j+8/igyA4WCZ5/TJiOVBVyHn9pJ1O7UxniWhWPlmG0liGS0SglVn yYIeNuxbxR/bcfIO5Knyg3g7k3fSIbKZV/OK57k9vO1C4OJEVVyUujw/KtrsATz6 lcgt6tZo8WUUNh9un0p0lb3jALPt/rBeC7zIFY4/Bh+AJiSzV/WaXq7O3sUKV2j3 9J2s55HUcM1BshFOUCbge94W3GrWROfBG3d4u1NkHrbgXKPscoy2EHZACwe5duYK vdvEWfm8mRUEsLJS/6G2cEcLlR6t/XF0dzXZroGNe7W3HW7iweXyvY3y8nJZLjCO S/Z/GLKcLlp8Hl7DupIMh6+efuXmCjo= -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:16 2025 by rpki-client