$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa File: 60c927ec-90ac-3752-8522-afaff9a34b0e.roa (raw, json) Hash identifier: 5ET5R5SI4MNKB5updD80u3SkpMwv/FM5ErpfMK3f2z0= Subject key identifier: A3:7A:8B:21:EA:36:04:A6:BC:E5:05:25:E6:FF:C4:BE:0F:C3:D2:14 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D03D490FBE1FF6F60EE00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:d4:90:fb:e1:ff:6f:60:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=04d63bf3-add7-4e74-8f41-c95fd543bcc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:bb:4d:66:c4:66:f5:5c:05:c1:ef:85:1d: 6c:2f:34:0e:17:83:f4:e4:19:d8:c5:89:3b:b0:aa: 7c:e4:fc:82:90:d3:31:78:72:01:68:60:c3:0f:ec: 18:15:55:50:ed:9b:79:cd:21:aa:05:be:f1:9a:60: 0c:a9:16:b3:5e:f4:e1:ea:53:f4:f5:31:7d:b4:75: 78:5e:56:18:cb:d5:78:a6:51:00:31:36:8b:db:2e: 2f:63:be:13:9f:0e:6c:36:25:08:3e:53:eb:0f:bb: 25:d4:92:cf:a3:8a:dc:e6:c2:6a:6e:5a:ae:9d:6f: cc:9d:7c:ea:fb:2c:64:54:2c:65:b1:1b:e6:63:c2: db:d1:9b:07:fd:84:37:2c:67:8b:fc:40:36:92:e0: 34:e8:f9:12:e2:36:6b:6e:07:16:3d:36:1d:e4:ab: 60:fb:13:96:47:0b:fd:d5:64:9b:da:a6:d0:c6:e6: e3:81:72:37:9e:55:c4:c2:a3:ad:fd:dc:00:7c:a4: 5f:93:d1:36:e3:92:f0:86:d2:73:d3:2a:33:a3:cf: 75:4d:d5:d2:98:53:bb:63:5f:e8:c7:96:af:58:27: b1:a7:99:cd:f2:de:df:76:f2:29:62:92:b7:80:74: b8:47:a9:68:63:6f:bc:c2:69:d5:b6:9f:67:f4:bc: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7A:8B:21:EA:36:04:A6:BC:E5:05:25:E6:FF:C4:BE:0F:C3:D2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/60c927ec-90ac-3752-8522-afaff9a34b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c6:b5:57:d8:ae:cf:70:d3:32:a4:b4:30:a9:86:a4:01:9e: 73:7e:dd:dc:e6:21:59:0c:57:65:ee:55:66:ac:80:79:29:d3: 32:6b:0d:fa:2f:2b:7b:dc:af:1d:2b:f7:f0:42:24:a5:f2:d9: 02:ba:d0:8e:eb:62:0a:52:3d:b3:8d:48:be:b0:e3:5b:51:83: 9c:9f:6b:24:cb:a4:6b:7c:85:0f:f4:b1:5a:5b:f4:63:fe:5f: 7d:34:10:a1:5e:9a:37:6a:51:41:2a:4c:40:13:51:f4:5a:53: ec:a3:a4:85:f1:c4:0f:27:90:06:bc:b1:86:a4:0e:5a:1c:aa: 3c:a6:78:0e:d1:88:0b:ed:51:e9:c0:84:5e:46:cc:4f:b1:bb: 94:f8:d7:53:2b:83:29:ff:cd:d6:7e:ca:cd:d9:f2:b8:d9:70: be:ab:b3:6d:9b:6f:af:d8:e7:30:2c:fe:c9:b4:3f:f5:aa:9e: 5d:7c:83:f0:a0:b8:a9:0b:b1:d2:f0:16:5f:94:55:57:fa:be: e5:99:31:00:af:c6:27:70:57:b3:d3:74:37:a6:1a:25:2d:00: 70:18:21:79:5a:51:9a:15:50:dc:e3:61:0d:44:9d:db:11:39: 05:f2:fe:e4:5f:f1:54:ff:89:70:ad:47:db:47:32:19:1d:f4: fe:7e:0d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQPUkPvh/29g7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MDRkNjNiZjMtYWRkNy00ZTc0LThmNDEtYzk1ZmQ1NDNiY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs767TWbEZvVcBcHvhR1sLzQOF4P05BnYxYk7 sKp85PyCkNMxeHIBaGDDD+wYFVVQ7Zt5zSGqBb7xmmAMqRazXvTh6lP09TF9tHV4 XlYYy9V4plEAMTaL2y4vY74Tnw5sNiUIPlPrD7sl1JLPo4rc5sJqblqunW/MnXzq +yxkVCxlsRvmY8Lb0ZsH/YQ3LGeL/EA2kuA06PkS4jZrbgcWPTYd5Ktg+xOWRwv9 1WSb2qbQxubjgXI3nlXEwqOt/dwAfKRfk9E245LwhtJz0yozo891TdXSmFO7Y1/o x5avWCexp5nN8t7fdvIpYpK3gHS4R6loY2+8wmnVtp9n9LwnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN6iyHqNgSmvOUFJeb/xL4Pw9IUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjBjOTI3ZWMtOTBhYy0z NzUyLTg1MjItYWZhZmY5YTM0YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/GtVfYrs9w0zKktDCphqQBnnN+3dzmIVkMV2XuVWasgHkp0zJrDfov K3vcrx0r9/BCJKXy2QK60I7rYgpSPbONSL6w41tRg5yfayTLpGt8hQ/0sVpb9GP+ X300EKFemjdqUUEqTEATUfRaU+yjpIXxxA8nkAa8sYakDlocqjymeA7RiAvtUenA hF5GzE+xu5T411Mrgyn/zdZ+ys3Z8rjZcL6rs22bb6/Y5zAs/sm0P/Wqnl18g/Cg uKkLsdLwFl+UVVf6vuWZMQCvxidwV7PTdDemGiUtAHAYIXlaUZoVUNzjYQ1EndsR OQXy/uRf8VT/iXCtR9tHMhkd9P5+DVk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:08 2025 by rpki-client