$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66183c7c-ac05-3b4b-b820-6d2560726916.roa File: 66183c7c-ac05-3b4b-b820-6d2560726916.roa (raw, json) Hash identifier: ZGEBVBj29r3JmebJNAoLG7UdN49VyzD262EB1adWXwI= Subject key identifier: 13:8D:69:2B:5C:39:52:A7:AC:9A:CF:72:F1:D9:92:78:DE:10:03:BB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D035BAD1FC951BB868700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66183c7c-ac05-3b4b-b820-6d2560726916.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:5b:ad:1f:c9:51:bb:86:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=ecc38f4e-45e9-46e1-84fd-5c52bfaae643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:9a:e7:b9:ba:80:30:d7:1f:46:5b:5c:15: 0a:96:90:f3:90:f7:d3:f3:87:9a:4b:32:3a:fb:31: 69:3e:0e:47:15:8f:c6:93:7d:8c:59:05:de:01:17: d2:52:d2:58:cd:b5:f2:18:de:19:8c:89:37:24:d9: f4:10:f3:d8:0d:f1:6e:8f:e9:37:fc:d5:16:73:f1: 10:50:b6:32:14:be:e0:f8:32:a0:79:3a:00:4a:a1: 97:99:55:bd:37:c5:5d:39:56:db:ab:93:ad:1e:ce: 15:eb:e5:f8:b3:8d:dc:f4:a6:62:57:5a:2e:cc:72: 70:04:a2:72:9d:b1:a8:14:8f:fe:02:e8:be:a8:08: 58:21:07:53:9c:ed:17:2f:83:40:89:2c:2f:df:73: 34:99:60:6a:1f:a9:57:7f:d2:7c:8d:c8:d7:b8:a5: 3c:c6:c3:1b:8c:ca:b4:f9:d4:62:a2:85:6a:13:9a: c0:08:69:46:e0:a1:e6:7f:71:2d:fe:6e:80:f0:7b: ed:60:8c:1b:2b:cf:10:cf:9b:47:d4:da:80:6d:ea: 76:9e:8e:51:8e:d2:8f:df:f4:e2:35:24:b3:d6:6c: 1e:a3:ba:16:e9:9a:2f:c8:89:69:f1:1f:cc:0f:d1: a6:eb:be:19:a2:56:ef:20:fd:0a:5a:7c:20:af:dd: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8D:69:2B:5C:39:52:A7:AC:9A:CF:72:F1:D9:92:78:DE:10:03:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66183c7c-ac05-3b4b-b820-6d2560726916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:08:8f:b0:11:22:fc:5c:cf:b3:f9:d0:74:11:a2:c2:dc:0d: 70:03:f2:4e:7b:56:12:e0:8a:1f:eb:6c:49:be:31:f5:30:e0: c0:dc:32:8d:a8:64:31:7b:2b:16:fc:4a:03:eb:46:f1:db:aa: 42:af:fd:be:d3:f8:44:c7:ca:0a:cf:9d:7a:4c:8f:da:1f:0e: 83:b4:b4:f5:d2:4c:95:6b:98:ec:e7:ee:7e:1e:73:fe:43:8e: 2f:8b:6d:56:77:1e:2b:f3:5b:5f:61:4e:25:94:3a:f9:ac:8d: 36:ec:13:f9:48:04:97:f9:01:ae:ef:cf:1e:3d:1f:4f:4b:e0: 36:11:c8:2e:57:a5:41:3e:84:3b:9b:32:45:42:6d:24:fe:3e: a9:6f:d8:e3:9c:a4:31:7e:8e:d8:84:9f:57:0a:ed:02:24:b4: 43:b2:72:5b:d9:00:25:cf:83:ca:b2:e0:e2:bb:4b:c5:fb:cb: 05:c9:24:d4:eb:75:1b:70:e5:72:3a:d8:19:14:ea:b3:a4:b3: 5e:c3:91:a2:eb:76:9b:a8:9d:c4:12:0e:73:6b:2f:e1:6b:43: bd:6c:7c:00:07:07:55:e2:56:35:b0:2e:83:0b:96:2a:2d:48: 23:d9:b9:05:2e:d2:bd:c2:03:20:59:f5:b1:ce:74:19:f9:74: 2d:52:af:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQNbrR/JUbuGhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZWNjMzhmNGUtNDVlOS00NmUxLTg0ZmQtNWM1MmJmYWFlNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOa57m6gDDXH0ZbXBUKlpDzkPfT84eaSzI6 +zFpPg5HFY/Gk32MWQXeARfSUtJYzbXyGN4ZjIk3JNn0EPPYDfFuj+k3/NUWc/EQ ULYyFL7g+DKgeToASqGXmVW9N8VdOVbbq5OtHs4V6+X4s43c9KZiV1ouzHJwBKJy nbGoFI/+Aui+qAhYIQdTnO0XL4NAiSwv33M0mWBqH6lXf9J8jcjXuKU8xsMbjMq0 +dRiooVqE5rACGlG4KHmf3Et/m6A8HvtYIwbK88Qz5tH1NqAbep2no5RjtKP3/Ti NSSz1mweo7oW6ZovyIlp8R/MD9Gm674ZolbvIP0KWnwgr93IhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBONaStcOVKnrJrPcvHZknjeEAO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjYxODNjN2MtYWMwNS0z YjRiLWI4MjAtNmQyNTYwNzI2OTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4Ij7ARIvxcz7P50HQRosLcDXAD8k57VhLgih/rbEm+MfUw4MDcMo2o ZDF7Kxb8SgPrRvHbqkKv/b7T+ETHygrPnXpMj9ofDoO0tPXSTJVrmOzn7n4ec/5D ji+LbVZ3HivzW19hTiWUOvmsjTbsE/lIBJf5Aa7vzx49H09L4DYRyC5XpUE+hDub MkVCbST+Pqlv2OOcpDF+jtiEn1cK7QIktEOyclvZACXPg8qy4OK7S8X7ywXJJNTr dRtw5XI62BkU6rOks17DkaLrdpuoncQSDnNrL+FrQ71sfAAHB1XiVjWwLoMLliot SCPZuQUu0r3CAyBZ9bHOdBn5dC1Sr/s= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:37 2025 by rpki-client