$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/75e76a6f-aef5-38ce-a923-082d64217867.roa File: 75e76a6f-aef5-38ce-a923-082d64217867.roa (raw, json) Hash identifier: HW5P+2XSuSeQlJLuG3CFUJl9eZdfC4Wc5pXYKgilXAY= Subject key identifier: 03:7F:D5:8C:D1:DE:09:BF:03:71:0E:F6:A8:62:3B:ED:BB:C1:E7:9E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D005A6FC7BE2DA4F08800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/75e76a6f-aef5-38ce-a923-082d64217867.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:00:5a:6f:c7:be:2d:a4:f0:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=431f943e-f932-480f-8a9c-3b99ace7c60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:d9:63:4a:c5:58:50:2e:db:54:f8:c5:96: a2:a7:4b:1f:a7:35:1a:01:a2:14:e7:7e:35:22:06: 1d:e3:6e:0f:74:b1:58:4c:b4:b9:d9:30:d9:9d:6b: 13:cb:00:15:8c:4e:df:1b:81:dd:fc:45:f2:6e:26: 60:f2:a3:71:a1:2d:0d:f8:11:4a:d6:8b:fd:35:24: 19:fa:63:f3:9e:ab:97:d5:83:dd:ab:07:5a:5d:fc: ba:23:1c:39:f3:aa:16:9e:e5:e2:02:d2:40:8c:4d: 18:f1:76:ec:13:7b:3e:04:21:95:07:e3:5c:7c:06: e3:23:15:26:31:ec:73:a4:64:ee:53:d4:c5:10:34: 37:57:f1:e7:83:57:1f:f6:56:e6:5d:b6:75:31:3e: d6:2a:3a:e6:97:0b:bb:6b:00:ef:48:17:79:d2:42: d0:85:4e:46:8a:bf:7f:59:fa:6e:e6:9c:56:07:28: af:5d:f8:4a:0d:f7:62:8f:fa:67:f5:16:c0:1c:4a: 0d:58:22:ec:da:fe:45:f8:61:0b:96:23:70:e8:ce: f5:0f:5c:49:c9:ba:b5:93:d2:f5:c1:e2:6c:43:54: 81:0b:1c:53:6f:55:8c:df:e1:be:0f:21:00:83:0e: 2a:cf:82:f8:a4:8d:80:97:32:3c:fd:9e:d7:29:d8: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:D5:8C:D1:DE:09:BF:03:71:0E:F6:A8:62:3B:ED:BB:C1:E7:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/75e76a6f-aef5-38ce-a923-082d64217867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2a:cc:01:43:12:1c:50:21:74:9f:5b:08:53:c7:d2:11:a7: 1a:33:e0:79:c4:6e:53:fd:88:95:15:1e:6e:4b:61:32:db:32: fe:f6:14:ea:de:8b:95:82:f5:d5:e7:aa:45:5c:54:bf:7f:53: 25:bc:06:1f:d9:a5:87:0e:01:44:80:ff:eb:24:49:8d:e3:7a: 4e:72:b6:32:5a:e0:8d:75:ed:15:0c:30:87:d4:df:6a:9e:a8: 0a:d7:61:13:73:dd:ec:43:44:e4:62:ad:76:e2:26:43:aa:16: cb:2d:60:aa:28:98:4c:bb:84:78:d8:ee:8f:29:96:68:f4:53: d6:c8:59:1d:a7:6b:9d:f6:1f:3c:6a:2f:52:b7:be:e4:db:0d: 87:1e:13:d9:62:b3:45:05:92:6f:de:e7:59:3d:d2:06:bf:38: 62:93:7e:da:9f:ed:d6:fc:be:23:4a:bb:49:a4:de:ce:71:16: c5:c3:69:9f:6c:6a:4a:66:81:96:5e:48:e6:c7:98:11:62:e3: 7f:9a:e0:29:4c:4a:34:37:f3:a3:eb:99:17:aa:81:0d:2d:ba: 48:fe:63:ec:fb:f9:e0:7c:37:3d:c1:9f:83:1c:a7:e4:2a:ac: fd:e3:20:39:14:9e:94:5a:e1:b3:dc:da:fd:ee:19:82:d3:dc: e2:1b:b1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQBab8e+LaTwiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NDMxZjk0M2UtZjkzMi00ODBmLThhOWMtM2I5OWFjZTdjNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV/ZY0rFWFAu21T4xZaip0sfpzUaAaIU5341 IgYd424PdLFYTLS52TDZnWsTywAVjE7fG4Hd/EXybiZg8qNxoS0N+BFK1ov9NSQZ +mPznquX1YPdqwdaXfy6Ixw586oWnuXiAtJAjE0Y8XbsE3s+BCGVB+NcfAbjIxUm MexzpGTuU9TFEDQ3V/Hng1cf9lbmXbZ1MT7WKjrmlwu7awDvSBd50kLQhU5Gir9/ Wfpu5pxWByivXfhKDfdij/pn9RbAHEoNWCLs2v5F+GELliNw6M71D1xJybq1k9L1 weJsQ1SBCxxTb1WM3+G+DyEAgw4qz4L4pI2AlzI8/Z7XKdg2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN/1YzR3gm/A3EO9qhiO+27weeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNzVlNzZhNmYtYWVmNS0z OGNlLWE5MjMtMDgyZDY0MjE3ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAqzAFDEhxQIXSfWwhTx9IRpxoz4HnEblP9iJUVHm5LYTLbMv72FOre i5WC9dXnqkVcVL9/UyW8Bh/ZpYcOAUSA/+skSY3jek5ytjJa4I117RUMMIfU32qe qArXYRNz3exDRORirXbiJkOqFsstYKoomEy7hHjY7o8plmj0U9bIWR2na532Hzxq L1K3vuTbDYceE9lis0UFkm/e51k90ga/OGKTftqf7db8viNKu0mk3s5xFsXDaZ9s akpmgZZeSObHmBFi43+a4ClMSjQ386PrmReqgQ0tukj+Y+z7+eB8Nz3Bn4Mcp+Qq rP3jIDkUnpRa4bPc2v3uGYLT3OIbsSg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:34 2025 by rpki-client