$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7cfd1454-b379-3c40-aa62-4262f34ea033.roa File: 7cfd1454-b379-3c40-aa62-4262f34ea033.roa (raw, json) Hash identifier: yk+YoOih7mwnJcHWKjFE6oFyMSWzzrfT73TGiSVxalU= Subject key identifier: 3B:71:50:16:5A:38:8C:E3:84:69:D2:16:DD:31:E4:B0:0A:8B:B3:58 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D01B21CD59D017CB379C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7cfd1454-b379-3c40-aa62-4262f34ea033.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:b2:1c:d5:9d:01:7c:b3:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=97517603-53cd-4037-8384-8b40c9d2d402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:69:f2:d3:d0:6b:31:19:46:df:8b:23:04: 8a:37:5b:e9:8b:6f:ef:81:b8:36:7f:da:c2:5e:d9: b1:fb:d8:23:b4:5a:c8:35:30:7e:aa:9d:c6:a0:7a: 85:f9:09:73:23:cd:53:d0:dc:23:d4:bd:73:08:79: b1:e6:70:67:dd:c9:65:13:11:2b:1f:8b:db:eb:3a: cb:10:16:01:6f:23:0f:53:ed:85:79:96:be:d2:ed: f6:09:14:93:4f:fb:5f:8d:6c:49:2a:bb:0a:ab:2d: dd:72:15:2e:42:a3:7c:7d:14:90:f0:5a:a0:bd:07: 94:e9:2a:13:75:bf:15:98:d6:72:34:f9:c4:3a:02: e5:d5:33:b7:04:f2:4a:6c:81:55:14:25:a9:a4:3f: ec:a0:c0:70:2f:69:c7:2e:f1:89:8f:75:0b:a3:5a: ca:46:bb:d3:e6:bd:ee:ff:06:c4:de:41:70:3a:3e: 8c:17:8d:fb:05:ce:69:a2:4b:60:f2:25:a2:e4:9d: a2:02:00:58:bc:93:f3:c1:58:0c:8c:b7:7d:57:9d: 0a:32:9a:d1:1d:0b:4f:17:59:5c:9a:8c:9d:87:4c: 4d:0d:f1:01:98:0d:73:f3:04:99:c5:6c:47:51:8c: a4:bc:43:b1:85:ab:61:42:35:df:39:d7:10:0e:1a: f0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:71:50:16:5A:38:8C:E3:84:69:D2:16:DD:31:E4:B0:0A:8B:B3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7cfd1454-b379-3c40-aa62-4262f34ea033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4b:bc:41:a4:5f:15:79:2e:5c:6b:cb:22:7b:09:e3:05:54: 45:00:f0:57:c8:eb:68:96:98:65:4d:d0:48:a5:08:27:fc:e2: 84:5b:ec:6f:36:7f:53:8e:91:dd:2b:b5:ea:5d:be:6d:29:f0: 99:38:aa:fe:05:95:1e:43:5c:b9:54:d6:68:dd:3a:57:a8:06: 28:06:88:d3:e8:0d:71:ba:06:8c:b7:42:74:ea:f7:12:99:0a: 37:e8:57:26:97:7b:83:05:5b:cc:9c:6e:58:eb:ed:bf:d2:cb: 4b:c4:4b:7a:0a:ec:f5:34:ee:e0:47:68:1e:95:e5:df:46:57: db:a8:9b:2b:42:dd:de:4e:de:bc:e6:5c:36:e6:88:a6:dc:45: a1:9b:87:9d:c0:ca:f1:2f:57:33:df:4b:39:18:53:25:55:9c: 18:7f:0f:d6:9c:14:b8:b5:3d:89:b0:c6:c0:ed:f4:43:f7:a4: 64:a0:1d:09:04:20:3e:2e:f1:b6:a8:7a:4e:09:22:0f:10:c6: 79:a6:4f:f1:aa:a7:53:57:c5:e1:e0:44:ed:e8:5d:4e:65:38: 2c:3b:a9:32:e6:f7:d6:f2:9b:b8:eb:d6:82:46:03:15:9b:cd: a1:a5:74:0e:81:8d:0a:e1:50:5a:ba:83:67:4d:18:4e:51:b9: 0c:2a:09:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQGyHNWdAXyzecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OTc1MTc2MDMtNTNjZC00MDM3LTgzODQtOGI0MGM5ZDJkNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Rp8tPQazEZRt+LIwSKN1vpi2/vgbg2f9rC Xtmx+9gjtFrINTB+qp3GoHqF+QlzI81T0Nwj1L1zCHmx5nBn3cllExErH4vb6zrL EBYBbyMPU+2FeZa+0u32CRSTT/tfjWxJKrsKqy3dchUuQqN8fRSQ8FqgvQeU6SoT db8VmNZyNPnEOgLl1TO3BPJKbIFVFCWppD/soMBwL2nHLvGJj3ULo1rKRrvT5r3u /wbE3kFwOj6MF437Bc5poktg8iWi5J2iAgBYvJPzwVgMjLd9V50KMprRHQtPF1lc moydh0xNDfEBmA1z8wSZxWxHUYykvEOxhathQjXfOdcQDhrw6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtxUBZaOIzjhGnSFt0x5LAKi7NYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvN2NmZDE0NTQtYjM3OS0z YzQwLWFhNjItNDI2MmYzNGVhMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRLvEGkXxV5LlxryyJ7CeMFVEUA8FfI62iWmGVN0EilCCf84oRb7G82 f1OOkd0rtepdvm0p8Jk4qv4FlR5DXLlU1mjdOleoBigGiNPoDXG6Boy3QnTq9xKZ CjfoVyaXe4MFW8ycbljr7b/Sy0vES3oK7PU07uBHaB6V5d9GV9uomytC3d5O3rzm XDbmiKbcRaGbh53AyvEvVzPfSzkYUyVVnBh/D9acFLi1PYmwxsDt9EP3pGSgHQkE ID4u8baoek4JIg8QxnmmT/Gqp1NXxeHgRO3oXU5lOCw7qTLm99bym7jr1oJGAxWb zaGldA6BjQrhUFq6g2dNGE5RuQwqCdU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:43 2025 by rpki-client