$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99d26857-bba0-3e67-be70-731e23c0666b.roa File: 99d26857-bba0-3e67-be70-731e23c0666b.roa (raw, json) Hash identifier: QBF+vunNhGoiHrWckvzTN/NpPiufdqZGfMuG+jGF43s= Subject key identifier: CF:4B:70:24:43:84:90:E5:9E:DB:BA:11:78:30:BE:83:99:E9:67:86 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D006DF229E7ECF3C3D580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99d26857-bba0-3e67-be70-731e23c0666b.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:00:6d:f2:29:e7:ec:f3:c3:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=55f8d2e3-70d9-4083-b145-b7b3ceef2db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:d1:16:d8:ca:e6:31:e3:dd:75:28:c6:82: 44:5c:91:6a:5e:dc:77:6c:3b:af:bc:9c:05:fe:61: 0d:79:31:47:6d:cc:5d:98:96:ab:70:4a:d3:29:f0: ab:7a:9b:63:aa:b5:0e:7e:7c:d3:9a:50:9b:ab:cd: 63:2b:7a:95:51:98:fd:a9:4a:4c:90:ee:8c:75:05: 96:c2:2f:8a:95:ea:bc:83:47:d8:b2:80:f6:14:8c: 99:66:f9:d4:70:d3:98:59:e4:df:d9:9c:41:91:9b: ae:00:7b:51:7f:c5:9b:52:fc:65:af:5d:a5:40:58: 4c:7d:96:84:5b:b0:62:df:42:c3:4a:8b:6c:d5:54: b2:83:84:74:16:c8:89:86:28:bd:0c:a2:2b:89:89: a0:fd:10:20:23:6e:88:da:b5:89:30:6d:7b:63:99: cf:f8:56:fc:f3:d5:49:55:85:9b:ce:ee:d4:13:7b: 84:56:cd:3f:f0:3b:5e:a3:4c:6e:23:f4:83:3f:eb: 7e:b8:c5:5c:00:8b:ea:12:80:67:c9:a5:6f:89:a7: 3e:4a:32:c6:05:da:25:c9:5b:8f:70:a8:b9:82:f3: d9:c8:5c:b2:c3:6b:52:fa:0a:9b:5b:cd:46:cf:35: 30:93:93:e7:16:08:9d:7f:d8:79:86:0d:cb:67:c0: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:70:24:43:84:90:E5:9E:DB:BA:11:78:30:BE:83:99:E9:67:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99d26857-bba0-3e67-be70-731e23c0666b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:de:00:66:c3:a2:bd:c5:73:b1:75:c3:76:f5:d8:09:98:ec: 7a:45:8a:bd:30:ed:c0:44:a3:96:a8:15:a2:92:0b:e7:80:0f: 85:9e:74:8f:2b:cc:76:f7:df:db:b4:d7:16:ed:cc:f7:f0:6a: 30:1b:9e:43:60:eb:27:03:f3:c6:48:7a:16:95:f2:0b:d4:06: f2:ca:f5:6f:7d:93:2d:2f:48:fc:65:36:d3:7b:77:5b:d9:60: 68:73:a5:9e:c7:59:82:ea:16:e4:fc:05:c0:e6:fb:9b:c1:78: 16:fc:5f:f7:4a:6a:8b:a5:39:4c:c7:15:a3:cd:b8:07:3f:6d: 01:c6:88:b8:eb:eb:95:aa:02:4d:5c:bf:89:07:4a:45:cd:ff: 49:d2:f5:28:09:59:92:f6:0a:89:ac:aa:a6:84:21:64:88:0a: 96:f5:b0:02:db:62:06:e1:3d:58:5d:74:02:b9:5e:f9:92:18: 12:7e:9e:c1:15:af:41:8a:dd:bd:ff:c9:d4:83:91:12:2e:58: c1:f0:25:54:74:e5:a5:05:6a:fb:5b:0b:78:a6:4a:9a:64:d7: 75:ed:97:31:34:f6:81:4e:1c:f7:01:43:cb:d5:5c:61:c7:eb: 15:8c:9b:a6:fb:b7:bf:1d:8b:a5:99:6f:eb:cd:92:2a:50:ab: cd:79:cd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQBt8inn7PPD1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NTVmOGQyZTMtNzBkOS00MDgzLWIxNDUtYjdiM2NlZWYyZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsonRFtjK5jHj3XUoxoJEXJFqXtx3bDuvvJwF /mENeTFHbcxdmJarcErTKfCreptjqrUOfnzTmlCbq81jK3qVUZj9qUpMkO6MdQWW wi+Kleq8g0fYsoD2FIyZZvnUcNOYWeTf2ZxBkZuuAHtRf8WbUvxlr12lQFhMfZaE W7Bi30LDSots1VSyg4R0FsiJhii9DKIriYmg/RAgI26I2rWJMG17Y5nP+Fb889VJ VYWbzu7UE3uEVs0/8Dteo0xuI/SDP+t+uMVcAIvqEoBnyaVviac+SjLGBdolyVuP cKi5gvPZyFyyw2tS+gqbW81GzzUwk5PnFgidf9h5hg3LZ8CiOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9LcCRDhJDlntu6EXgwvoOZ6WeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTlkMjY4NTctYmJhMC0z ZTY3LWJlNzAtNzMxZTIzYzA2NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3eAGbDor3Fc7F1w3b12AmY7HpFir0w7cBEo5aoFaKSC+eAD4WedI8r zHb339u01xbtzPfwajAbnkNg6ycD88ZIehaV8gvUBvLK9W99ky0vSPxlNtN7d1vZ YGhzpZ7HWYLqFuT8BcDm+5vBeBb8X/dKaoulOUzHFaPNuAc/bQHGiLjr65WqAk1c v4kHSkXN/0nS9SgJWZL2ComsqqaEIWSICpb1sALbYgbhPVhddAK5XvmSGBJ+nsEV r0GK3b3/ydSDkRIuWMHwJVR05aUFavtbC3imSppk13XtlzE09oFOHPcBQ8vVXGHH 6xWMm6b7t78di6WZb+vNkipQq815zSE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:18 2025 by rpki-client