$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa File: ab23d51f-ab3a-339b-b5c4-569f948252ec.roa (raw, json) Hash identifier: 7COlcixU4BqX84O/Pr6s8FCQXv/dNSgDZ8EzJ8n+wBo= Subject key identifier: C7:42:2E:54:61:D1:E3:93:D5:E3:97:99:78:54:2F:E6:4C:37:A4:2A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0120466C026D3FBE28C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:20:46:6c:02:6d:3f:be:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=d9484994-7d01-43ea-8efd-4ccd484d8b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:23:6c:9e:02:51:eb:c1:19:c1:4c:ed:82: b0:b3:26:ac:b7:cd:71:f5:39:f2:86:9a:f4:f3:01: c2:6d:29:aa:65:9d:1d:d4:48:dc:d8:3b:6a:6a:06: fa:a0:af:70:a8:aa:c5:70:c0:7a:0a:16:2d:55:82: 38:9a:bb:f5:d7:60:33:8a:70:e4:bd:76:b7:69:13: 24:82:34:d4:fc:83:48:1b:2e:fd:c5:8b:be:ab:a3: 33:fc:a4:c4:cf:07:b8:53:96:4b:5b:0e:98:2c:84: aa:14:32:96:ad:b8:69:4c:2c:90:0c:5c:b1:df:50: 0c:ea:63:60:56:e9:91:84:65:37:55:90:25:7b:09: d8:24:55:22:17:e6:29:cf:cd:59:c6:f4:cf:ef:44: 00:2f:44:c8:83:7e:c0:a0:20:e7:dd:97:90:36:4a: 67:99:e1:6f:bc:c9:42:0b:46:da:96:1c:3c:ab:3a: 65:6e:d2:30:d4:3a:15:dc:03:c1:4d:d3:ff:52:44: 62:fa:87:e7:4d:95:84:e3:dc:b9:22:9c:11:12:ee: fa:50:b0:08:16:5f:62:4f:02:c9:00:b8:0f:a2:25: a3:6f:90:c2:5a:d5:f7:25:90:fe:6f:29:5e:d3:50: 41:30:cd:14:b3:75:55:1e:a0:b8:e3:dc:1b:f0:af: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:42:2E:54:61:D1:E3:93:D5:E3:97:99:78:54:2F:E6:4C:37:A4:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ab23d51f-ab3a-339b-b5c4-569f948252ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d2:dd:13:e1:0e:fa:cc:7e:2f:58:63:bd:b6:9b:93:26:c4: 70:39:4f:dd:f4:f5:fb:bc:db:84:e8:d1:4e:56:c3:14:15:7c: f5:20:4a:59:7f:fb:09:4b:02:7b:58:f1:9e:a8:1f:93:26:9d: 8e:15:f9:6f:0b:a2:40:f6:1d:99:00:19:b0:ad:16:f0:3b:46: 95:07:69:d6:63:52:36:c8:b5:dd:ca:3c:4d:4b:0e:d1:ce:0b: ae:a7:15:36:a7:3d:8f:75:be:2d:42:9f:55:86:31:4a:5f:fd: 49:8c:e1:d3:f6:10:67:0c:ed:d7:ee:eb:71:ac:3a:be:ac:58: f7:40:0b:bd:e2:dd:2e:70:b5:ae:47:67:e3:35:60:9a:9b:36: bc:b5:c3:30:d8:f6:67:7d:7f:4e:dd:d3:0b:c9:7a:47:e5:61: a6:5c:af:f3:a3:f5:51:e9:b6:94:ce:02:42:bf:38:ad:82:a0: 53:f3:5d:c6:75:22:d6:d6:b0:d1:56:b5:f3:fd:33:16:55:5e: 43:c6:fc:02:04:f8:a2:f8:86:bb:4b:c2:b5:a3:4a:48:bf:81: c4:2e:b0:69:1b:86:a5:27:83:bd:ee:49:23:20:dc:d6:bc:96: 47:b3:d0:1d:fc:16:30:25:87:a7:ec:0a:a4:9c:ba:6b:7f:18: 0e:33:dd:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQEgRmwCbT++KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZDk0ODQ5OTQtN2QwMS00M2VhLThlZmQtNGNjZDQ4NGQ4YjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ4jbJ4CUevBGcFM7YKwsyast81x9Tnyhpr0 8wHCbSmqZZ0d1Ejc2Dtqagb6oK9wqKrFcMB6ChYtVYI4mrv112AzinDkvXa3aRMk gjTU/INIGy79xYu+q6Mz/KTEzwe4U5ZLWw6YLISqFDKWrbhpTCyQDFyx31AM6mNg VumRhGU3VZAlewnYJFUiF+Ypz81ZxvTP70QAL0TIg37AoCDn3ZeQNkpnmeFvvMlC C0balhw8qzplbtIw1DoV3APBTdP/UkRi+ofnTZWE49y5IpwREu76ULAIFl9iTwLJ ALgPoiWjb5DCWtX3JZD+byle01BBMM0Us3VVHqC449wb8K9SMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdCLlRh0eOT1eOXmXhUL+ZMN6QqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWIyM2Q1MWYtYWIzYS0z MzliLWI1YzQtNTY5Zjk0ODI1MmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHS3RPhDvrMfi9YY722m5MmxHA5T9309fu824To0U5WwxQVfPUgSll/ +wlLAntY8Z6oH5MmnY4V+W8LokD2HZkAGbCtFvA7RpUHadZjUjbItd3KPE1LDtHO C66nFTanPY91vi1Cn1WGMUpf/UmM4dP2EGcM7dfu63GsOr6sWPdAC73i3S5wta5H Z+M1YJqbNry1wzDY9md9f07d0wvJekflYaZcr/Oj9VHptpTOAkK/OK2CoFPzXcZ1 ItbWsNFWtfP9MxZVXkPG/AIE+KL4hrtLwrWjSki/gcQusGkbhqUng73uSSMg3Na8 lkez0B38FjAlh6fsCqScumt/GA4z3Vg= -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:31 2025 by rpki-client