$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa File: b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa (raw, json) Hash identifier: 5Ye0PZPxZbUjK8IxxweSw4yvSeHXBb7QKCa+C0C58c4= Subject key identifier: AC:1C:E8:A2:01:94:CC:C4:78:51:5D:30:F8:38:3A:83:5B:87:FA:0C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BAA97B27112D31FAB3474D700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 170.85.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b2:71:12:d3:1f:ab:34:74:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c6b58da3-f695-47dc-b910-e41fdb777fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:30:c0:43:81:85:1e:00:2e:a4:14:6c:14: 6e:ec:f4:23:e8:32:34:27:1f:5b:55:11:73:b6:b5: a1:af:be:05:75:c7:0e:5b:62:f6:f8:75:b1:e6:00: 85:47:dd:84:70:a5:4a:de:7e:9a:93:cd:0d:cf:88: 6a:0c:17:b0:51:50:fa:3c:70:48:f8:98:4f:06:37: ad:af:95:ad:33:5e:44:18:00:92:74:eb:67:9b:cc: e0:bf:72:cc:1c:47:3e:38:5d:00:e1:4e:5e:b6:9f: 1a:0c:c3:72:19:4e:18:42:d0:56:e1:14:5d:a4:d7: c7:c3:62:ab:df:04:ab:9e:07:d8:7f:91:4b:f4:7c: cd:82:49:4c:33:a6:cd:d0:79:af:aa:89:46:03:01: 32:cb:7c:51:b8:4b:ed:5d:27:71:37:94:fe:ce:4a: c1:f2:ac:1c:a5:91:77:1a:9d:d1:d5:8c:99:33:38: 9d:59:c1:74:98:7a:64:22:e5:a5:18:bf:06:3e:94: 6f:57:83:87:44:d5:b9:3e:94:75:d2:e6:99:30:8a: fd:1c:86:55:b5:9f:8c:a5:9d:e5:21:24:49:50:65: e9:4f:55:ce:3f:5a:3f:08:05:f8:42:a0:50:30:96: aa:25:68:00:fd:b0:e1:f1:a4:31:98:80:5e:d7:36: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1C:E8:A2:01:94:CC:C4:78:51:5D:30:F8:38:3A:83:5B:87:FA:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1dcc3c8-5f31-3ffc-9990-a4cb8ec91d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1e:db:49:fe:50:05:d8:81:e5:44:39:1c:c5:1c:9a:bc:91: 80:96:10:b1:98:1e:97:eb:dc:e1:ec:dc:a2:96:7f:a1:b7:67: 6b:f5:b1:86:b5:45:a0:4a:6f:21:67:e9:c9:ae:50:e6:d3:fe: 6d:de:4e:cf:b2:80:d0:30:2b:64:0d:23:f0:e6:e6:44:07:e3: db:bf:de:86:ed:35:d9:69:d3:d0:99:da:b0:59:06:72:ee:75: 98:b1:78:f5:cf:c3:01:08:53:64:43:d4:0f:ba:a2:17:1a:51: b5:f1:1c:f1:cb:6e:2d:dc:6c:f4:18:9b:a0:14:d9:9c:9a:98: 88:50:b4:a1:57:60:dc:c2:b2:74:16:f0:ab:51:5a:4b:f5:c2: ec:74:18:36:5e:32:78:16:01:30:1f:8e:b3:46:78:b0:ab:69: 53:4a:aa:55:bd:47:83:67:e3:95:cd:00:f3:a7:d9:e8:ed:a7: 20:2b:f1:2f:8c:30:11:f1:09:8b:1d:ad:26:23:6f:8b:f1:e4: ff:0c:32:f6:3a:a0:56:63:c2:60:1f:88:02:a1:93:73:41:5d: 61:7c:63:af:e9:9d:5e:06:cf:b7:88:8e:a0:64:a9:45:b9:57: 3f:24:11:af:e8:1e:63:f8:e1:e8:11:e0:ae:55:cc:61:c3:4b: e7:8c:69:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7JxEtMfqzR01wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YzZiNThkYTMtZjY5NS00N2RjLWI5MTAtZTQxZmRiNzc3ZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQIwwEOBhR4ALqQUbBRu7PQj6DI0Jx9bVRFz trWhr74FdccOW2L2+HWx5gCFR92EcKVK3n6ak80Nz4hqDBewUVD6PHBI+JhPBjet r5WtM15EGACSdOtnm8zgv3LMHEc+OF0A4U5etp8aDMNyGU4YQtBW4RRdpNfHw2Kr 3wSrngfYf5FL9HzNgklMM6bN0HmvqolGAwEyy3xRuEvtXSdxN5T+zkrB8qwcpZF3 Gp3R1YyZMzidWcF0mHpkIuWlGL8GPpRvV4OHRNW5PpR10uaZMIr9HIZVtZ+MpZ3l ISRJUGXpT1XOP1o/CAX4QqBQMJaqJWgA/bDh8aQxmIBe1zZ4+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwc6KIBlMzEeFFdMPg4OoNbh/oMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjFkY2MzYzgtNWYzMS0z ZmZjLTk5OTAtYTRjYjhlYzkxZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8e20n+UAXYgeVEORzFHJq8kYCWELGYHpfr3OHs3KKWf6G3Z2v1sYa1 RaBKbyFn6cmuUObT/m3eTs+ygNAwK2QNI/Dm5kQH49u/3obtNdlp09CZ2rBZBnLu dZixePXPwwEIU2RD1A+6ohcaUbXxHPHLbi3cbPQYm6AU2ZyamIhQtKFXYNzCsnQW 8KtRWkv1wux0GDZeMngWATAfjrNGeLCraVNKqlW9R4Nn45XNAPOn2ejtpyAr8S+M MBHxCYsdrSYjb4vx5P8MMvY6oFZjwmAfiAKhk3NBXWF8Y6/pnV4Gz7eIjqBkqUW5 Vz8kEa/oHmP44egR4K5VzGHDS+eMaaA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:53:03 2025 by rpki-client