$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b39012f7-aaa6-3628-9b5d-f97656f37128.roa File: b39012f7-aaa6-3628-9b5d-f97656f37128.roa (raw, json) Hash identifier: OAy5hVU79XJIZbiTSVlUbrolfJCAKZgpPemwLmS/KX4= Subject key identifier: FF:72:5C:57:2D:2B:F1:37:C1:67:93:81:6D:FC:74:B8:70:DB:ED:E2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D04713E8D52A5B5765880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b39012f7-aaa6-3628-9b5d-f97656f37128.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:04:71:3e:8d:52:a5:b5:76:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=856fad34-2b97-4bc2-8122-b922f6e51f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:0b:3a:ed:c5:8d:d4:8a:7e:eb:2d:87:70: f2:aa:3e:92:13:e0:55:ad:cf:cb:ed:a5:23:25:68: d1:23:cb:43:e2:ed:52:f4:96:28:ad:3e:44:e0:d5: 3a:f9:c0:61:4f:71:12:c1:a7:d6:71:c0:11:b3:06: fb:bf:13:f9:d1:e8:1d:73:6e:43:65:e7:f0:96:74: 41:a6:bc:27:2f:2e:48:e0:c6:fb:24:4e:ba:47:87: 76:0f:80:05:68:27:d7:01:58:5b:58:b8:36:b5:d6: 59:34:31:ed:2b:e6:04:9a:53:2c:a1:f3:40:7b:32: e1:26:71:a9:7f:f6:78:81:bd:0a:bc:ac:15:a1:b4: 18:ac:88:80:9a:d7:7a:b0:c6:7b:15:53:c0:3f:22: ab:af:6b:9a:00:a0:15:6e:47:ba:3e:4d:9a:76:fe: ee:6a:26:50:aa:73:39:8f:e5:c2:a4:b4:c7:55:52: 48:f1:ad:2d:ac:c6:41:66:27:82:a7:33:f9:21:99: 69:de:0d:2b:39:d2:ab:a5:db:89:98:14:14:de:67: 58:f5:69:6f:95:7a:15:25:8b:06:cf:d5:52:d7:ad: 03:55:c7:3c:d5:e0:29:b8:f9:cf:e0:76:a8:39:df: 3f:f1:f3:19:b9:05:15:e6:b6:d2:d8:f3:59:b6:a5: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:72:5C:57:2D:2B:F1:37:C1:67:93:81:6D:FC:74:B8:70:DB:ED:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b39012f7-aaa6-3628-9b5d-f97656f37128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:f7:aa:05:91:2c:39:e2:69:75:24:5b:86:61:4e:b9:7e:1d: 49:39:f6:00:c4:b4:1b:ca:7b:4d:1a:e2:79:4a:a7:0e:37:d4: 9c:e6:f1:f1:4f:3f:b2:30:56:c9:3c:6f:18:02:23:c0:34:16: b9:22:4c:8c:72:4d:59:3f:35:78:a9:06:a7:a4:44:39:22:99: 29:c5:3f:03:56:0a:6b:fe:bf:f8:bb:61:b6:3a:e7:6b:ed:66: e2:61:c9:dc:51:72:89:b7:77:da:63:0b:0c:a3:04:b3:c6:31: d3:bc:af:9a:23:a6:17:bf:56:5a:99:db:5b:0c:84:fd:dc:e0: 6e:c6:82:40:13:13:1e:88:7d:0b:6f:72:a3:06:60:f7:ea:13: 5c:98:ea:81:36:3d:ec:46:be:c7:cf:5e:b8:83:f6:79:78:78: 03:56:a1:74:92:c2:37:28:7b:bd:5c:29:e5:3a:26:e5:10:90: c0:04:07:e5:84:78:5b:0b:55:66:25:db:d6:5f:2f:a7:13:e3: 0d:a4:06:78:a3:88:93:72:95:18:57:62:54:18:42:ca:1d:77: bb:a1:4d:30:ac:9c:18:b8:eb:80:fc:b1:e7:2b:b4:24:2e:a7: 3e:9a:cb:a5:8c:bd:47:8e:67:53:ee:c8:d0:85:59:5a:ad:6e: ad:94:ed:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQRxPo1SpbV2WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ODU2ZmFkMzQtMmI5Ny00YmMyLTgxMjItYjkyMmY2ZTUxZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJkLOu3FjdSKfusth3Dyqj6SE+BVrc/L7aUj JWjRI8tD4u1S9JYorT5E4NU6+cBhT3ESwafWccARswb7vxP50egdc25DZefwlnRB prwnLy5I4Mb7JE66R4d2D4AFaCfXAVhbWLg2tdZZNDHtK+YEmlMsofNAezLhJnGp f/Z4gb0KvKwVobQYrIiAmtd6sMZ7FVPAPyKrr2uaAKAVbke6Pk2adv7uaiZQqnM5 j+XCpLTHVVJI8a0trMZBZieCpzP5IZlp3g0rOdKrpduJmBQU3mdY9WlvlXoVJYsG z9VS160DVcc81eApuPnP4HaoOd8/8fMZuQUV5rbS2PNZtqWY/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9yXFctK/E3wWeTgW38dLhw2+3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjM5MDEyZjctYWFhNi0z NjI4LTliNWQtZjk3NjU2ZjM3MTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMX3qgWRLDniaXUkW4ZhTrl+HUk59gDEtBvKe00a4nlKpw431Jzm8fFP P7IwVsk8bxgCI8A0FrkiTIxyTVk/NXipBqekRDkimSnFPwNWCmv+v/i7YbY652vt ZuJhydxRcom3d9pjCwyjBLPGMdO8r5ojphe/VlqZ21sMhP3c4G7GgkATEx6IfQtv cqMGYPfqE1yY6oE2PexGvsfPXriD9nl4eANWoXSSwjcoe71cKeU6JuUQkMAEB+WE eFsLVWYl29ZfL6cT4w2kBnijiJNylRhXYlQYQsodd7uhTTCsnBi464D8secrtCQu pz6ay6WMvUeOZ1PuyNCFWVqtbq2U7Z8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:50 2025 by rpki-client