$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c594b4da-1879-3901-b6a8-940d616a4090.roa File: c594b4da-1879-3901-b6a8-940d616a4090.roa (raw, json) Hash identifier: 2ci5ZdvGbNH8w7GAdB4JaLjVwjnSp3L/yyH+mXp5bOM= Subject key identifier: 15:65:71:04:5C:CE:F5:61:28:02:FC:7A:FB:FD:45:80:61:1D:5F:8E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0392F44BDA36EDD39980 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c594b4da-1879-3901-b6a8-940d616a4090.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:92:f4:4b:da:36:ed:d3:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=0633d131-02f1-44ba-b7a7-2d707d7c6f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:31:d8:64:46:84:6f:4d:e8:74:0d:53:a2: cd:46:38:b9:61:78:71:a7:6f:a3:72:78:22:8d:66: a9:37:13:c8:1b:58:d8:17:eb:9d:2a:bd:7d:34:de: fd:78:ea:ca:c3:23:fd:bc:16:07:34:5b:1b:62:1b: dc:55:4a:ad:61:a5:39:53:e4:95:df:07:ac:f6:34: 95:a4:f9:c4:e8:9a:fd:80:8d:71:78:97:c8:d0:71: aa:b8:a9:47:d3:c5:a8:69:c7:ef:64:ba:0d:68:fb: 7b:24:42:cb:f0:cd:85:75:22:68:dc:a8:15:43:d9: 5d:3c:88:35:e6:3f:67:23:bd:7d:6f:63:14:e1:0c: c3:30:da:6d:70:be:e0:3b:e5:5f:b8:6e:11:b8:82: c1:8a:32:3b:3d:c4:98:e7:bd:32:b0:9d:09:dc:18: 24:fa:ea:62:d3:bf:9d:e1:55:c8:c3:2c:e5:61:45: 0d:8b:44:ad:f6:00:9f:12:4f:9f:01:97:03:dd:a7: c9:43:d5:be:3d:a9:68:f3:ef:c4:11:ba:20:00:85: 67:e4:af:85:60:1a:49:39:23:69:a7:e3:a5:e7:ab: 53:31:bd:74:40:a3:54:2e:a6:53:52:18:d9:52:14: cd:0e:76:65:98:52:f0:f9:32:6c:f3:49:88:42:c1: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:65:71:04:5C:CE:F5:61:28:02:FC:7A:FB:FD:45:80:61:1D:5F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c594b4da-1879-3901-b6a8-940d616a4090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b6:da:b6:4e:61:9a:e8:78:aa:75:ba:d1:40:8a:48:3c:02: 7b:86:52:e9:a9:7e:fe:1d:46:62:a1:76:01:35:6c:82:0b:d8: 6d:6c:53:00:7b:62:6c:ec:16:2c:30:a5:f3:35:07:c5:a1:61: 76:9a:0d:a9:75:e7:a9:3e:85:2b:eb:d7:c2:12:7c:9a:3a:82: 4c:aa:39:ad:33:23:46:f9:d8:77:45:e1:38:7a:22:bb:47:7b: c4:f1:fe:39:5e:1e:ba:96:6f:43:25:83:ff:f4:23:9b:24:e5: 22:0c:87:f1:f6:d8:5b:78:b1:fd:dc:01:cd:78:5e:32:d5:36: 2d:a5:98:24:aa:0b:5e:e6:45:1b:d9:81:35:37:06:ce:0e:23: e8:81:77:bb:64:16:93:00:12:df:bb:f3:f6:a5:4d:59:14:ba: 62:35:ba:3b:5c:a1:be:86:82:25:64:4e:02:b6:68:6e:3c:98: f6:15:0c:51:ba:f1:3e:ff:c2:bf:ce:27:31:5a:65:dc:4e:c6: 2c:37:d2:38:f4:27:db:d1:4e:fd:b3:97:dd:e5:b9:3d:b3:75: f2:bf:86:5b:7d:23:9a:50:7b:3a:e8:4f:6b:66:37:ec:cd:34: 57:03:51:08:be:ea:3e:10:ee:10:08:ab:f3:75:75:70:70:cb: d3:29:87:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQOS9EvaNu3TmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MDYzM2QxMzEtMDJmMS00NGJhLWI3YTctMmQ3MDdkN2M2ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVEx2GRGhG9N6HQNU6LNRji5YXhxp2+jcngi jWapNxPIG1jYF+udKr19NN79eOrKwyP9vBYHNFsbYhvcVUqtYaU5U+SV3wes9jSV pPnE6Jr9gI1xeJfI0HGquKlH08WoacfvZLoNaPt7JELL8M2FdSJo3KgVQ9ldPIg1 5j9nI719b2MU4QzDMNptcL7gO+VfuG4RuILBijI7PcSY570ysJ0J3Bgk+upi07+d 4VXIwyzlYUUNi0St9gCfEk+fAZcD3afJQ9W+Palo8+/EEbogAIVn5K+FYBpJOSNp p+Ol56tTMb10QKNULqZTUhjZUhTNDnZlmFLw+TJs80mIQsEyVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVlcQRczvVhKAL8evv9RYBhHV+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzU5NGI0ZGEtMTg3OS0z OTAxLWI2YTgtOTQwZDYxNmE0MDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm22rZOYZroeKp1utFAikg8AnuGUumpfv4dRmKhdgE1bIIL2G1sUwB7 YmzsFiwwpfM1B8WhYXaaDal156k+hSvr18ISfJo6gkyqOa0zI0b52HdF4Th6IrtH e8Tx/jleHrqWb0Mlg//0I5sk5SIMh/H22Ft4sf3cAc14XjLVNi2lmCSqC17mRRvZ gTU3Bs4OI+iBd7tkFpMAEt+78/alTVkUumI1ujtcob6GgiVkTgK2aG48mPYVDFG6 8T7/wr/OJzFaZdxOxiw30jj0J9vRTv2zl93luT2zdfK/hlt9I5pQezroT2tmN+zN NFcDUQi+6j4Q7hAIq/N1dXBwy9Mph0o= -----END CERTIFICATE-----Generated at Wed Nov 5 06:28:26 2025 by rpki-client