$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa File: c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa (raw, json) Hash identifier: WfMMB7vkFe4kYzccCh0zxQWHbJEQThw1M4XGo2qyvTM= Subject key identifier: 75:A2:BC:8B:D6:D5:93:15:0B:CA:65:65:51:BD:2E:E6:E0:70:72:37 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D00D6950B30BF39D91F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:00:d6:95:0b:30:bf:39:d9:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=0bb5b02b-24a8-4ef8-9670-fb96ebc37dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:11:3b:87:d7:97:49:1f:18:31:5b:69:ed: 84:76:79:39:31:33:d7:f5:15:91:ab:c6:c5:a6:e6: ad:7b:3b:0d:a6:1e:a7:1f:cc:32:b4:d0:92:43:ee: cb:89:ef:76:89:60:05:de:69:38:0c:ca:65:39:78: ca:dd:36:83:76:aa:51:68:e1:94:bc:e7:c1:c1:95: b1:7b:e3:7c:f9:cd:83:02:ea:6d:7e:cd:44:10:54: 1c:97:25:0f:3e:3e:1a:f3:a0:7d:f3:ac:2e:fb:63: b9:00:b0:5e:57:86:c3:d8:85:a3:49:26:67:c9:df: 9d:3a:40:52:1f:9e:e4:4a:67:b6:08:c6:51:75:da: f5:69:17:83:50:d5:c4:10:87:2c:60:4e:78:89:86: b5:cf:42:c8:bf:63:07:b5:6c:4a:07:73:8f:5a:dc: 23:b5:d4:48:28:2d:09:77:98:69:01:2f:10:82:13: 66:e4:ef:7e:14:ab:73:35:6f:88:1b:98:55:ab:3b: de:20:09:63:e2:4f:50:a2:6b:30:1a:3b:13:4e:54: 35:5a:a2:db:9d:24:4b:2e:c4:87:48:a5:4a:6a:20: ab:4c:17:ad:09:b6:61:a1:9d:f6:f8:58:d0:f2:35: 82:47:d4:c8:75:5d:8d:74:c5:a1:9a:de:66:81:c1: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A2:BC:8B:D6:D5:93:15:0B:CA:65:65:51:BD:2E:E6:E0:70:72:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3e:6b:97:2e:52:82:1c:94:67:be:5b:48:52:7e:39:e6:b0: 33:da:f6:b6:b4:ad:c0:04:34:18:ec:ef:0f:39:c0:29:76:c0: 7a:e6:c0:c5:e8:af:33:00:88:bf:aa:03:32:53:e6:29:23:d1: 67:2e:84:19:7e:78:a6:d6:43:25:82:91:88:08:aa:a6:08:4f: 61:15:12:93:66:74:fa:91:cc:5a:86:b9:0b:8a:23:a6:c7:a2: f7:68:40:7b:89:03:23:d8:f7:46:2f:38:17:88:5e:d8:c9:8b: c1:bf:b2:3d:49:b9:64:b5:fc:35:84:ec:ae:34:7a:f5:58:0a: 42:26:b1:ad:6f:8e:a4:4d:45:7d:8e:01:96:83:dc:73:36:00: ab:99:20:a1:84:d8:1a:ff:c2:09:d9:e6:a8:4b:08:37:35:1c: 86:8d:3e:01:97:bc:8f:91:b3:fd:75:3d:1f:b7:6f:d4:24:9e: a0:f1:9b:cc:8d:1b:12:9e:c1:d9:83:e0:6c:49:d1:80:d7:bf: be:d5:5d:d1:e9:8b:80:64:a3:70:ae:f9:99:a2:bd:bf:b9:1f: f3:0d:28:b9:af:ca:7b:6b:ca:0f:df:86:b7:97:de:60:45:f0: 59:6a:12:7c:70:19:29:59:a8:b2:99:c5:4d:a1:38:ec:38:b6: 73:b7:e7:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQDWlQswvznZH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MGJiNWIwMmItMjRhOC00ZWY4LTk2NzAtZmI5NmViYzM3ZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi48RO4fXl0kfGDFbae2Ednk5MTPX9RWRq8bF puatezsNph6nH8wytNCSQ+7Lie92iWAF3mk4DMplOXjK3TaDdqpRaOGUvOfBwZWx e+N8+c2DAuptfs1EEFQclyUPPj4a86B986wu+2O5ALBeV4bD2IWjSSZnyd+dOkBS H57kSme2CMZRddr1aReDUNXEEIcsYE54iYa1z0LIv2MHtWxKB3OPWtwjtdRIKC0J d5hpAS8QghNm5O9+FKtzNW+IG5hVqzveIAlj4k9QomswGjsTTlQ1WqLbnSRLLsSH SKVKaiCrTBetCbZhoZ32+FjQ8jWCR9TIdV2NdMWhmt5mgcGqYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWivIvW1ZMVC8plZVG9LubgcHI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzY2N2Q0YjItZGFhZC0z NGM2LWFlYWEtNGYyMWFkNzFkOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw+a5cuUoIclGe+W0hSfjnmsDPa9ra0rcAENBjs7w85wCl2wHrmwMXo rzMAiL+qAzJT5ikj0WcuhBl+eKbWQyWCkYgIqqYIT2EVEpNmdPqRzFqGuQuKI6bH ovdoQHuJAyPY90YvOBeIXtjJi8G/sj1JuWS1/DWE7K40evVYCkImsa1vjqRNRX2O AZaD3HM2AKuZIKGE2Br/wgnZ5qhLCDc1HIaNPgGXvI+Rs/11PR+3b9QknqDxm8yN GxKewdmD4GxJ0YDXv77VXdHpi4Bko3Cu+Zmivb+5H/MNKLmvyntryg/fhreX3mBF 8FlqEnxwGSlZqLKZxU2hOOw4tnO357c= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:59 2025 by rpki-client