$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa File: cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa (raw, json) Hash identifier: B/dnWlXC5o5Q1b/7L9s0yhfgG/cUN/JTP+gSGT5KlOU= Subject key identifier: 52:AB:FB:76:EB:08:6E:54:BE:3F:23:4B:1C:35:EA:A7:85:95:C0:09 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFFBC213311ED68942DC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ff:bc:21:33:11:ed:68:94:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=435d99ab-5110-4b7e-bc72-52c516b5565d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:d1:51:aa:39:e3:a8:04:55:ed:d0:ff:7a: 17:34:8a:18:7d:d1:c5:55:84:87:3a:5f:b5:aa:3c: 6a:09:eb:fa:76:87:c4:c8:a1:e7:2c:58:bc:dd:18: 92:b3:a1:d6:c6:83:65:12:b9:eb:9b:a4:95:11:7f: ce:06:ed:14:ef:81:16:3a:f1:30:4d:9e:d1:35:e0: 5d:5b:5a:59:8a:77:0b:d6:fa:c2:9b:c4:86:96:9f: 58:79:7a:f0:4d:04:1f:71:5f:03:08:4d:4a:28:e7: 30:3e:f3:f4:31:e1:41:44:3a:6d:10:e0:9e:a5:68: f3:13:b0:7e:88:ee:cf:f4:65:97:cf:27:da:81:90: b7:84:ce:51:8b:08:3c:78:f7:f4:d0:d5:53:64:b7: b2:91:18:80:b4:61:09:69:6f:71:5d:46:92:22:d7: d3:e3:6c:ae:ba:52:4a:2e:99:0f:b2:6b:33:54:c3: 6e:ea:ff:e9:4a:74:97:92:37:d8:19:2e:e7:72:8e: f4:c8:b6:e5:ef:47:e0:e4:7d:88:01:15:e7:3a:1b: 44:56:9b:32:dd:76:41:9c:c0:23:6b:83:2a:ad:53: c0:81:18:60:e1:81:e6:b7:38:4b:b2:2d:16:d9:aa: a3:55:72:48:3a:2d:1d:96:d5:e7:cc:c0:54:35:cf: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AB:FB:76:EB:08:6E:54:BE:3F:23:4B:1C:35:EA:A7:85:95:C0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf96671a-6a74-3e65-a838-71e0e3f6e68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3d:44:6f:69:f2:0a:c0:f1:97:65:64:45:4e:dc:91:29:ab: ed:4c:69:98:65:6a:89:db:67:b0:8b:ed:80:d0:a6:cd:d4:59: 20:f7:fa:a4:75:24:b5:21:21:a9:70:e4:0d:e7:65:bd:6f:81: 3c:ab:c5:6f:f1:2a:80:c3:a1:9b:18:52:d5:a6:31:22:f8:0d: be:18:5e:54:ab:4c:09:b7:fc:5c:7f:09:ac:8a:35:5d:2e:06: 6c:bc:cd:36:6e:28:f4:e5:50:41:b5:cf:be:64:08:9f:94:50: 40:73:05:7b:f2:ae:9e:49:e6:fc:bf:29:f8:51:c7:08:64:86: 00:1a:06:14:8f:34:68:23:a3:59:7c:bd:ee:4c:4a:94:c6:60: 2e:51:6a:bf:36:96:fc:b9:a1:0b:ca:cc:c0:d9:5d:68:f5:86: a8:c1:2a:a5:bd:56:e8:ad:c6:2c:a0:64:ab:ec:0a:39:66:62: 48:eb:47:a9:4f:fb:06:3a:37:65:05:dc:e9:4f:50:83:34:2e: 3b:f9:8f:6d:a3:cb:0e:8e:70:7b:3a:a5:2e:cb:de:a4:f1:10: fe:5e:ad:b9:58:19:55:ae:a1:f1:4e:ed:d4:3a:03:63:ba:1d: b6:c1:31:82:ff:53:b9:85:17:1e:33:c6:44:6b:01:03:e9:ee: 11:ee:cf:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP+8ITMR7WiULcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NDM1ZDk5YWItNTExMC00YjdlLWJjNzItNTJjNTE2YjU1NjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTbRUao546gEVe3Q/3oXNIoYfdHFVYSHOl+1 qjxqCev6dofEyKHnLFi83RiSs6HWxoNlErnrm6SVEX/OBu0U74EWOvEwTZ7RNeBd W1pZincL1vrCm8SGlp9YeXrwTQQfcV8DCE1KKOcwPvP0MeFBRDptEOCepWjzE7B+ iO7P9GWXzyfagZC3hM5Riwg8ePf00NVTZLeykRiAtGEJaW9xXUaSItfT42yuulJK LpkPsmszVMNu6v/pSnSXkjfYGS7nco70yLbl70fg5H2IARXnOhtEVpsy3XZBnMAj a4MqrVPAgRhg4YHmtzhLsi0W2aqjVXJIOi0dltXnzMBUNc9bwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKr+3brCG5Uvj8jSxw16qeFlcAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2Y5NjY3MWEtNmE3NC0z ZTY1LWE4MzgtNzFlMGUzZjZlNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA9RG9p8grA8ZdlZEVO3JEpq+1MaZhlaonbZ7CL7YDQps3UWSD3+qR1 JLUhIalw5A3nZb1vgTyrxW/xKoDDoZsYUtWmMSL4Db4YXlSrTAm3/Fx/CayKNV0u Bmy8zTZuKPTlUEG1z75kCJ+UUEBzBXvyrp5J5vy/KfhRxwhkhgAaBhSPNGgjo1l8 ve5MSpTGYC5Rar82lvy5oQvKzMDZXWj1hqjBKqW9VuitxiygZKvsCjlmYkjrR6lP +wY6N2UF3OlPUIM0Ljv5j22jyw6OcHs6pS7L3qTxEP5erblYGVWuofFO7dQ6A2O6 HbbBMYL/U7mFFx4zxkRrAQPp7hHuz6A= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:12 2025 by rpki-client