$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d93bc478-aa63-3060-a632-729bbb486b74.roa File: d93bc478-aa63-3060-a632-729bbb486b74.roa (raw, json) Hash identifier: gA21vDaQpUgDWXyghk4klQS7K8w4LsoCptA06+DDCQY= Subject key identifier: 8A:A4:5B:10:98:28:4D:DE:05:03:DC:26:B1:E0:CD:A8:7C:F6:E3:AF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D03C8157220710192B3C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d93bc478-aa63-3060-a632-729bbb486b74.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:03:c8:15:72:20:71:01:92:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=07001ee2-c62b-4c84-881b-91ee252024ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:82:92:d8:f5:9f:e3:34:86:81:b5:a2:4b:63: 7a:0d:4b:f6:bc:8f:53:da:96:f6:66:77:f8:0a:0a: 50:2b:43:67:a7:b7:0b:b0:fc:3a:1d:e3:df:f1:61: e7:f2:d2:c3:5a:7e:ba:b7:69:09:4b:f1:65:e0:f2: 34:03:42:52:21:57:68:9a:8a:38:4f:49:e0:d4:b4: 81:b8:af:69:0c:46:e1:a8:a6:ee:72:3a:db:2d:0a: 68:c6:4d:b9:75:f6:46:9c:17:8b:b0:b1:c5:55:22: af:a3:0f:39:55:ea:65:10:86:df:8b:63:3a:fb:4b: 72:3d:1c:2d:d6:b9:d3:ea:3b:1c:5f:f4:7c:1d:f9: 92:77:f1:f8:74:a0:a6:38:ef:8c:b6:12:df:db:db: 9f:2d:0f:40:e2:a4:f5:4e:02:74:44:89:5a:73:6c: 42:39:1b:c3:ba:f0:37:f3:f6:a0:3a:e3:fa:78:07: 71:aa:21:e2:83:c8:89:b9:d3:a7:df:21:19:8a:56: d5:a0:54:61:10:dd:0b:f6:2b:4c:28:45:06:7a:8f: fc:8f:d8:8c:9e:58:63:c6:2b:70:80:1d:b0:29:ae: fc:5d:8f:bb:d5:da:fc:d2:8e:04:3f:a8:ca:4e:0f: d0:9f:29:2f:d3:d1:40:3b:a9:85:d5:d6:82:eb:8d: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A4:5B:10:98:28:4D:DE:05:03:DC:26:B1:E0:CD:A8:7C:F6:E3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d93bc478-aa63-3060-a632-729bbb486b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:73:b3:02:14:a3:13:a9:6f:e7:84:02:13:59:f1:6d:7d:31: f0:de:1c:bb:9d:3f:d0:3f:f1:bb:25:6d:23:b9:55:78:1b:25: ab:91:f7:45:bd:8c:68:7e:67:4c:02:4d:78:45:fa:00:ea:e0: ca:da:f6:de:72:77:e8:d9:4e:d4:1d:a8:d5:f2:12:28:62:73: b3:4a:37:40:90:4d:95:0c:f2:a7:8d:2c:33:38:00:e5:12:e4: ae:42:48:09:3c:9c:0f:49:9f:11:8f:4f:7a:a0:dd:13:50:08: 95:98:f3:9a:82:58:94:27:98:e7:95:9f:a8:64:f3:8f:ee:df: ef:f3:ca:1d:5e:2a:08:1f:f2:b3:bc:76:51:0e:31:7b:2e:73: 65:09:6e:35:8b:aa:4b:c4:f0:3d:93:69:78:19:6a:16:30:57: 21:8b:e0:66:6d:7e:d0:89:1b:c8:13:83:e4:99:3b:eb:16:f7: e1:2c:30:d1:eb:5f:b2:1e:b8:9b:c2:ad:67:bb:04:4f:e8:db: 47:f8:2b:50:16:ff:be:e0:9a:ef:d0:88:ca:fe:a0:8c:cc:5c: ba:4f:c3:0e:2a:8d:49:1e:4c:4a:b4:50:3e:5e:b0:7e:d4:f2: 2a:ff:e4:30:62:4b:e6:11:53:97:14:aa:4d:c8:a6:6a:d2:04: b5:75:8b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQPIFXIgcQGSs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MDcwMDFlZTItYzYyYi00Yzg0LTg4MWItOTFlZTI1MjAyNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoKS2PWf4zSGgbWiS2N6DUv2vI9T2pb2Znf4 CgpQK0Nnp7cLsPw6HePf8WHn8tLDWn66t2kJS/Fl4PI0A0JSIVdomoo4T0ng1LSB uK9pDEbhqKbucjrbLQpoxk25dfZGnBeLsLHFVSKvow85VeplEIbfi2M6+0tyPRwt 1rnT6jscX/R8HfmSd/H4dKCmOO+MthLf29ufLQ9A4qT1TgJ0RIlac2xCORvDuvA3 8/agOuP6eAdxqiHig8iJudOn3yEZilbVoFRhEN0L9itMKEUGeo/8j9iMnlhjxitw gB2wKa78XY+71dr80o4EP6jKTg/Qnykv09FAO6mF1daC642VTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqkWxCYKE3eBQPcJrHgzah89uOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDkzYmM0NzgtYWE2My0z MDYwLWE2MzItNzI5YmJiNDg2Yjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5zswIUoxOpb+eEAhNZ8W19MfDeHLudP9A/8bslbSO5VXgbJauR90W9 jGh+Z0wCTXhF+gDq4Mra9t5yd+jZTtQdqNXyEihic7NKN0CQTZUM8qeNLDM4AOUS 5K5CSAk8nA9JnxGPT3qg3RNQCJWY85qCWJQnmOeVn6hk84/u3+/zyh1eKggf8rO8 dlEOMXsuc2UJbjWLqkvE8D2TaXgZahYwVyGL4GZtftCJG8gTg+SZO+sW9+EsMNHr X7IeuJvCrWe7BE/o20f4K1AW/77gmu/QiMr+oIzMXLpPww4qjUkeTEq0UD5esH7U 8ir/5DBiS+YRU5cUqk3IpmrSBLV1i04= -----END CERTIFICATE-----Generated at Wed Nov 5 10:38:45 2025 by rpki-client