$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa File: dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa (raw, json) Hash identifier: F/3NTG208mVXoz0tOH9c4z8J+lFWDUkLEFfMkCpIiho= Subject key identifier: 2C:55:CE:A4:21:0C:AC:6F:F3:E1:5D:EF:38:B4:3D:F6:45:75:F4:87 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D01E73EB9E7E9EBBCF280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:e7:3e:b9:e7:e9:eb:bc:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=dfcf9616-f642-4e7a-b14f-d37f8eeb42f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:78:a9:66:69:67:fc:f5:ff:f2:74:3c:e7:82: ec:0d:70:35:9b:91:93:dd:34:ad:3c:b8:88:c8:88: 2f:77:84:17:2d:f3:f4:82:61:f9:a4:a8:60:c0:67: 0f:76:3e:48:86:f8:97:9c:cc:f0:97:49:c6:c2:77: 1c:b7:eb:be:0a:01:5c:0c:97:34:48:1d:36:ec:1f: 06:7e:ab:df:60:e2:18:06:19:c3:7a:97:fa:6d:30: ac:3c:c5:dc:80:50:8a:58:cb:18:2c:31:0b:87:71: 38:d8:ce:f2:56:e9:7d:9f:9b:02:ca:95:aa:3a:5a: c5:48:ce:eb:11:3c:81:fe:41:77:e1:03:9d:03:cd: 56:01:75:49:4c:14:b8:28:23:f6:46:0b:e9:38:7f: 7c:d3:51:1f:0f:e2:00:f3:ab:15:50:f5:73:ce:0e: c9:c8:5e:5f:84:16:4c:96:2f:bb:d6:da:7d:ef:af: a6:f9:6f:16:7f:bd:a7:23:4e:4d:da:bd:d8:2a:a6: 9a:07:29:f3:e6:b1:44:7b:a0:24:2c:de:6d:d4:89: cb:b2:8c:27:de:fa:ee:a9:b1:d9:60:db:f7:75:7c: fd:84:5f:e6:7a:5b:81:66:e1:48:a4:2f:f0:0d:a9: e8:a9:18:c2:c3:9d:b4:1d:ce:50:c7:0e:fe:22:23: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:55:CE:A4:21:0C:AC:6F:F3:E1:5D:EF:38:B4:3D:F6:45:75:F4:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc5174f3-2558-30f1-8293-a4290ef2c3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1a:e5:99:1b:3c:44:d2:0c:2f:a0:36:12:04:9b:0d:5e:51: 0c:16:15:59:a3:aa:d6:61:e9:77:b3:d2:07:71:4a:2d:a5:59: 81:e2:be:34:51:f0:25:4f:93:2d:34:74:1a:20:98:81:24:f1: 73:96:32:84:5b:f1:af:64:b8:55:8f:c2:4d:56:47:4a:a9:ce: ea:5e:04:97:17:33:2e:82:30:0f:07:fc:ad:76:4b:2c:95:3f: 28:a8:c9:a7:41:82:0e:cf:1e:ee:38:1d:5f:fe:54:05:d8:10: b8:e7:4b:42:c4:df:fc:3f:4e:3c:1b:db:28:ee:4d:4f:a4:ee: b4:ca:2c:48:de:a2:b3:38:e0:80:d7:95:16:06:7e:6c:11:22: f5:f9:89:5c:9e:52:9f:ee:0e:b1:cc:6f:93:d4:e6:42:19:94: 07:12:4f:24:47:a1:8c:dc:80:5c:35:4f:c9:74:6f:d0:9c:c6: 1c:e1:d7:ba:f6:5d:ad:db:f4:ce:00:12:b5:11:22:a3:fa:f5: 18:2f:d7:19:64:9c:d2:0c:a7:80:16:95:6e:c7:2a:83:90:df: a2:43:25:f9:75:5e:0e:8c:a5:5c:1e:c1:7a:4d:06:a4:99:ca: 59:b7:95:56:12:0b:79:80:e3:37:2b:03:fb:ea:75:8c:77:48: 3b:be:c1:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQHnPrnn6eu88oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZGZjZjk2MTYtZjY0Mi00ZTdhLWIxNGYtZDM3ZjhlZWI0MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnipZmln/PX/8nQ854LsDXA1m5GT3TStPLiI yIgvd4QXLfP0gmH5pKhgwGcPdj5IhviXnMzwl0nGwncct+u+CgFcDJc0SB027B8G fqvfYOIYBhnDepf6bTCsPMXcgFCKWMsYLDELh3E42M7yVul9n5sCypWqOlrFSM7r ETyB/kF34QOdA81WAXVJTBS4KCP2RgvpOH9801EfD+IA86sVUPVzzg7JyF5fhBZM li+71tp976+m+W8Wf72nI05N2r3YKqaaBynz5rFEe6AkLN5t1InLsown3vruqbHZ YNv3dXz9hF/meluBZuFIpC/wDanoqRjCw520Hc5Qxw7+IiPJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxVzqQhDKxv8+Fd7zi0PfZFdfSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGM1MTc0ZjMtMjU1OC0z MGYxLTgyOTMtYTQyOTBlZjJjM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAa5ZkbPETSDC+gNhIEmw1eUQwWFVmjqtZh6Xez0gdxSi2lWYHivjRR 8CVPky00dBogmIEk8XOWMoRb8a9kuFWPwk1WR0qpzupeBJcXMy6CMA8H/K12SyyV PyioyadBgg7PHu44HV/+VAXYELjnS0LE3/w/Tjwb2yjuTU+k7rTKLEjeorM44IDX lRYGfmwRIvX5iVyeUp/uDrHMb5PU5kIZlAcSTyRHoYzcgFw1T8l0b9Ccxhzh17r2 Xa3b9M4AErURIqP69Rgv1xlknNIMp4AWlW7HKoOQ36JDJfl1Xg6MpVwewXpNBqSZ ylm3lVYSC3mA4zcrA/vqdYx3SDu+wRY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:44:20 2025 by rpki-client