$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1cbe547-aff0-3aa7-a23d-4f7d4cb60128.roa File: e1cbe547-aff0-3aa7-a23d-4f7d4cb60128.roa (raw, json) Hash identifier: /Cfx9zpDaCQHCwvH3xjqDr2BdpFU3zlrcJb0TW6faXE= Subject key identifier: 42:BE:BD:14:06:7D:E4:10:06:26:2C:01:5A:7C:E4:D5:C7:59:73:F1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D02F057F6635C83D95500 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1cbe547-aff0-3aa7-a23d-4f7d4cb60128.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:02:f0:57:f6:63:5c:83:d9:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=40be2db1-e46a-4e8f-9256-8fe055f1db2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:f7:45:ba:ec:a4:ad:76:f1:48:63:ca:81: 91:e0:8e:99:2e:bd:e5:bd:1e:f7:9a:4f:93:8f:c4: bc:8f:e0:a5:80:79:e7:ae:dd:9f:98:82:55:de:5e: 40:e2:4a:c7:e5:bc:87:5a:9d:ca:66:34:a2:1e:da: 9e:be:0b:eb:23:30:a8:4b:2a:50:52:d7:a3:1a:da: 3c:8f:3f:c4:29:a0:5d:a9:32:ad:88:35:02:cc:55: ac:ff:0b:10:d6:f5:c0:1f:d5:71:4f:a5:92:07:40: d0:44:12:ed:c1:2f:ae:8f:0f:5b:06:69:76:1d:6d: 37:1f:47:f1:30:22:2f:b4:f6:40:16:4e:f3:e3:cc: ac:10:89:a3:34:4f:b8:e4:9d:2c:99:89:35:75:fa: 56:d8:13:54:92:77:0a:41:0c:82:aa:42:e6:de:36: 22:af:8f:44:0f:5f:ab:7e:6d:ca:e4:61:77:1d:5d: 1b:76:fb:32:e9:ad:4a:7e:00:d3:b2:87:79:d7:a5: 52:d8:65:68:00:1b:59:cc:5a:68:be:4d:0f:17:a2: 4a:6c:92:89:1b:95:61:c5:07:ab:64:e1:65:34:7b: 43:56:87:48:56:a8:b9:ed:d9:e4:f5:68:e5:91:6f: 20:f5:f3:2c:0d:3b:5a:5a:0c:88:3a:96:28:69:92: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BE:BD:14:06:7D:E4:10:06:26:2C:01:5A:7C:E4:D5:C7:59:73:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1cbe547-aff0-3aa7-a23d-4f7d4cb60128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:dc:5d:44:bb:42:ed:f5:37:a4:31:8f:74:d3:c9:ba:42:89: c4:6a:da:4f:16:84:ce:c8:91:38:3a:2c:3f:b6:2e:5a:e9:24: a9:72:54:42:77:da:4e:b4:df:f0:88:8b:c3:7c:1e:4d:f5:63: e1:b7:57:6b:e5:a2:6a:63:b3:88:b0:1d:7b:b7:5e:47:4e:43: 1f:72:0e:5a:28:82:31:b4:13:8c:0c:25:25:90:82:71:d3:9a: 23:17:1e:f0:fc:bb:fd:ca:2e:5a:f3:21:5b:3d:7d:da:21:04: ee:c9:f8:6a:f6:11:02:d8:3e:51:ca:8d:24:86:7c:75:d2:d1: aa:4c:fc:67:35:34:3a:69:03:17:31:27:36:96:0a:c3:6b:fb: 80:64:eb:36:dd:ff:28:85:89:dc:c5:a4:3d:d9:d4:09:8b:3b: f6:09:07:b5:7f:94:39:56:bb:41:12:92:f6:96:2d:aa:df:51: a0:f6:e9:cb:4e:3a:ec:8f:d5:2e:ce:04:45:b4:05:de:ad:e9: 99:d3:63:b6:68:9a:f5:19:63:31:a8:e1:99:62:ce:73:a3:d8: ec:61:9a:a8:2b:6d:c7:c3:5d:ef:ac:92:5f:8a:e0:14:2c:3e: 4e:c4:9d:eb:cd:22:d7:2a:72:e6:1f:1d:4f:4d:ed:04:95:c5: 61:2a:e2:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQLwV/ZjXIPZVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NDBiZTJkYjEtZTQ2YS00ZThmLTkyNTYtOGZlMDU1ZjFkYjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jf3RbrspK128UhjyoGR4I6ZLr3lvR73mk+T j8S8j+ClgHnnrt2fmIJV3l5A4krH5byHWp3KZjSiHtqevgvrIzCoSypQUtejGto8 jz/EKaBdqTKtiDUCzFWs/wsQ1vXAH9VxT6WSB0DQRBLtwS+ujw9bBml2HW03H0fx MCIvtPZAFk7z48ysEImjNE+45J0smYk1dfpW2BNUkncKQQyCqkLm3jYir49ED1+r fm3K5GF3HV0bdvsy6a1KfgDTsod516VS2GVoABtZzFpovk0PF6JKbJKJG5VhxQer ZOFlNHtDVodIVqi57dnk9WjlkW8g9fMsDTtaWgyIOpYoaZLt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK+vRQGfeQQBiYsAVp85NXHWXPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTFjYmU1NDctYWZmMC0z YWE3LWEyM2QtNGY3ZDRjYjYwMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/cXUS7Qu31N6Qxj3TTybpCicRq2k8WhM7IkTg6LD+2LlrpJKlyVEJ3 2k603/CIi8N8Hk31Y+G3V2vlompjs4iwHXu3XkdOQx9yDloogjG0E4wMJSWQgnHT miMXHvD8u/3KLlrzIVs9fdohBO7J+Gr2EQLYPlHKjSSGfHXS0apM/Gc1NDppAxcx JzaWCsNr+4Bk6zbd/yiFidzFpD3Z1AmLO/YJB7V/lDlWu0ESkvaWLarfUaD26ctO OuyP1S7OBEW0Bd6t6ZnTY7ZomvUZYzGo4ZliznOj2OxhmqgrbcfDXe+skl+K4BQs Pk7EnevNItcqcuYfHU9N7QSVxWEq4pw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:47:04 2025 by rpki-client