$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa File: f00191ea-7649-3395-af77-d4da4f50995c.roa (raw, json) Hash identifier: jXwD/wYhnH3z+gzHtIt/PE3OvAHMPIKhcESOn+ABk04= Subject key identifier: 1B:19:F7:17:7C:59:F2:AF:A4:8A:C2:9A:C2:AE:C5:58:89:CA:F2:D1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BAA97B5865BC5595919325D00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 170.85.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b5:86:5b:c5:59:59:19:32:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=f2cfb59e-a79d-4bcb-8903-6e6aef93288b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:3b:89:9d:9c:b3:60:ce:ce:46:68:36:1f: 19:18:d4:fa:29:99:f5:16:37:bb:bb:90:d3:73:6c: 66:a4:9d:e6:ec:53:6d:79:25:8e:0a:40:28:2f:30: 8a:51:a7:a5:96:34:be:0a:d2:26:2c:49:f1:47:b6: c1:e9:40:07:63:f3:85:21:5f:6a:18:19:b1:4c:c1: 29:b9:b7:21:f5:c7:12:80:76:3b:2a:db:21:7b:8c: 4b:fc:82:9f:54:4d:76:34:72:5b:bf:04:6f:1c:70: 22:6d:79:fd:86:3b:c6:6c:5f:a5:1b:43:de:14:43: 59:7c:ad:6a:88:d0:77:dc:4a:e7:93:ae:57:c2:48: 8a:bb:4f:12:d9:76:f7:8a:d7:ff:79:3f:29:dd:fd: 2a:4b:60:90:7b:76:32:da:af:c5:7f:42:05:a8:2a: 1f:98:f8:52:09:4a:21:e4:3d:42:f7:37:db:18:56: 60:24:4c:9d:a1:4e:75:d5:2e:0f:4e:3f:b1:c5:57: 25:4f:39:f6:d4:97:49:d8:a2:20:b8:3e:e5:36:1c: bd:3d:c8:0b:30:cf:b4:0b:0b:fe:40:6b:da:ed:60: 96:6f:72:d4:16:8f:c5:ce:8b:2f:4a:45:15:b1:5d: 1c:92:4a:10:2d:c8:d8:4a:22:41:8c:f1:37:24:d2: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:F7:17:7C:59:F2:AF:A4:8A:C2:9A:C2:AE:C5:58:89:CA:F2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f00191ea-7649-3395-af77-d4da4f50995c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a8:31:d8:06:3c:43:75:62:06:d9:d3:3a:84:69:25:8d:2b: 87:87:64:e3:21:0e:93:5e:03:c3:4a:a4:4c:d4:d8:33:9a:8b: fa:63:37:c1:2b:df:3d:96:9e:03:1d:66:4e:51:f0:16:c5:7d: 32:00:0b:33:7b:68:97:d3:d3:37:cc:b4:55:08:51:1f:cb:de: 1d:56:5a:7d:c7:c3:46:a9:ea:16:20:26:c7:fc:48:99:e4:32: 94:f5:0d:bb:05:77:d9:f1:67:54:ac:c9:f9:1f:9c:e8:30:a3: f9:e3:ff:0f:17:df:a2:e9:3c:31:23:1e:e1:5e:d6:59:61:1b: 3e:62:53:f0:f6:96:da:3c:75:e3:db:ff:ab:b9:54:08:3e:86: 42:b7:ac:c3:c2:bb:bc:0b:de:38:6b:be:b7:62:28:e2:74:87: c2:81:2c:cd:aa:32:89:ef:eb:92:d8:a6:70:67:4d:13:ab:d8: 82:0c:08:f2:71:9a:60:78:94:d4:c5:78:a6:37:86:ab:13:ed: 90:ec:b6:52:ff:2f:c2:82:3f:ad:76:5c:c1:c3:9f:42:8e:19: 8a:06:93:36:2e:43:c3:b8:ca:0f:2a:de:61:52:25:fd:83:5a: 4c:6e:a7:98:d6:69:62:5c:a8:b5:aa:ce:18:84:76:44:2b:98: 18:34:8b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7WGW8VZWRkyXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZjJjZmI1OWUtYTc5ZC00YmNiLTg5MDMtNmU2YWVmOTMyODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpo7iZ2cs2DOzkZoNh8ZGNT6KZn1Fje7u5DT c2xmpJ3m7FNteSWOCkAoLzCKUaelljS+CtImLEnxR7bB6UAHY/OFIV9qGBmxTMEp ubch9ccSgHY7Ktshe4xL/IKfVE12NHJbvwRvHHAibXn9hjvGbF+lG0PeFENZfK1q iNB33Ernk65XwkiKu08S2Xb3itf/eT8p3f0qS2CQe3Yy2q/Ff0IFqCofmPhSCUoh 5D1C9zfbGFZgJEydoU511S4PTj+xxVclTzn21JdJ2KIguD7lNhy9PcgLMM+0Cwv+ QGva7WCWb3LUFo/FzosvSkUVsV0ckkoQLcjYSiJBjPE3JNItHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsZ9xd8WfKvpIrCmsKuxViJyvLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjAwMTkxZWEtNzY0OS0z Mzk1LWFmNzctZDRkYTRmNTA5OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWoMdgGPEN1YgbZ0zqEaSWNK4eHZOMhDpNeA8NKpEzU2DOai/pjN8Er 3z2WngMdZk5R8BbFfTIACzN7aJfT0zfMtFUIUR/L3h1WWn3Hw0ap6hYgJsf8SJnk MpT1DbsFd9nxZ1SsyfkfnOgwo/nj/w8X36LpPDEjHuFe1llhGz5iU/D2lto8dePb /6u5VAg+hkK3rMPCu7wL3jhrvrdiKOJ0h8KBLM2qMonv65LYpnBnTROr2IIMCPJx mmB4lNTFeKY3hqsT7ZDstlL/L8KCP612XMHDn0KOGYoGkzYuQ8O4yg8q3mFSJf2D Wkxup5jWaWJcqLWqzhiEdkQrmBg0i1o= -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:06 2025 by rpki-client