$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa File: f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa (raw, json) Hash identifier: FlhJp3EkJdok7IiriqmSkaz+0N0FWOkIbI2GMawqHzU= Subject key identifier: 76:AB:38:C0:63:17:B9:7C:92:2F:49:31:47:80:70:58:08:94:E1:12 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFE8B7CF3A852DE6E2080 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fe:8b:7c:f3:a8:52:de:6e:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=f6f20902-d919-45a9-a5d8-1f9914596bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ad:fb:81:d7:b6:3c:67:61:4f:ca:5e:2e:71: 0a:2d:a3:ed:4c:73:72:9f:d9:77:59:a3:e9:a7:49: bb:84:27:7a:85:8e:fb:3c:56:57:72:51:cd:b8:ce: 63:b1:11:59:4c:5b:65:89:ae:07:17:f7:97:d1:0d: 64:ed:78:8e:87:5b:8d:05:25:d9:ea:7b:fe:71:0b: ab:98:94:8e:c0:58:4a:63:f2:4b:92:0a:3d:7f:23: fd:f3:71:b9:5d:01:c6:9e:f4:5c:0a:ab:c0:7c:70: 66:e6:15:a0:b9:d9:c1:0f:10:8d:11:de:f5:c4:84: de:36:07:c8:e6:a4:5a:85:48:1d:c8:c4:68:4c:03: d0:65:23:91:55:3a:ad:ea:83:fa:ee:1d:0d:54:92: b8:72:28:4c:8b:26:93:2d:be:de:ce:9d:8a:a2:71: b3:7c:8c:d8:b9:d7:22:e3:19:41:98:21:e3:ec:c4: 90:53:a8:94:57:5c:1c:42:60:a2:8f:cf:79:03:73: a2:f4:cf:45:a4:96:69:4e:1f:db:8d:88:91:37:d7: f4:d1:45:1a:bd:49:71:a3:cf:08:38:a6:be:a0:84: f2:86:24:2f:c0:8f:0e:b8:05:a7:65:dd:6f:01:e7: e4:bc:74:cd:8c:66:8f:fd:bf:a1:b5:db:38:35:bc: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AB:38:C0:63:17:B9:7C:92:2F:49:31:47:80:70:58:08:94:E1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5d:19:75:ab:af:03:32:af:e4:f9:7e:3d:a8:d6:b6:13:3c: c3:95:49:27:db:41:21:8f:6b:a8:fb:29:01:49:0f:61:c4:a8: 2f:30:38:09:00:e8:82:f3:60:c9:81:3e:8e:88:66:8e:67:74: 24:e4:96:19:80:27:01:95:10:86:33:49:9c:39:bc:43:07:53: b7:4b:f0:1b:f7:56:1b:33:50:86:1e:36:48:1a:df:23:22:26: 42:42:0a:ca:aa:01:bc:ee:41:c9:42:aa:4f:ce:45:f2:14:97: d6:68:21:ec:50:a9:91:9b:5f:e6:50:57:c5:1b:35:ba:43:ec: c8:08:d0:cc:5d:3f:d7:fb:2d:50:d0:0e:64:e0:f9:0f:e8:15: bf:ba:42:8b:d0:6b:70:12:bb:e2:3a:c1:6c:06:74:fa:0a:fa: a1:94:6f:04:cd:a5:f9:9f:49:5d:20:c1:63:57:e6:28:ab:1f: 86:79:ca:d4:a6:59:10:f5:c2:5e:6e:6d:3c:56:47:39:36:16: 92:32:03:ca:c5:2e:2e:31:31:2c:8c:30:e2:68:d8:50:e1:b3: bd:06:37:d0:41:df:cd:b9:f3:54:d4:d9:18:f2:90:b2:43:33: d5:96:cc:3f:9a:18:79:a8:2d:60:d1:6a:2e:6f:e2:f6:35:1d: 8f:ce:08:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP6LfPOoUt5uIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZjZmMjA5MDItZDkxOS00NWE5LWE1ZDgtMWY5OTE0NTk2YmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq37gde2PGdhT8peLnEKLaPtTHNyn9l3WaPp p0m7hCd6hY77PFZXclHNuM5jsRFZTFtlia4HF/eX0Q1k7XiOh1uNBSXZ6nv+cQur mJSOwFhKY/JLkgo9fyP983G5XQHGnvRcCqvAfHBm5hWgudnBDxCNEd71xITeNgfI 5qRahUgdyMRoTAPQZSORVTqt6oP67h0NVJK4cihMiyaTLb7ezp2KonGzfIzYudci 4xlBmCHj7MSQU6iUV1wcQmCij895A3Oi9M9FpJZpTh/bjYiRN9f00UUavUlxo88I OKa+oITyhiQvwI8OuAWnZd1vAefkvHTNjGaP/b+htds4NbwEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHarOMBjF7l8ki9JMUeAcFgIlOESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjdjZTBjNTMtODZjZS0z MTNhLTlkY2QtYjY5OWZlOGQyMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZdGXWrrwMyr+T5fj2o1rYTPMOVSSfbQSGPa6j7KQFJD2HEqC8wOAkA 6ILzYMmBPo6IZo5ndCTklhmAJwGVEIYzSZw5vEMHU7dL8Bv3VhszUIYeNkga3yMi JkJCCsqqAbzuQclCqk/ORfIUl9ZoIexQqZGbX+ZQV8UbNbpD7MgI0MxdP9f7LVDQ DmTg+Q/oFb+6QovQa3ASu+I6wWwGdPoK+qGUbwTNpfmfSV0gwWNX5iirH4Z5ytSm WRD1wl5ubTxWRzk2FpIyA8rFLi4xMSyMMOJo2FDhs70GN9BB382581TU2RjykLJD M9WWzD+aGHmoLWDRai5v4vY1HY/OCOM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:05 2025 by rpki-client