$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f8f3d176-5355-3a57-a92a-1a940d629ebb.roa File: f8f3d176-5355-3a57-a92a-1a940d629ebb.roa (raw, json) Hash identifier: NPkkEicJBSZNlg1NuKZnrIkIoxYo8dSb1GnHLQG/+Xk= Subject key identifier: 7A:06:4A:20:31:45:60:78:2E:B9:79:65:A4:5B:43:61:EC:0C:A5:2B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFF88A5E58739A7E9B380 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f8f3d176-5355-3a57-a92a-1a940d629ebb.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ff:88:a5:e5:87:39:a7:e9:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=f03e568f-79ca-4e8a-aa0b-fe1cca5e2ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:89:5f:11:92:33:f4:cf:0c:5b:ba:f9:3c: 3d:78:3a:07:90:52:d4:f1:81:e3:b3:d3:df:b0:78: e5:74:ac:5b:a4:b4:3a:39:88:cb:00:53:37:eb:0a: f6:cf:7d:72:14:66:b4:5a:09:33:3e:4c:5c:f8:58: fd:d9:dc:dd:c5:8c:21:84:d9:b2:98:89:e6:35:47: ad:c7:37:41:02:35:01:95:2a:66:94:32:3c:e9:01: 71:21:22:94:63:2a:eb:9a:e0:da:fd:47:c6:d0:2d: 68:f6:3a:b8:2b:6f:5f:de:4f:2c:64:e4:2d:04:36: ff:ae:5b:0a:25:75:ef:91:5d:e6:20:d5:42:fa:fa: 26:f8:57:1b:2f:39:a4:42:5e:e3:bb:09:af:ad:92: cd:e4:4d:72:00:ec:ca:f0:32:e6:24:45:42:99:c0: f4:8e:05:56:ad:c9:4f:5d:b6:3d:54:3e:f8:4f:bf: 3b:1c:d3:c1:33:23:42:32:0d:8e:24:3a:83:27:3e: 08:2b:9d:07:cc:5b:99:f4:29:a9:40:7c:28:90:20: 9e:15:62:31:90:08:1f:33:6f:4f:a2:6f:8d:1c:b9: 72:8c:c0:48:0f:61:01:42:2a:dd:4e:ca:3c:24:4c: c2:35:fe:92:d6:e5:3d:51:bd:1a:f1:e1:38:44:11: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:06:4A:20:31:45:60:78:2E:B9:79:65:A4:5B:43:61:EC:0C:A5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f8f3d176-5355-3a57-a92a-1a940d629ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4a:97:6c:a4:ec:72:de:03:7d:ec:e9:e3:47:bb:9e:a6:a3: fb:35:73:5c:d6:9f:32:ff:25:97:0f:2d:e2:f0:0a:60:bb:6d: 2b:a9:3c:24:57:a3:f7:f8:62:f0:7b:e5:a8:d5:4f:df:58:96: f8:9f:d7:c1:65:6d:f1:8e:ba:c5:2f:e7:41:e1:69:5a:77:b8: db:e3:94:5b:47:69:3e:ce:0e:6e:ef:a2:4b:7d:c9:3c:40:75: f0:58:da:37:3a:61:74:7c:1b:4e:2b:71:c0:8d:e8:57:bf:68: 49:75:8b:1d:77:b6:40:14:03:1f:29:ef:04:e9:3b:ff:c8:57: 08:6b:79:cd:e0:1c:a1:79:99:99:23:a7:67:70:52:a5:ae:12: 14:4f:c5:25:40:ae:a9:19:b3:d4:bf:c3:80:1d:f4:26:40:f5: 70:95:b9:ab:60:49:30:9c:af:eb:d1:29:c5:87:82:f4:ea:26: 93:03:b3:98:7a:d9:9a:7c:15:7a:d9:8d:82:c8:b6:4e:dd:9e: 92:ed:8b:3c:dd:95:13:8c:5e:82:d7:b4:f8:4b:47:8c:9a:1d: 86:5e:f4:1c:17:39:d0:94:44:ea:94:b7:59:8e:32:8b:03:b0: d1:da:bc:43:37:0c:42:1f:22:bf:97:fb:48:60:2c:19:e1:ed: c8:0d:af:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP+IpeWHOafps4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZjAzZTU2OGYtNzljYS00ZThhLWFhMGItZmUxY2NhNWUyYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv92JXxGSM/TPDFu6+Tw9eDoHkFLU8YHjs9Pf sHjldKxbpLQ6OYjLAFM36wr2z31yFGa0WgkzPkxc+Fj92dzdxYwhhNmymInmNUet xzdBAjUBlSpmlDI86QFxISKUYyrrmuDa/UfG0C1o9jq4K29f3k8sZOQtBDb/rlsK JXXvkV3mINVC+vom+FcbLzmkQl7juwmvrZLN5E1yAOzK8DLmJEVCmcD0jgVWrclP XbY9VD74T787HNPBMyNCMg2OJDqDJz4IK50HzFuZ9CmpQHwokCCeFWIxkAgfM29P om+NHLlyjMBID2EBQirdTso8JEzCNf6S1uU9Ub0a8eE4RBFT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoGSiAxRWB4Lrl5ZaRbQ2HsDKUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjhmM2QxNzYtNTM1NS0z YTU3LWE5MmEtMWE5NDBkNjI5ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpKl2yk7HLeA33s6eNHu56mo/s1c1zWnzL/JZcPLeLwCmC7bSupPCRX o/f4YvB75ajVT99Ylvif18FlbfGOusUv50HhaVp3uNvjlFtHaT7ODm7vokt9yTxA dfBY2jc6YXR8G04rccCN6Fe/aEl1ix13tkAUAx8p7wTpO//IVwhrec3gHKF5mZkj p2dwUqWuEhRPxSVArqkZs9S/w4Ad9CZA9XCVuatgSTCcr+vRKcWHgvTqJpMDs5h6 2Zp8FXrZjYLItk7dnpLtizzdlROMXoLXtPhLR4yaHYZe9BwXOdCUROqUt1mOMosD sNHavEM3DEIfIr+X+0hgLBnh7cgNr0E= -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:54 2025 by rpki-client