$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa File: fed4d553-b226-3992-8d8c-3294f2fe7668.roa (raw, json) Hash identifier: o2aJhY/IookvVeazgdr6wwF241r/0gmEuSl+wVxEx70= Subject key identifier: 71:CF:D8:32:90:12:B6:54:24:D2:C4:35:4C:79:76:59:FD:C6:B2:9E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BAA97B47F6EA247CFC66F7C80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 170.85.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b4:7f:6e:a2:47:cf:c6:6f:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=5d3cff46-94b0-416c-b2af-13ff6249fa2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:32:50:29:f6:86:b2:45:c7:c8:4c:db:6d: 67:e2:03:c3:a2:76:a8:37:74:b4:ec:28:71:1d:68: 62:13:32:74:6e:10:af:98:f0:4a:f7:d5:ce:83:e6: c3:5d:f4:39:3d:c6:cc:76:df:ef:84:da:ac:25:0f: 77:8f:bb:c9:97:26:63:9c:2a:50:fa:0c:09:80:f7: 67:55:08:a2:f0:82:99:f8:89:49:01:5a:ac:60:9e: c6:51:d2:24:7c:ed:60:f8:c4:21:a3:97:66:40:91: be:c1:30:70:a6:fb:6c:94:4f:7c:2b:35:61:d2:5c: 2c:33:af:73:93:85:85:96:24:01:51:67:4c:68:92: 67:1e:73:8f:ef:0c:3f:c1:e8:00:07:74:ad:3b:e5: 98:1c:85:cf:00:81:f9:78:46:b8:9b:6a:95:9b:88: 37:ff:c5:cb:89:bd:04:34:c9:17:f3:cc:52:2c:68: ea:6f:48:b5:09:6f:41:3a:91:a2:05:cc:11:1c:8e: 17:c3:55:26:33:70:8a:e7:69:f8:ef:04:dd:75:f5: 33:54:ff:f2:44:80:bc:6f:63:19:00:59:10:76:25: 8b:92:eb:eb:14:5e:c7:88:4d:8f:6d:f9:e5:7f:8c: 29:0d:61:6d:40:37:e1:72:84:62:60:a7:60:57:41: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:D8:32:90:12:B6:54:24:D2:C4:35:4C:79:76:59:FD:C6:B2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fed4d553-b226-3992-8d8c-3294f2fe7668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a5:4e:48:36:8d:d7:5a:b9:5d:c6:83:f3:00:54:f4:1e:40: 59:90:0d:70:e2:86:da:c8:71:19:5c:bc:50:12:0e:39:ce:55: 67:cf:0a:0a:a9:9d:75:15:af:11:08:78:5e:97:00:88:8a:0f: 74:bc:93:4c:1e:92:6d:94:1c:f2:92:a0:5b:36:5c:eb:29:c5: dd:4d:51:f5:f3:ce:5e:f6:54:b1:49:b1:81:97:c8:c9:21:4e: e9:92:fb:02:a1:fd:97:b7:60:7f:04:aa:70:36:4e:dc:ec:d3: 6b:cf:43:d2:34:1a:74:a0:c3:51:59:be:b6:e4:45:3c:91:df: 6b:a4:37:cb:e1:b4:97:6f:25:46:f1:6d:c9:05:2e:57:9c:d8: 05:25:70:d3:b6:7e:cd:f9:cb:ea:11:12:97:14:ce:b1:12:07: ca:d3:1a:b9:77:24:59:06:92:e2:8b:7c:73:37:6b:46:7d:88: 63:93:51:e7:8a:af:d5:c0:1d:0d:02:dd:f6:68:ee:9d:26:d0: 9c:d0:95:b3:5e:50:12:03:57:bd:b9:18:5e:a8:26:7b:0a:27: d1:82:64:05:16:b2:a4:23:56:24:a0:34:99:79:8a:f1:fa:9e: 9e:e4:06:3b:db:2f:7a:df:21:9e:1a:23:20:4f:e9:bf:87:8e: c1:6e:94:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7R/bqJHz8ZvfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NWQzY2ZmNDYtOTRiMC00MTZjLWIyYWYtMTNmZjYyNDlmYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE0yUCn2hrJFx8hM221n4gPDonaoN3S07Chx HWhiEzJ0bhCvmPBK99XOg+bDXfQ5PcbMdt/vhNqsJQ93j7vJlyZjnCpQ+gwJgPdn VQii8IKZ+IlJAVqsYJ7GUdIkfO1g+MQho5dmQJG+wTBwpvtslE98KzVh0lwsM69z k4WFliQBUWdMaJJnHnOP7ww/wegAB3StO+WYHIXPAIH5eEa4m2qVm4g3/8XLib0E NMkX88xSLGjqb0i1CW9BOpGiBcwRHI4Xw1UmM3CK52n47wTddfUzVP/yRIC8b2MZ AFkQdiWLkuvrFF7HiE2Pbfnlf4wpDWFtQDfhcoRiYKdgV0GseQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHP2DKQErZUJNLENUx5dln9xrKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmVkNGQ1NTMtYjIyNi0z OTkyLThkOGMtMzI5NGYyZmU3NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFulTkg2jddauV3Gg/MAVPQeQFmQDXDihtrIcRlcvFASDjnOVWfPCgqp nXUVrxEIeF6XAIiKD3S8k0wekm2UHPKSoFs2XOspxd1NUfXzzl72VLFJsYGXyMkh TumS+wKh/Ze3YH8EqnA2Ttzs02vPQ9I0GnSgw1FZvrbkRTyR32ukN8vhtJdvJUbx bckFLlec2AUlcNO2fs35y+oREpcUzrESB8rTGrl3JFkGkuKLfHM3a0Z9iGOTUeeK r9XAHQ0C3fZo7p0m0JzQlbNeUBIDV725GF6oJnsKJ9GCZAUWsqQjViSgNJl5ivH6 np7kBjvbL3rfIZ4aIyBP6b+HjsFulJ4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:39 2025 by rpki-client