$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4ee038a2-ad69-3169-b6be-f55d0b936b24.roa File: 4ee038a2-ad69-3169-b6be-f55d0b936b24.roa (raw, json) Hash identifier: vYZkpVSZbRsY3RsVdGcLVj1pcy85tpS+LpO8WCgSESo= Subject key identifier: 4E:98:FE:B5:EF:F4:4E:A4:2D:EF:8B:4C:13:CF:67:E3:E1:63:57:BD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFCF4E1F93EBC4E145F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4ee038a2-ad69-3169-b6be-f55d0b936b24.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 170.85.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fc:f4:e1:f9:3e:bc:4e:14:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=f96b007f-1c6d-47ef-8e5e-817cdbb44763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:3a:f0:ac:8b:76:31:6b:39:e7:f1:d8:b0: 29:c9:17:79:08:40:35:5e:50:0f:11:71:8b:c5:45: d0:39:ab:3e:1c:76:66:59:6f:af:b2:7e:4d:cc:5e: 51:5b:30:16:e2:9e:54:b8:66:04:8f:ba:db:34:8e: 94:15:cf:3b:ee:78:db:e6:7f:24:88:72:b1:37:b5: 61:69:59:0e:62:19:87:0c:7d:b5:c3:b8:c8:2e:b0: 83:9d:ef:c9:3a:3e:db:76:c0:91:05:f9:50:1b:33: bf:5b:34:bd:15:09:da:b4:50:b3:02:cf:bf:ce:76: 73:a1:18:5b:d1:d8:8e:10:35:87:60:46:0c:83:68: 6b:32:5e:dc:02:a0:10:fd:07:f9:df:9a:81:43:42: cb:2c:3c:49:4b:28:3d:06:9f:0f:ce:90:75:42:4b: c5:8a:ee:91:53:7b:b5:40:9e:ca:4f:e6:91:b1:8e: ad:c6:a7:c3:d3:63:22:b0:64:35:0c:6d:a2:81:26: 06:e9:16:28:9e:11:77:27:e9:92:9f:3c:8a:96:db: 5f:de:ba:c7:56:67:32:ce:b9:1a:db:5e:2d:38:84: 21:bf:0b:c8:cd:39:0d:b5:17:cf:7a:85:1f:7d:f6: 0d:94:ee:11:91:84:ee:9e:bb:f1:e5:45:9e:b8:59: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:FE:B5:EF:F4:4E:A4:2D:EF:8B:4C:13:CF:67:E3:E1:63:57:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4ee038a2-ad69-3169-b6be-f55d0b936b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8e:41:d6:56:c4:68:47:f3:6b:fc:ca:59:cf:cb:68:2f:31: 32:46:ba:c9:2d:0d:40:ec:3e:93:a8:4c:7e:63:92:75:8d:ad: 8c:07:5c:cc:37:5a:19:90:fc:b0:6c:e2:d1:8a:20:cd:8c:d7: ba:6c:91:fe:6a:83:c4:42:96:ca:7b:c7:dc:a0:86:d1:d6:51: 1e:6d:84:3d:a9:99:a1:64:a8:13:11:f3:9e:48:f5:7b:7d:e7: 54:a2:75:66:63:34:03:9d:06:d1:31:15:87:0f:eb:39:67:75: ad:97:69:ed:40:91:3e:92:aa:7f:44:78:e9:0d:41:51:74:95: a9:c5:44:cb:95:b7:96:bc:41:38:e6:f9:c8:34:08:72:c1:94: fd:67:64:16:f3:f7:35:18:0c:94:e6:29:8a:d6:a8:29:a2:69: 60:e8:1f:aa:42:37:a8:4e:c9:b0:f7:3c:f7:11:9f:07:8f:81: 24:81:de:93:27:ac:45:fb:af:5e:6d:a1:a1:95:ff:38:b3:20: 89:5f:28:19:1a:ec:5a:c9:37:eb:92:4e:e9:41:63:7e:29:8e: 13:8c:8e:85:9d:bc:d3:bc:f8:f2:53:7a:0e:09:c2:6d:8b:a3: ee:9e:4b:49:8c:1f:da:fa:a8:94:40:4d:38:dc:0f:9b:ee:a0: 28:df:42:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPz04fk+vE4UX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk Zjk2YjAwN2YtMWM2ZC00N2VmLThlNWUtODE3Y2RiYjQ0NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zo68KyLdjFrOefx2LApyRd5CEA1XlAPEXGL xUXQOas+HHZmWW+vsn5NzF5RWzAW4p5UuGYEj7rbNI6UFc877njb5n8kiHKxN7Vh aVkOYhmHDH21w7jILrCDne/JOj7bdsCRBflQGzO/WzS9FQnatFCzAs+/znZzoRhb 0diOEDWHYEYMg2hrMl7cAqAQ/Qf535qBQ0LLLDxJSyg9Bp8PzpB1QkvFiu6RU3u1 QJ7KT+aRsY6txqfD02MisGQ1DG2igSYG6RYonhF3J+mSnzyKlttf3rrHVmcyzrka 214tOIQhvwvIzTkNtRfPeoUfffYNlO4RkYTunrvx5UWeuFmiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6Y/rXv9E6kLe+LTBPPZ+PhY1e9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNGVlMDM4YTItYWQ2OS0z MTY5LWI2YmUtZjU1ZDBiOTM2YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWOQdZWxGhH82v8ylnPy2gvMTJGusktDUDsPpOoTH5jknWNrYwHXMw3 WhmQ/LBs4tGKIM2M17pskf5qg8RClsp7x9yghtHWUR5thD2pmaFkqBMR855I9Xt9 51SidWZjNAOdBtExFYcP6zlnda2Xae1AkT6Sqn9EeOkNQVF0lanFRMuVt5a8QTjm +cg0CHLBlP1nZBbz9zUYDJTmKYrWqCmiaWDoH6pCN6hOybD3PPcRnwePgSSB3pMn rEX7r15toaGV/zizIIlfKBka7FrJN+uSTulBY34pjhOMjoWdvNO8+PJTeg4Jwm2L o+6eS0mMH9r6qJRATTjcD5vuoCjfQsI= -----END CERTIFICATE-----Generated at Thu Oct 23 08:15:48 2025 by rpki-client