$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/532ba7b3-0c44-3859-87d3-a37b1241aa15.roa File: 532ba7b3-0c44-3859-87d3-a37b1241aa15.roa (raw, json) Hash identifier: 4A1qoJJl/rz42+1WZdUnSlnx1JOJxRfrhrjxIE2kSUU= Subject key identifier: CB:4C:BD:FB:17:A1:2A:75:C5:08:82:C7:FB:70:56:88:70:90:1C:50 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFD086B7B849CA4FAE100 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/532ba7b3-0c44-3859-87d3-a37b1241aa15.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 170.85.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fd:08:6b:7b:84:9c:a4:fa:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=8928bdba-01fc-458a-976d-18438345c14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:99:c9:c0:00:4a:7a:be:05:26:89:58:fd: 77:ae:29:45:15:b1:d2:fe:a8:c0:5f:e7:1e:2a:cd: d3:16:33:4e:34:e5:a7:15:81:f9:93:f9:41:1c:b5: e4:e6:71:b8:28:c9:54:64:17:15:75:e3:f0:33:35: 29:69:ba:5e:30:34:70:0d:5d:eb:c6:e0:5a:ed:7f: cc:0c:a2:97:57:7b:49:8b:39:96:b5:c7:1a:48:6b: 8b:31:3c:a1:f9:6f:a0:8a:2f:37:a9:e9:d1:39:73: 4a:6b:45:f9:ae:84:f0:df:dd:89:96:ee:84:25:32: 47:a1:e2:2b:57:f6:57:09:91:69:6c:50:8a:24:aa: 4a:76:ab:3e:02:41:3e:bd:14:23:65:e0:0b:a7:e5: ae:7e:23:85:41:40:3f:cb:9e:71:65:e9:27:e6:e9: fb:b8:4c:4f:a4:85:57:fe:9e:a4:fd:f0:ec:9c:44: b3:33:d4:19:cc:ed:ef:c1:cd:d4:26:49:83:04:3c: 4f:da:6e:cb:ac:bc:c1:af:aa:db:fb:a7:b7:92:10: 67:56:c5:d4:c5:81:70:6a:3b:48:12:0e:a4:66:50: a3:8d:2c:35:5e:33:0a:4b:31:67:6c:a8:eb:11:10: 70:2d:c2:a2:5b:e2:9e:d4:c2:ac:a4:0d:12:d4:cd: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4C:BD:FB:17:A1:2A:75:C5:08:82:C7:FB:70:56:88:70:90:1C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/532ba7b3-0c44-3859-87d3-a37b1241aa15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9c:90:24:d5:48:11:30:7c:8b:43:17:3b:a7:6b:c1:fc:c7: f0:f0:85:68:16:b1:d4:4b:51:8e:b6:39:f8:b6:18:8e:b8:83: 27:cb:c7:63:e1:b6:3a:8d:22:fb:d6:d8:9b:14:4d:bc:c1:9e: 5a:cb:d4:00:78:57:b6:bc:f0:0e:b9:ac:06:d3:dc:4a:5b:18: 53:c7:8f:3a:8d:ce:0b:dd:ba:85:a5:cc:c9:ea:3a:b8:d3:9b: 95:6e:83:8e:86:30:72:fe:36:2a:f7:66:9a:16:f7:50:71:ad: 96:c4:55:56:17:1e:10:e7:f7:61:75:26:9e:ad:fb:84:83:cd: da:cf:7d:d2:b8:1f:5f:ef:1c:cf:37:30:5f:ef:fe:cf:38:74: 60:37:bd:20:b6:e6:1f:fe:58:9b:ff:8e:3f:f6:80:f6:1d:2b: b3:a2:d8:c1:8a:71:92:b0:eb:d5:c4:15:c2:9d:cd:f2:4e:88: 77:2b:83:52:41:43:cd:25:05:2c:a6:ea:78:2a:31:7c:81:a0: 8e:3f:de:ea:c8:33:c5:dd:d2:00:1d:77:a7:0b:69:56:70:44: 1e:14:40:f7:46:32:67:08:80:20:28:26:fe:0b:8a:3d:e6:fc: 3c:b4:dd:38:f8:26:02:b2:7c:13:30:33:86:e6:f5:d5:5f:93: 4f:ac:f4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP0Ia3uEnKT64QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ODkyOGJkYmEtMDFmYy00NThhLTk3NmQtMTg0MzgzNDVjMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlqZycAASnq+BSaJWP13rilFFbHS/qjAX+ce Ks3TFjNONOWnFYH5k/lBHLXk5nG4KMlUZBcVdePwMzUpabpeMDRwDV3rxuBa7X/M DKKXV3tJizmWtccaSGuLMTyh+W+gii83qenROXNKa0X5roTw392Jlu6EJTJHoeIr V/ZXCZFpbFCKJKpKdqs+AkE+vRQjZeALp+WufiOFQUA/y55xZekn5un7uExPpIVX /p6k/fDsnESzM9QZzO3vwc3UJkmDBDxP2m7LrLzBr6rb+6e3khBnVsXUxYFwajtI Eg6kZlCjjSw1XjMKSzFnbKjrERBwLcKiW+Ke1MKspA0S1M0zhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtMvfsXoSp1xQiCx/twVohwkBxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTMyYmE3YjMtMGM0NC0z ODU5LTg3ZDMtYTM3YjEyNDFhYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqckCTVSBEwfItDFzuna8H8x/DwhWgWsdRLUY62Ofi2GI64gyfLx2Ph tjqNIvvW2JsUTbzBnlrL1AB4V7a88A65rAbT3EpbGFPHjzqNzgvduoWlzMnqOrjT m5Vug46GMHL+Nir3ZpoW91BxrZbEVVYXHhDn92F1Jp6t+4SDzdrPfdK4H1/vHM83 MF/v/s84dGA3vSC25h/+WJv/jj/2gPYdK7Oi2MGKcZKw69XEFcKdzfJOiHcrg1JB Q80lBSym6ngqMXyBoI4/3urIM8Xd0gAdd6cLaVZwRB4UQPdGMmcIgCAoJv4Lij3m /Dy03Tj4JgKyfBMwM4bm9dVfk0+s9LY= -----END CERTIFICATE-----Generated at Thu Oct 23 08:25:38 2025 by rpki-client