$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a706adb4-d2bf-38d8-922e-cdb9e6fa69c6.roa File: a706adb4-d2bf-38d8-922e-cdb9e6fa69c6.roa (raw, json) Hash identifier: tGvgBtLzB/a8qhVts4YuxUmYc3SVo2wYWiggEPX4RLE= Subject key identifier: 2E:9A:B2:15:B2:A0:C7:CC:17:BF:FB:14:6B:9A:98:C3:D3:F1:03:08 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFF5632812E4719FB74A0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a706adb4-d2bf-38d8-922e-cdb9e6fa69c6.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 170.85.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ff:56:32:81:2e:47:19:fb:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=fb9691fe-e6a9-4031-9287-af2b4a96dee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:11:b8:94:58:76:cf:4c:a5:22:cc:b0:40: e1:0e:08:a7:71:a5:9c:65:e1:cb:0f:0c:bd:e9:47: 7f:2b:a6:98:6e:18:a0:1c:6f:b6:43:c3:1a:9a:5d: b4:6f:c6:c0:32:d0:a6:35:d7:80:a1:37:57:40:26: d4:5e:b2:72:6c:c8:ef:22:65:cd:8c:04:79:05:27: 4b:8e:84:42:9c:91:43:1f:a4:c8:26:5d:13:60:05: 08:7c:8b:bd:2e:95:be:45:2b:6b:f5:72:f7:b5:70: a1:fe:98:a3:8e:94:c5:60:42:b8:79:2a:d9:0f:4a: 5f:83:4d:85:26:e6:e5:d5:e9:ca:ca:8d:bc:be:11: 33:de:02:cd:5f:33:24:3b:90:41:4e:23:e4:2c:ff: c2:56:7f:9a:52:8b:08:2f:1e:fa:eb:d5:49:4e:d6: ac:83:15:0e:fc:af:a6:0a:fa:98:1c:fa:5d:1c:6d: e3:72:31:98:31:8a:db:fe:10:20:e6:d2:13:da:7a: 91:98:cc:b4:b0:16:8f:af:09:77:49:29:20:f2:02: d8:26:93:30:7c:29:15:5e:ae:db:b9:0a:d8:97:44: 95:b4:f2:67:3b:49:ba:6d:25:10:7e:b1:f5:fe:4a: da:f3:9f:42:36:a6:a0:92:66:fd:8b:86:60:e1:b5: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9A:B2:15:B2:A0:C7:CC:17:BF:FB:14:6B:9A:98:C3:D3:F1:03:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a706adb4-d2bf-38d8-922e-cdb9e6fa69c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f2:0f:6b:1d:9a:42:8d:53:fe:f3:9a:11:67:ec:18:5b:b2: 44:9a:64:97:7d:b3:8e:80:8d:bc:3f:9e:0a:f4:46:e4:d1:81: 4d:35:02:d8:0b:89:8f:6d:4c:0d:f7:d9:8c:0c:e0:56:2a:f5: 60:08:e3:11:07:6a:fa:a1:e3:8b:d7:f8:e3:8f:e2:a7:4e:4d: 85:ec:db:a9:cf:2b:77:e2:6b:ba:72:ba:4a:7d:b9:c8:a8:8c: ea:dc:12:c0:f7:e8:cb:54:f2:d4:71:83:5a:2f:96:cc:e4:ed: 75:6b:83:24:ad:60:99:d3:a7:76:09:e8:fd:19:80:f2:b3:a3: 6a:b7:2e:85:ef:17:c6:7a:1f:d3:40:c5:56:8b:07:46:23:ca: 4e:95:18:bd:9f:c1:95:e3:c9:d3:df:1c:cb:78:51:08:a5:fa: 08:d2:e0:41:a2:59:65:9d:bf:03:96:9e:80:c4:41:f8:45:61: 9a:a2:6f:18:2e:e2:8e:d9:3c:1b:2f:f9:6d:a5:2b:13:4d:49: b0:81:03:48:d5:37:38:29:de:86:7f:a6:f8:22:bb:3b:6a:a2: 5c:4e:9d:71:ff:49:25:ab:8c:92:bd:ad:21:db:f6:16:bb:6a: fc:9d:1c:3b:40:a7:69:40:fd:9d:e2:ef:70:26:45:e6:83:8e: 88:27:e4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP9WMoEuRxn7dKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZmI5NjkxZmUtZTZhOS00MDMxLTkyODctYWYyYjRhOTZkZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscsRuJRYds9MpSLMsEDhDgincaWcZeHLDwy9 6Ud/K6aYbhigHG+2Q8Maml20b8bAMtCmNdeAoTdXQCbUXrJybMjvImXNjAR5BSdL joRCnJFDH6TIJl0TYAUIfIu9LpW+RStr9XL3tXCh/pijjpTFYEK4eSrZD0pfg02F Jubl1enKyo28vhEz3gLNXzMkO5BBTiPkLP/CVn+aUosILx7669VJTtasgxUO/K+m CvqYHPpdHG3jcjGYMYrb/hAg5tIT2nqRmMy0sBaPrwl3SSkg8gLYJpMwfCkVXq7b uQrYl0SVtPJnO0m6bSUQfrH1/kra859CNqagkmb9i4Zg4bUVOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6ashWyoMfMF7/7FGuamMPT8QMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTcwNmFkYjQtZDJiZi0z OGQ4LTkyMmUtY2RiOWU2ZmE2OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3yD2sdmkKNU/7zmhFn7BhbskSaZJd9s46Ajbw/ngr0RuTRgU01AtgL iY9tTA332YwM4FYq9WAI4xEHavqh44vX+OOP4qdOTYXs26nPK3fia7pyukp9ucio jOrcEsD36MtU8tRxg1ovlszk7XVrgyStYJnTp3YJ6P0ZgPKzo2q3LoXvF8Z6H9NA xVaLB0Yjyk6VGL2fwZXjydPfHMt4UQil+gjS4EGiWWWdvwOWnoDEQfhFYZqibxgu 4o7ZPBsv+W2lKxNNSbCBA0jVNzgp3oZ/pvgiuztqolxOnXH/SSWrjJK9rSHb9ha7 avydHDtAp2lA/Z3i73AmReaDjogn5BY= -----END CERTIFICATE-----Generated at Thu Oct 23 08:15:48 2025 by rpki-client