$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa File: c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa (raw, json) Hash identifier: pM/Vw3ClSYdEPy7WEMCVNzoV2KAAByu2mr5242j0uyI= Subject key identifier: 2B:47:39:0F:71:36:6B:22:1F:9E:DD:14:94:C9:57:3B:9E:55:F7:D4 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFF35ACA9DA80EA69BD40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 170.85.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ff:35:ac:a9:da:80:ea:69:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=c54a9b75-ddbb-4d62-b30e-8d6afe6b9e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:a9:44:e6:16:0f:f5:0f:fa:45:73:c2:c7: fb:78:73:39:57:42:01:e9:bc:b3:c9:b1:41:e5:4b: e6:91:3a:5a:2c:07:73:d8:34:a9:3e:e2:30:d9:df: 0c:a6:53:da:b8:11:bf:e8:e7:08:a0:e6:9c:2c:bb: 2a:6c:71:9b:ef:2f:68:16:7e:d1:1d:de:91:4f:22: 48:66:1d:21:26:7f:19:ea:34:b4:24:41:a2:ca:8b: 24:01:83:36:6a:c1:8c:98:f6:44:08:a6:7b:cd:8d: 9e:a5:a6:ab:46:48:56:74:7f:3a:0e:5d:19:bf:51: 16:12:1a:99:cf:14:94:62:8d:d5:18:61:98:c7:b9: 87:0d:54:08:05:f5:77:19:34:41:7e:ef:a4:f3:3b: ec:ec:a4:e8:2f:23:82:d4:fc:de:c2:25:f9:ea:af: 4b:51:e1:32:bd:90:50:35:e9:21:62:79:6e:72:12: 72:f2:bd:2d:b2:21:8e:8e:0f:fb:97:c5:ec:64:0b: 43:e1:96:d3:eb:60:0f:d7:93:3e:86:9d:46:4d:0c: 4b:48:0a:d3:7f:51:ed:ae:b7:54:22:c6:ac:cf:ff: 7e:49:11:33:3a:54:d9:94:5c:95:0a:d9:ef:2a:d4: 5b:3b:17:cd:d1:0e:4e:5c:0b:28:76:a0:f5:1f:ca: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:39:0F:71:36:6B:22:1F:9E:DD:14:94:C9:57:3B:9E:55:F7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c0f8587e-3f69-3cd9-ac4b-7a57fb063aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8d:e5:50:67:22:45:6d:11:6e:e5:db:81:ed:5b:9c:10:77: fa:63:1b:6f:39:cc:0d:38:14:8c:64:51:d4:2c:91:11:0b:60: 26:19:d7:05:dd:34:73:41:55:e4:b9:7f:16:11:40:c2:f9:67: 5e:76:f9:ee:e0:3f:9a:9e:9b:9b:a5:52:0c:ab:d8:d0:43:24: c3:ae:a4:4f:63:92:a1:d0:c7:3f:10:ce:9c:94:1b:a6:8f:6a: 1b:9a:47:c9:a0:7d:9a:d0:e9:d9:c7:d4:b7:90:8d:a1:3e:21: 49:d5:1f:9e:36:96:a7:a5:f4:b4:74:30:e6:7c:0c:23:6c:b6: a7:b1:6b:05:e8:a9:9c:2c:ad:e2:46:bc:36:e8:44:93:04:85: b1:bd:1e:88:c7:e1:87:cf:70:19:21:de:29:85:65:58:41:0f: b5:0c:ee:b2:b0:87:e0:42:e6:bc:41:3c:d9:da:6a:4e:ea:8e: cd:e9:7d:65:70:44:7d:83:0d:9d:19:43:2c:a3:a2:e8:77:80: 0c:b8:bf:36:5d:6b:c5:02:8f:3c:dd:0c:e1:e2:0d:25:f5:42: 83:a0:87:ae:0a:4a:92:c5:a4:3e:c2:5d:41:3a:13:90:7e:77: 46:91:77:c7:e0:6b:f0:d2:41:46:20:d4:3a:92:58:e3:14:fa: 58:09:f5:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP81rKnagOppvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YzU0YTliNzUtZGRiYi00ZDYyLWIzMGUtOGQ2YWZlNmI5ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHWpROYWD/UP+kVzwsf7eHM5V0IB6byzybFB 5UvmkTpaLAdz2DSpPuIw2d8MplPauBG/6OcIoOacLLsqbHGb7y9oFn7RHd6RTyJI Zh0hJn8Z6jS0JEGiyoskAYM2asGMmPZECKZ7zY2epaarRkhWdH86Dl0Zv1EWEhqZ zxSUYo3VGGGYx7mHDVQIBfV3GTRBfu+k8zvs7KToLyOC1PzewiX56q9LUeEyvZBQ NekhYnluchJy8r0tsiGOjg/7l8XsZAtD4ZbT62AP15M+hp1GTQxLSArTf1HtrrdU Isasz/9+SREzOlTZlFyVCtnvKtRbOxfN0Q5OXAsodqD1H8pUtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtHOQ9xNmsiH57dFJTJVzueVffUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzBmODU4N2UtM2Y2OS0z Y2Q5LWFjNGItN2E1N2ZiMDYzYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2N5VBnIkVtEW7l24HtW5wQd/pjG285zA04FIxkUdQskRELYCYZ1wXd NHNBVeS5fxYRQML5Z152+e7gP5qem5ulUgyr2NBDJMOupE9jkqHQxz8QzpyUG6aP ahuaR8mgfZrQ6dnH1LeQjaE+IUnVH542lqel9LR0MOZ8DCNstqexawXoqZwsreJG vDboRJMEhbG9HojH4YfPcBkh3imFZVhBD7UM7rKwh+BC5rxBPNnaak7qjs3pfWVw RH2DDZ0ZQyyjouh3gAy4vzZda8UCjzzdDOHiDSX1QoOgh64KSpLFpD7CXUE6E5B+ d0aRd8fga/DSQUYg1DqSWOMU+lgJ9Tk= -----END CERTIFICATE-----Generated at Thu Oct 23 08:17:54 2025 by rpki-client