$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb2ceb2e-db06-34e1-9118-74cb4128e4a0.roa File: cb2ceb2e-db06-34e1-9118-74cb4128e4a0.roa (raw, json) Hash identifier: distreHhqhHXije/XkfQ7iVeCCJaGl+He1ghKNjMmWQ= Subject key identifier: 4A:C8:6F:5E:0E:C7:44:8F:2D:4D:09:4B:DB:58:FA:AE:2B:E7:3A:14 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFED38F05F3F90B782940 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb2ceb2e-db06-34e1-9118-74cb4128e4a0.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 170.85.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fe:d3:8f:05:f3:f9:0b:78:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=0b35015a-2d7d-4013-9657-c72e3f44d9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:1d:8e:96:56:24:18:b5:cb:fd:73:01:1d: 90:39:de:8f:b3:f2:c6:13:96:f4:b7:53:97:34:c8: eb:71:3f:39:95:a1:62:65:7b:12:49:90:81:e2:95: 49:da:69:89:32:fe:a9:89:e4:78:0d:13:bf:da:79: 8d:c3:c6:01:c6:9e:50:2d:19:a9:04:2f:fa:9e:e1: f2:a7:17:f3:72:07:b6:4a:c0:00:92:93:e6:7a:02: ff:a6:82:65:11:51:87:29:db:25:22:89:89:fd:b9: 5a:27:9b:1e:30:f6:d7:50:b4:fa:76:0e:f5:88:f3: 92:e9:66:65:3b:ae:a4:c9:7f:0a:aa:5e:97:f0:7b: ea:40:55:eb:67:7a:27:f2:d5:e0:e3:cf:19:c8:5d: 3b:89:f5:e7:84:71:f1:4a:1a:90:4d:f4:fe:e4:4e: 81:fb:a0:91:45:01:bb:a6:a9:f6:13:09:e7:bc:d3: 32:f6:cf:e0:0f:1e:0c:99:c5:36:32:e9:fa:91:c3: 12:0a:5f:f2:ce:8e:b4:78:be:7f:e8:77:ef:da:e0: 70:d9:9d:2d:b1:2c:77:37:79:95:cc:26:c7:4c:86: b9:ce:6f:aa:93:e4:28:2d:b2:b4:f0:b9:76:52:c3: ac:28:ae:dc:b9:e7:fd:0d:38:8f:6d:b2:ee:1b:46: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:6F:5E:0E:C7:44:8F:2D:4D:09:4B:DB:58:FA:AE:2B:E7:3A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cb2ceb2e-db06-34e1-9118-74cb4128e4a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:51:8a:14:0b:39:6f:07:32:de:2a:e2:29:ba:59:21:ed:43: ab:c4:ac:5e:38:c8:01:fe:48:7b:5e:96:88:14:00:29:ba:ea: 48:e4:39:c6:90:19:dc:3b:4a:97:af:48:4d:8e:a4:31:96:38: 38:1f:12:aa:ff:f0:17:d9:dd:9b:19:80:b6:ea:d3:fb:33:dc: 3f:fd:95:22:2d:97:14:50:5c:a5:d8:09:0f:05:32:83:ea:63: 33:d6:ab:93:66:57:a0:c3:43:eb:84:da:25:0d:18:54:d4:d2: 58:59:35:25:b9:84:c6:e6:ce:50:82:42:a6:7e:09:1a:60:78: 3a:f2:ae:e9:6c:99:15:97:d9:2b:4d:2c:a7:57:98:85:57:93: ad:b6:1c:61:4e:a9:6c:51:66:ee:c3:d1:ce:d1:f5:52:e8:10: 8f:ef:29:66:1b:b2:c6:be:f5:ce:99:00:06:d0:cb:f5:88:99: bd:6e:a2:48:b6:fa:90:bb:1f:79:2b:41:99:f8:a9:2d:79:4c: 5e:dc:a5:33:2d:74:fa:95:28:4a:f5:b6:74:a1:21:e7:36:9b: 45:2d:bc:69:5f:bb:f4:4a:7c:dc:dc:f6:29:0e:12:af:cf:38: 3a:f4:6b:13:43:fc:2f:63:12:0d:04:78:5f:55:b9:7c:a0:d4: 65:d2:ab:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP7TjwXz+Qt4KUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MGIzNTAxNWEtMmQ3ZC00MDEzLTk2NTctYzcyZTNmNDRkOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmswdjpZWJBi1y/1zAR2QOd6Ps/LGE5b0t1OX NMjrcT85laFiZXsSSZCB4pVJ2mmJMv6pieR4DRO/2nmNw8YBxp5QLRmpBC/6nuHy pxfzcge2SsAAkpPmegL/poJlEVGHKdslIomJ/blaJ5seMPbXULT6dg71iPOS6WZl O66kyX8Kql6X8HvqQFXrZ3on8tXg488ZyF07ifXnhHHxShqQTfT+5E6B+6CRRQG7 pqn2EwnnvNMy9s/gDx4MmcU2Mun6kcMSCl/yzo60eL5/6Hfv2uBw2Z0tsSx3N3mV zCbHTIa5zm+qk+QoLbK08Ll2UsOsKK7cuef9DTiPbbLuG0aNGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErIb14Ox0SPLU0JS9tY+q4r5zoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2IyY2ViMmUtZGIwNi0z NGUxLTkxMTgtNzRjYjQxMjhlNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtRihQLOW8HMt4q4im6WSHtQ6vErF44yAH+SHtelogUACm66kjkOcaQ Gdw7SpevSE2OpDGWODgfEqr/8BfZ3ZsZgLbq0/sz3D/9lSItlxRQXKXYCQ8FMoPq YzPWq5NmV6DDQ+uE2iUNGFTU0lhZNSW5hMbmzlCCQqZ+CRpgeDryrulsmRWX2StN LKdXmIVXk622HGFOqWxRZu7D0c7R9VLoEI/vKWYbssa+9c6ZAAbQy/WImb1uoki2 +pC7H3krQZn4qS15TF7cpTMtdPqVKEr1tnShIec2m0UtvGlfu/RKfNzc9ikOEq/P ODr0axND/C9jEg0EeF9VuXyg1GXSq2c= -----END CERTIFICATE-----Generated at Thu Oct 23 08:14:48 2025 by rpki-client