$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa File: df99cbf9-0e22-3824-bce4-3374a259356a.roa (raw, json) Hash identifier: 0BpWkOxq3MKd6U8fHoRbkKMgyguyCE/unXcQth0Sves= Subject key identifier: 4D:93:01:D5:BC:1F:68:D5:29:0A:38:77:F3:5D:F5:71:7E:62:5D:53 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFE1659ADAA93CDF403E0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 170.85.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fe:16:59:ad:aa:93:cd:f4:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=afabe454-bc1b-4a22-a5be-21aab3dcff2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:48:25:1c:69:5c:fa:34:24:14:60:59:59: ee:cc:07:ef:7b:21:78:2a:94:b0:67:f2:41:75:9e: 4c:ca:ac:88:63:56:6f:e4:68:d3:f7:eb:78:f9:da: ea:a3:d7:cb:2b:b1:f8:7b:a6:fd:72:6e:25:cb:cb: 8a:13:ba:cf:39:98:6b:7f:36:58:c9:a6:b3:56:96: df:c3:c8:f2:33:f7:01:69:20:12:7e:6a:49:15:d1: af:ca:4d:fc:c2:ae:f9:54:93:04:1a:81:b4:64:f8: a1:71:62:14:cc:42:54:c7:0b:75:e4:1c:71:5e:bc: 53:10:00:37:e2:5a:6d:9f:37:44:12:ae:3e:b6:fc: 15:c5:79:98:a4:6c:fc:71:14:8d:aa:a6:65:93:1d: 23:d2:f1:0e:45:dc:a9:a6:b1:f5:32:ae:54:d5:73: 22:f8:f4:1c:e4:46:92:36:1c:13:45:3d:de:9c:c3: e7:d9:d6:f0:e0:25:59:8f:31:73:a5:d0:f0:d8:a8: f2:0d:03:02:ef:72:cb:19:89:7f:dc:09:9c:4b:7b: 33:04:31:4d:72:9f:74:02:a9:dc:f1:44:9f:5a:77: 55:33:20:0b:19:3a:c8:c2:fe:2b:40:7d:48:61:86: ec:c8:ee:6c:be:c4:02:aa:1b:d8:b4:3b:18:d7:f8: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:93:01:D5:BC:1F:68:D5:29:0A:38:77:F3:5D:F5:71:7E:62:5D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:02:3b:31:f8:57:91:5f:a3:a6:db:2a:1f:92:aa:2d:3e:4a: b7:57:7a:fb:db:fa:4a:3b:b7:26:83:55:95:cf:03:fa:b6:3e: 22:64:1e:c7:64:30:fe:0a:e3:67:53:cd:28:b9:6c:48:0f:8f: f8:9b:31:4b:c5:16:2e:a1:62:6b:3d:3e:d3:e7:08:7e:51:6a: c2:35:1e:10:b7:7a:15:da:98:10:89:a8:54:0c:2f:c1:fa:58: 47:4d:b2:d6:8f:00:82:c4:e8:36:00:aa:2c:14:aa:7a:52:05: 29:af:b5:f0:32:eb:04:8a:c7:b0:a6:97:75:a4:78:8a:76:6c: c6:4b:d3:ae:45:9e:2a:a8:d8:92:cc:1a:a4:1a:b3:33:be:44: b8:25:94:d3:e8:77:1a:ef:25:82:88:8c:85:41:27:e7:ae:48: 1f:da:ef:02:26:d3:4e:83:de:62:c6:ce:53:6a:d4:03:b4:32: e7:a3:78:6e:a9:20:c4:00:06:51:2f:3b:9f:b9:52:7d:1f:b9: ee:5f:06:46:5b:f9:84:4a:f4:a9:8c:05:98:ad:25:76:47:0d: 1e:eb:b5:66:f5:65:24:93:65:1a:84:05:d5:d2:0a:7f:2b:cc: 82:33:b9:18:03:88:24:17:49:8d:50:73:5c:5e:e4:a5:df:38: e1:23:21:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPP4WWa2qk830A+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YWZhYmU0NTQtYmMxYi00YTIyLWE1YmUtMjFhYWIzZGNmZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnBIJRxpXPo0JBRgWVnuzAfveyF4KpSwZ/JB dZ5MyqyIY1Zv5GjT9+t4+drqo9fLK7H4e6b9cm4ly8uKE7rPOZhrfzZYyaazVpbf w8jyM/cBaSASfmpJFdGvyk38wq75VJMEGoG0ZPihcWIUzEJUxwt15BxxXrxTEAA3 4lptnzdEEq4+tvwVxXmYpGz8cRSNqqZlkx0j0vEORdypprH1Mq5U1XMi+PQc5EaS NhwTRT3enMPn2dbw4CVZjzFzpdDw2KjyDQMC73LLGYl/3AmcS3szBDFNcp90Aqnc 8USfWndVMyALGTrIwv4rQH1IYYbsyO5svsQCqhvYtDsY1/iE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2TAdW8H2jVKQo4d/Nd9XF+Yl1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGY5OWNiZjktMGUyMi0z ODI0LWJjZTQtMzM3NGEyNTkzNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlUiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcCOzH4V5Ffo6bbKh+Sqi0+SrdXevvb+ko7tyaDVZXPA/q2PiJkHsdk MP4K42dTzSi5bEgPj/ibMUvFFi6hYms9PtPnCH5RasI1HhC3ehXamBCJqFQML8H6 WEdNstaPAILE6DYAqiwUqnpSBSmvtfAy6wSKx7Cml3WkeIp2bMZL065Fniqo2JLM GqQaszO+RLgllNPodxrvJYKIjIVBJ+euSB/a7wIm006D3mLGzlNq1AO0MuejeG6p IMQABlEvO5+5Un0fue5fBkZb+YRK9KmMBZitJXZHDR7rtWb1ZSSTZRqEBdXSCn8r zIIzuRgDiCQXSY1Qc1xe5KXfOOEjIeI= -----END CERTIFICATE-----Generated at Thu Oct 23 08:20:22 2025 by rpki-client