$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa File: 19061c41-5891-3f97-9d63-54bcf39601e6.roa (raw, json) Hash identifier: xK651V9OnpuGJnUtwEQP25Ndz6r71WCsZ+aJ8l9/7OY= Subject key identifier: 57:4F:68:5F:51:7F:88:E4:4A:F3:36:7B:89:D8:EC:38:3D:E3:65:8E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B6BC77551CF823BF556DDEF40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 8070 IP address blocks: 170.85.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:75:51:cf:82:3b:f5:56:dd:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=be99327f-f5d3-4173-9b16-aa43f710a06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:2f:47:f0:d2:97:6e:01:0d:aa:ac:cb:22: a4:92:e0:e8:9a:73:14:a2:27:4f:27:ea:c8:c1:b2: d4:6c:9a:6a:e4:4e:13:fe:a0:fb:b2:20:10:d0:1e: 2f:94:1b:fd:d9:a9:47:4e:e5:cf:cb:d8:65:fb:09: a5:38:0d:94:78:a0:c9:7f:02:cd:59:d3:0e:dc:05: e8:7a:c7:b2:18:e7:4f:81:40:35:b5:50:21:c9:d9: 7d:1f:19:29:06:b2:45:b0:bf:91:28:da:a3:4c:3a: f5:0b:41:8a:a8:3e:41:12:39:dc:68:e1:81:a2:5f: ba:19:71:79:28:60:e0:94:c2:6d:c3:1a:06:da:ea: 73:e6:06:f5:3d:bf:a5:89:68:ae:8b:fc:c9:50:5a: 3b:ee:ad:b0:81:46:27:41:34:86:8a:04:8a:33:ec: e7:4e:8e:64:76:33:5e:de:7e:d8:9a:42:0f:24:e1: 0d:71:ee:4d:9c:2a:e3:b1:75:f1:48:4e:d6:48:c0: 74:b3:4e:04:30:a9:67:0e:02:ae:02:2d:63:ff:76: 6a:5e:69:d1:64:d5:1e:82:38:99:f3:09:42:03:45: e2:f4:de:00:c4:e4:13:24:47:3c:05:e8:ab:da:31: 66:b3:c6:a4:27:ea:51:70:b4:49:69:48:9d:83:2e: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4F:68:5F:51:7F:88:E4:4A:F3:36:7B:89:D8:EC:38:3D:E3:65:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:e7:86:24:2c:51:54:a7:be:00:33:b0:57:ed:e1:3a:0c:61: e1:c1:3e:93:7e:5d:b3:7f:f3:aa:d4:12:31:d6:3f:76:91:a8: 5c:8d:2c:38:07:46:d2:93:bb:99:b4:fd:cf:eb:2a:bc:84:9c: eb:c6:53:d8:aa:0d:17:be:de:bb:06:d2:43:69:05:61:ed:b6: 6b:83:cd:7f:a7:08:99:75:f2:94:88:b9:65:f3:86:2f:23:47: 07:00:54:07:f0:da:ae:4e:9b:48:a5:fd:52:05:a6:4c:83:79: f9:9c:53:8a:56:85:bc:7d:e5:d5:04:05:fb:ba:2d:5a:51:bd: b7:7e:41:4a:26:34:b0:92:77:78:f9:ea:c1:a2:53:38:0a:78: 1d:27:a5:e2:32:9f:fe:19:17:54:22:56:a9:7b:25:f4:37:d4: 4e:5b:cb:9b:ac:b4:f1:59:db:85:87:0e:b3:6a:eb:9a:55:99: 28:2d:1d:3c:1f:f2:c2:37:94:02:1b:02:ab:a8:23:e6:14:c8: f5:51:ee:14:e3:20:af:16:09:50:a5:e1:50:20:ae:b9:2d:d7: 8f:53:18:a7:64:ca:e9:7a:1c:84:b6:d4:56:c2:37:6d:48:48: 1e:cf:7c:da:e5:a8:29:43:85:48:29:97:10:18:04:81:cb:3c: 68:f0:f7:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3VRz4I79Vbd70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YmU5OTMyN2YtZjVkMy00MTczLTliMTYtYWE0M2Y3MTBhMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgEvR/DSl24BDaqsyyKkkuDomnMUoidPJ+rI wbLUbJpq5E4T/qD7siAQ0B4vlBv92alHTuXPy9hl+wmlOA2UeKDJfwLNWdMO3AXo eseyGOdPgUA1tVAhydl9HxkpBrJFsL+RKNqjTDr1C0GKqD5BEjncaOGBol+6GXF5 KGDglMJtwxoG2upz5gb1Pb+liWiui/zJUFo77q2wgUYnQTSGigSKM+znTo5kdjNe 3n7YmkIPJOENce5NnCrjsXXxSE7WSMB0s04EMKlnDgKuAi1j/3ZqXmnRZNUegjiZ 8wlCA0Xi9N4AxOQTJEc8Beir2jFms8akJ+pRcLRJaUidgy4U6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdPaF9Rf4jkSvM2e4nY7Dg942WOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTkwNjFjNDEtNTg5MS0z Zjk3LTlkNjMtNTRiY2YzOTYwMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3nhiQsUVSnvgAzsFft4ToMYeHBPpN+XbN/86rUEjHWP3aRqFyNLDgH RtKTu5m0/c/rKryEnOvGU9iqDRe+3rsG0kNpBWHttmuDzX+nCJl18pSIuWXzhi8j RwcAVAfw2q5Om0il/VIFpkyDefmcU4pWhbx95dUEBfu6LVpRvbd+QUomNLCSd3j5 6sGiUzgKeB0npeIyn/4ZF1QiVql7JfQ31E5by5ustPFZ24WHDrNq65pVmSgtHTwf 8sI3lAIbAquoI+YUyPVR7hTjIK8WCVCl4VAgrrkt149TGKdkyul6HIS21FbCN21I SB7PfNrlqClDhUgplxAYBIHLPGjw94M= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:36 2025 by rpki-client