$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa File: 35f69044-5811-389f-995a-dbb1f6465b9e.roa (raw, json) Hash identifier: TOoAPWnBOXCXiJjuI7XxW10J5vwTFb+7NgctaMxMgbU= Subject key identifier: 5B:28:12:47:40:61:B7:F1:02:04:86:4A:AB:4A:09:42:BB:E3:15:4F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B6A61FE38D7A9ADF3535CFE80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 22616 IP address blocks: 170.85.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:fe:38:d7:a9:ad:f3:53:5c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=a7c0e0a6-97de-48ff-86ac-4fc824a9be2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:35:03:ac:a2:a8:29:b1:41:81:40:ae:3d: c6:1c:a2:dc:29:4a:34:a3:f1:e6:dd:bc:52:78:97: da:f9:ed:7b:5c:b9:5a:71:a8:54:07:ea:34:0d:b4: 76:ca:23:2a:17:4e:b6:86:13:1a:99:5a:67:b1:39: cf:9e:e1:fd:64:30:d8:e2:f4:a0:d9:68:49:a1:7f: e1:53:70:b6:64:cc:b3:6a:d6:b0:80:4d:cd:c2:27: 5c:e6:69:60:40:83:4f:2c:ce:38:d6:65:e7:3a:dd: 58:9b:c8:a5:b4:ab:ef:da:e1:cb:84:6f:2e:34:cb: cb:63:1d:ee:b2:3d:87:2f:41:c1:c4:66:9e:43:d1: e3:6f:9a:68:38:b8:42:b3:44:be:3a:c2:bd:bc:8f: 6b:dc:78:6a:a8:c1:3e:ec:6f:62:38:79:e2:af:9a: 27:ce:77:c8:d2:31:31:52:47:b6:12:54:d1:ed:ea: d7:af:35:d2:ac:84:65:0e:70:0f:03:f7:37:ce:00: 3f:ef:2f:b6:7f:3d:0d:c0:81:2d:87:b5:10:7c:c3: a3:35:7f:cf:fa:bb:fb:1e:24:9a:3e:3c:26:b4:64: 65:36:03:ec:8a:2f:f9:c4:73:95:0f:81:e8:7d:f3: 37:79:54:9d:0e:ad:a1:3a:6b:52:43:03:c3:65:2b: c4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:12:47:40:61:B7:F1:02:04:86:4A:AB:4A:09:42:BB:E3:15:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:06:d0:1c:12:58:f7:bf:47:b7:63:c0:98:0a:ac:cb:e2:b5: f0:d3:7c:d0:57:8f:10:17:78:ae:e4:37:74:a5:48:a7:5b:9c: aa:f0:26:d9:87:9e:59:d0:38:e4:95:e4:95:3d:6d:47:fa:22: 10:a4:ed:5e:05:18:7e:cd:98:76:cb:32:2c:4a:a8:f0:b0:68: c1:c8:a6:be:ec:6d:7d:2e:5e:e7:3f:13:9d:63:f0:e7:30:44: 83:4d:48:06:d9:ac:b9:b3:bd:64:cb:db:f6:90:fc:0c:22:a4: 55:fc:ed:5c:80:e8:48:91:36:ab:23:a3:77:c1:d1:43:49:e4: 35:0d:52:44:06:be:ec:84:4f:42:d6:c5:c1:f8:92:e1:cc:3d: e1:85:45:96:1b:8b:0f:29:99:66:c7:44:53:ca:47:dd:61:9e: 95:75:be:29:3f:0d:13:75:94:6a:35:05:c9:f8:0c:e6:2c:9b: ab:8b:1a:53:95:86:2c:66:48:31:12:ab:09:15:11:76:5c:24: c7:3a:c8:70:f1:86:09:31:1f:fc:0f:eb:60:65:e9:e6:12:fa: 1c:7f:1a:4b:15:88:d3:2f:15:95:2a:fc:fb:5a:49:1d:a8:18: 6f:4b:22:1e:0e:e7:12:1b:dc:11:98:f6:28:b8:40:58:b5:06: 24:63:41:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYf4416mt81Nc/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YTdjMGUwYTYtOTdkZS00OGZmLTg2YWMtNGZjODI0YTliZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX81A6yiqCmxQYFArj3GHKLcKUo0o/Hm3bxS eJfa+e17XLlacahUB+o0DbR2yiMqF062hhMamVpnsTnPnuH9ZDDY4vSg2WhJoX/h U3C2ZMyzatawgE3Nwidc5mlgQINPLM441mXnOt1Ym8iltKvv2uHLhG8uNMvLYx3u sj2HL0HBxGaeQ9Hjb5poOLhCs0S+OsK9vI9r3HhqqME+7G9iOHnir5onznfI0jEx Uke2ElTR7erXrzXSrIRlDnAPA/c3zgA/7y+2fz0NwIEth7UQfMOjNX/P+rv7HiSa PjwmtGRlNgPsii/5xHOVD4HoffM3eVSdDq2hOmtSQwPDZSvE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsoEkdAYbfxAgSGSqtKCUK74xVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzVmNjkwNDQtNTgxMS0z ODlmLTk5NWEtZGJiMWY2NDY1YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsG0BwSWPe/R7djwJgKrMvitfDTfNBXjxAXeK7kN3SlSKdbnKrwJtmH nlnQOOSV5JU9bUf6IhCk7V4FGH7NmHbLMixKqPCwaMHIpr7sbX0uXuc/E51j8Ocw RINNSAbZrLmzvWTL2/aQ/AwipFX87VyA6EiRNqsjo3fB0UNJ5DUNUkQGvuyET0LW xcH4kuHMPeGFRZYbiw8pmWbHRFPKR91hnpV1vik/DRN1lGo1Bcn4DOYsm6uLGlOV hixmSDESqwkVEXZcJMc6yHDxhgkxH/wP62Bl6eYS+hx/GksViNMvFZUq/PtaSR2o GG9LIh4O5xIb3BGY9ii4QFi1BiRjQVk= -----END CERTIFICATE-----Generated at Mon Oct 20 05:00:06 2025 by rpki-client