$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa File: 85befa1b-cd80-3af9-861d-226b5949597f.roa (raw, json) Hash identifier: 3lu6QH6M9fQlMzV+5eOx4R/ixxGj1g4iQ9ZEZinCtCc= Subject key identifier: 65:03:3F:B2:EA:C8:5D:52:BE:04:22:A6:B8:26:7E:6B:75:C7:54:04 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584B609C95845D04767C54F181E0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 213122 IP address blocks: 170.39.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:95:84:5d:04:76:7c:54:f1:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=9c3cd8f1-6e8f-45d9-9a73-3bd81e77d855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:53:42:49:6c:0e:ed:48:e7:2d:f5:c9:fc: c5:24:6a:25:2b:a7:cd:8e:a1:23:7b:a8:bf:46:e1: 81:5b:a9:8f:c7:f0:e3:c0:71:80:a0:30:2b:a6:19: 78:b7:2f:fc:92:74:a7:7f:b7:54:6e:fb:b4:3d:30: 86:f6:19:ce:85:53:28:bf:8c:ca:93:41:b1:99:97: 49:95:5c:f9:85:37:64:30:b6:38:66:06:c4:73:8e: 51:2c:b6:2a:39:d3:53:0b:0f:cc:b7:ff:7a:2e:8e: ab:31:f9:c6:7a:21:7c:4e:7f:5e:3f:f7:27:98:ac: 9e:9a:7a:20:b3:59:bf:7c:04:ba:8c:bd:3c:cb:af: 86:45:e2:da:b1:05:ae:52:6a:10:78:fb:99:f1:c9: 76:96:2b:25:2d:49:c1:76:0d:5b:98:73:99:12:0a: 7c:ea:08:46:e0:b4:32:da:6d:74:37:1f:b1:d8:bd: 73:df:75:ad:9b:c2:3c:64:34:13:0b:a1:25:f9:44: 4d:b0:ad:20:cc:37:ee:50:f8:77:e9:91:c9:3c:e1: 1f:32:dc:85:6c:b8:81:01:0c:da:5b:84:f3:3b:8c: 1a:e3:cc:43:10:8b:60:0f:b1:4e:2d:03:45:96:87: 1b:a5:f3:a4:c2:57:12:7b:85:cf:26:8c:4e:34:44: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:03:3F:B2:EA:C8:5D:52:BE:04:22:A6:B8:26:7E:6B:75:C7:54:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85befa1b-cd80-3af9-861d-226b5949597f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7f:8c:92:04:05:ff:17:55:4f:d5:e2:3a:1b:d3:28:a4:44: 53:e5:85:e0:bf:b0:20:e2:85:e5:11:84:7c:d7:5c:0d:6e:3e: 1b:12:62:16:a7:98:07:40:25:14:ee:d3:4b:bd:ff:65:ec:02: 70:51:26:71:92:41:f1:26:69:43:51:d3:4d:cf:77:05:90:85: 19:2b:cc:3b:f8:a4:a9:89:d8:29:73:42:44:8b:54:0a:07:f7: 9e:93:f5:c4:66:cd:38:9b:a5:58:64:cb:74:5b:fc:5d:71:68: b6:d0:66:fe:77:03:a8:34:85:bf:09:89:e7:b1:1e:55:d7:ec: 8f:90:71:e0:c1:53:11:cc:7d:c7:fe:88:94:02:09:1f:dd:f1: 3d:b3:11:d1:47:20:64:fa:a6:ee:24:e4:3f:f1:c7:89:5c:4f: 72:d5:e3:86:90:c2:bc:76:9c:83:ef:ad:50:8a:a0:f0:19:01: 3a:5c:7b:25:92:b6:3b:ce:72:d9:05:9b:bc:69:14:17:24:bb: 8e:c0:ef:65:b5:04:83:f7:3a:15:75:e3:fc:4a:24:07:02:8f: 90:75:f1:4b:8b:ad:52:4e:b5:59:8d:56:dd:37:f6:30:65:a9: 3b:00:af:3d:89:2e:d1:4c:0c:3e:1d:71:b1:52:99:59:2e:5e: ec:aa:84:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJWEXQR2fFTxgeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk OWMzY2Q4ZjEtNmU4Zi00NWQ5LTlhNzMtM2JkODFlNzdkODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAortTQklsDu1I5y31yfzFJGolK6fNjqEje6i/ RuGBW6mPx/DjwHGAoDArphl4ty/8knSnf7dUbvu0PTCG9hnOhVMov4zKk0GxmZdJ lVz5hTdkMLY4ZgbEc45RLLYqOdNTCw/Mt/96Lo6rMfnGeiF8Tn9eP/cnmKyemnog s1m/fAS6jL08y6+GReLasQWuUmoQePuZ8cl2lislLUnBdg1bmHOZEgp86ghG4LQy 2m10Nx+x2L1z33Wtm8I8ZDQTC6El+URNsK0gzDfuUPh36ZHJPOEfMtyFbLiBAQza W4TzO4wa48xDEItgD7FOLQNFlocbpfOkwlcSe4XPJoxONEQUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUDP7LqyF1SvgQiprgmfmt1x1QEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODViZWZhMWItY2Q4MC0z YWY5LTg2MWQtMjI2YjU5NDk1OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx/jJIEBf8XVU/V4job0yikRFPlheC/sCDiheURhHzXXA1uPhsSYhan mAdAJRTu00u9/2XsAnBRJnGSQfEmaUNR003PdwWQhRkrzDv4pKmJ2ClzQkSLVAoH 956T9cRmzTibpVhky3Rb/F1xaLbQZv53A6g0hb8JieexHlXX7I+QceDBUxHMfcf+ iJQCCR/d8T2zEdFHIGT6pu4k5D/xx4lcT3LV44aQwrx2nIPvrVCKoPAZATpceyWS tjvOctkFm7xpFBcku47A72W1BIP3OhV14/xKJAcCj5B18UuLrVJOtVmNVt039jBl qTsArz2JLtFMDD4dcbFSmVkuXuyqhKs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:58:45 2025 by rpki-client