$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa File: 03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa (raw, json) Hash identifier: hdavIh9xPO8kEMS9NOTngMgVy4CF1GQnxA065LxHfhc= Subject key identifier: A8:CB:0E:1E:16:1F:99:95:E8:05:38:E3:08:22:0A:8D:C3:4E:A8:F5 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF9AA73BE53ECBBF9F980 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 165.225.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f9:aa:73:be:53:ec:bb:f9:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=e6d48c87-9b3d-49c0-a8ff-cb7bdb15a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:6c:38:4e:0d:50:12:e4:ad:97:99:b6:fc: 96:90:97:53:f5:19:37:ef:bd:73:4f:be:d4:64:20: 88:2d:2d:3a:25:50:f3:d2:6b:1b:a4:da:03:f1:44: 42:51:e3:05:9d:68:65:f8:45:62:3a:ce:b6:de:65: 7e:99:6d:1b:34:95:47:b3:ab:a2:6b:ed:45:4a:90: 09:19:0b:82:c4:c7:8e:f7:b1:14:b5:5e:e3:86:86: 96:62:2a:13:3b:19:03:87:67:0b:fa:2e:51:39:8e: 2f:87:fd:8e:29:1f:90:52:09:a2:cf:2b:82:42:e2: 52:49:2b:9f:ee:2f:ff:9b:9b:4a:39:01:f8:68:31: 94:c3:39:27:eb:2e:0e:af:5d:3b:20:c0:d9:6b:ae: 6f:a2:4e:b8:f6:6c:6a:26:27:80:86:4b:d1:9c:4c: 36:9e:37:4a:bb:30:45:6e:80:bc:8b:71:88:95:3b: ad:ab:7c:0c:e6:73:65:ee:39:6e:03:f0:24:33:02: 6a:01:5c:2a:e6:6c:6d:93:6e:4e:f3:9f:1f:39:ac: ed:66:e6:91:a0:f4:00:5b:29:fd:f5:fb:13:43:5c: 3b:21:0f:9e:4d:19:e8:71:41:48:f5:21:15:91:dc: 89:53:c5:ac:0d:1c:85:23:c2:e4:67:8a:f6:3d:5b: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:0E:1E:16:1F:99:95:E8:05:38:E3:08:22:0A:8D:C3:4E:A8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:13:b1:12:5d:ad:cb:be:e3:3b:77:8d:1f:e8:f9:14:dd:64: 65:d0:4a:c0:0d:96:c0:1b:6a:d5:dd:4b:73:f1:7c:cd:2e:0f: b0:a4:9b:01:d8:91:5a:78:ef:75:58:f5:93:57:bc:ad:88:a9: f3:96:5a:23:89:11:01:8d:f1:ae:05:6c:fa:f3:b7:af:1e:48: 9e:8f:4f:fb:39:28:57:3a:68:f0:fa:06:57:c3:dd:32:24:fa: 40:7b:5e:96:ef:20:25:10:58:a6:d4:a3:55:0d:bc:a8:42:b5: 73:6c:85:0d:12:90:a9:0f:6e:df:97:1b:14:77:d2:e8:61:99: 41:a6:d9:d9:23:1b:e2:7a:d6:d0:4e:e9:14:00:6d:c8:83:0e: 53:bf:c1:01:d7:c8:e0:11:9a:36:30:10:af:ce:f8:51:e6:b7: cf:9c:44:8e:ba:ce:ae:fb:f2:ed:f2:c8:a2:94:17:b9:cf:b9: d0:32:fa:43:de:e7:88:bc:e1:14:d5:30:0a:a4:f5:96:64:a5: dc:28:91:f3:2a:84:b0:72:36:c7:e8:10:55:6e:47:3e:fd:c0: 49:05:cd:68:2b:97:71:77:71:f1:4e:ca:59:a6:16:52:e6:32: ae:35:8f:ca:e3:a0:02:3a:4c:ac:4d:d6:86:34:d7:4e:0a:bd: 5b:7d:d6:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPmqc75T7Lv5+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZTZkNDhjODctOWIzZC00OWMwLWE4ZmYtY2I3YmRiMTVhNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvVsOE4NUBLkrZeZtvyWkJdT9Rk3771zT77U ZCCILS06JVDz0msbpNoD8URCUeMFnWhl+EViOs623mV+mW0bNJVHs6uia+1FSpAJ GQuCxMeO97EUtV7jhoaWYioTOxkDh2cL+i5ROY4vh/2OKR+QUgmizyuCQuJSSSuf 7i//m5tKOQH4aDGUwzkn6y4Or107IMDZa65vok649mxqJieAhkvRnEw2njdKuzBF boC8i3GIlTutq3wM5nNl7jluA/AkMwJqAVwq5mxtk25O858fOaztZuaRoPQAWyn9 9fsTQ1w7IQ+eTRnocUFI9SEVkdyJU8WsDRyFI8LkZ4r2PVvMJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjLDh4WH5mV6AU44wgiCo3DTqj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDNlZjEzMjgtNDZlMy0z MWIwLTlkMjYtNmIwY2RhYTcyNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0TsRJdrcu+4zt3jR/o+RTdZGXQSsANlsAbatXdS3PxfM0uD7CkmwHY kVp473VY9ZNXvK2IqfOWWiOJEQGN8a4FbPrzt68eSJ6PT/s5KFc6aPD6BlfD3TIk +kB7XpbvICUQWKbUo1UNvKhCtXNshQ0SkKkPbt+XGxR30uhhmUGm2dkjG+J61tBO 6RQAbciDDlO/wQHXyOARmjYwEK/O+FHmt8+cRI66zq778u3yyKKUF7nPudAy+kPe 54i84RTVMAqk9ZZkpdwokfMqhLByNsfoEFVuRz79wEkFzWgrl3F3cfFOylmmFlLm Mq41j8rjoAI6TKxN1oY0104KvVt91vs= -----END CERTIFICATE-----Generated at Thu Oct 23 08:19:05 2025 by rpki-client