$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a417653-a1d3-3508-9ebe-c2ca1ae381cf.roa File: 0a417653-a1d3-3508-9ebe-c2ca1ae381cf.roa (raw, json) Hash identifier: FsvkhY3mGhmKF9smf3qtaRKshUMO9dme4yoD9oa2b8I= Subject key identifier: 23:1B:06:93:A1:98:37:CD:20:2C:82:77:D3:B6:7A:7D:A7:31:6D:C1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F49743810745303B5641891C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a417653-a1d3-3508-9ebe-c2ca1ae381cf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22616 IP address blocks: 165.225.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:38:10:74:53:03:b5:64:18:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2a33d06-84c8-4f61-abd4-59248d8891a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:5d:10:80:40:6d:da:3b:2b:1d:9b:3c:93: 1f:e5:47:20:3c:50:59:88:43:30:60:2b:42:c8:e4: ab:78:2c:58:2e:12:39:18:17:a4:22:cb:68:c5:c0: c5:b3:0b:ef:9d:d4:bd:84:0b:88:d4:7f:ef:d0:c7: 09:94:9c:9c:de:74:6e:34:66:e0:79:20:f4:7d:ad: 37:c7:b1:f6:0e:e3:81:1f:57:36:be:46:c9:26:24: 3f:ef:90:4b:0b:4a:f9:96:b4:b2:8b:5f:00:5b:81: af:98:33:67:ac:54:e3:40:5a:09:10:eb:bb:c6:32: a0:a9:04:60:b2:e4:43:81:47:5f:3b:0f:7c:ed:6c: 8a:ca:8a:60:dd:c8:2a:6f:de:60:9f:3b:21:1f:98: f7:bc:86:df:2b:96:44:85:d1:a4:60:39:7a:c7:8d: 08:de:bd:9d:71:26:d3:bc:a2:a1:e2:a7:12:51:b0: 5c:e2:c1:6b:85:90:d0:9f:13:a2:d2:31:8a:50:b1: a2:ed:f2:42:59:91:35:a4:0f:21:bc:64:86:19:a0: ca:42:29:d7:3f:ec:94:0a:1a:2f:1b:84:28:1d:cb: 47:54:67:6b:b2:14:bd:0b:a9:92:b4:b7:fe:d0:15: 94:51:e3:a6:4c:77:f0:18:28:c3:2c:90:66:0f:8f: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1B:06:93:A1:98:37:CD:20:2C:82:77:D3:B6:7A:7D:A7:31:6D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a417653-a1d3-3508-9ebe-c2ca1ae381cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:55:27:3e:85:e2:79:00:f4:86:a4:44:12:80:09:28:fe:49: 4f:13:5f:af:c8:45:60:fa:63:70:05:74:0b:cd:d2:0c:53:47: fd:b6:14:4b:14:95:56:a4:a7:47:13:cd:a1:17:11:b3:f9:36: 5b:d6:0f:8f:6a:3a:ac:07:51:ff:4d:eb:59:71:d8:f3:f5:84: 72:b5:40:dd:3b:12:93:76:76:97:76:49:46:82:c4:8e:f2:a3: 4d:4a:dc:d9:6b:89:b3:2b:23:43:cf:e8:99:7a:3a:ec:12:4f: 4c:d4:07:7e:76:15:3d:9a:8e:94:58:fd:66:6f:64:62:98:ca: 27:aa:dc:7d:e2:30:60:e6:d9:e9:cb:01:2c:70:34:4e:1c:3d: a2:93:ab:11:bc:cb:1f:02:c2:fa:4b:cb:64:e9:da:35:8d:32: 3f:61:43:a4:90:0f:7a:07:90:20:41:c1:c4:23:cc:3c:8a:34: 1a:98:b1:1c:7f:fd:75:b6:97:68:81:04:ee:75:3a:f0:fd:f6: 70:1c:08:f7:fe:bc:c1:46:3b:8e:77:05:2c:bc:7c:44:21:92: 09:22:53:28:ae:db:70:85:28:9d:c1:c2:19:58:3f:50:1e:8a: 27:52:b8:78:de:3c:47:15:37:c2:11:69:70:3d:ba:eb:01:d7: 0e:62:7a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDgQdFMDtWQYkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTJhMzNkMDYtODRjOC00ZjYxLWFiZDQtNTkyNDhkODg5MWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/9dEIBAbdo7Kx2bPJMf5UcgPFBZiEMwYCtC yOSreCxYLhI5GBekIstoxcDFswvvndS9hAuI1H/v0McJlJyc3nRuNGbgeSD0fa03 x7H2DuOBH1c2vkbJJiQ/75BLC0r5lrSyi18AW4GvmDNnrFTjQFoJEOu7xjKgqQRg suRDgUdfOw987WyKyopg3cgqb95gnzshH5j3vIbfK5ZEhdGkYDl6x40I3r2dcSbT vKKh4qcSUbBc4sFrhZDQnxOi0jGKULGi7fJCWZE1pA8hvGSGGaDKQinXP+yUChov G4QoHctHVGdrshS9C6mStLf+0BWUUeOmTHfwGCjDLJBmD4+VwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMbBpOhmDfNICyCd9O2en2nMW3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGE0MTc2NTMtYTFkMy0z NTA4LTllYmUtYzJjYTFhZTM4MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNVJz6F4nkA9IakRBKACSj+SU8TX6/IRWD6Y3AFdAvN0gxTR/22FEsU lVakp0cTzaEXEbP5NlvWD49qOqwHUf9N61lx2PP1hHK1QN07EpN2dpd2SUaCxI7y o01K3NlribMrI0PP6Jl6OuwST0zUB352FT2ajpRY/WZvZGKYyieq3H3iMGDm2enL ASxwNE4cPaKTqxG8yx8CwvpLy2Tp2jWNMj9hQ6SQD3oHkCBBwcQjzDyKNBqYsRx/ /XW2l2iBBO51OvD99nAcCPf+vMFGO453BSy8fEQhkgkiUyiu23CFKJ3BwhlYP1Ae iidSuHjePEcVN8IRaXA9uusB1w5ietg= -----END CERTIFICATE-----Generated at Sat Oct 31 03:32:34 2026 by rpki-client