$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/23aa1bd6-3d42-3465-b016-ac7eb418e1ac.roa File: 23aa1bd6-3d42-3465-b016-ac7eb418e1ac.roa (raw, json) Hash identifier: tyiCTpW3pdg5IItlUGGk62V/7tWHnqddLL47ZwLUm+I= Subject key identifier: 91:B7:DF:D2:14:87:50:05:48:01:C7:8C:F6:14:BF:61:3D:67:0D:FF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF663D8DDC423FC54A680 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/23aa1bd6-3d42-3465-b016-ac7eb418e1ac.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 165.225.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f6:63:d8:dd:c4:23:fc:54:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3ed8b4c9-bf6a-49c0-8fcb-945d84f437b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9a:30:f6:3d:7c:79:0f:90:84:91:00:c0:fb: 58:f8:07:25:dc:de:b8:6f:6d:34:1c:fd:b3:9d:62: b7:57:8d:ae:87:45:c8:c4:7e:4b:ab:3e:22:3a:0b: ba:04:2b:ea:3e:60:f4:15:1f:88:b5:63:94:65:58: 86:6a:65:d4:7b:00:33:cf:24:08:20:a2:96:e7:3d: b9:0c:7d:19:33:58:50:4b:1a:a5:45:9b:9a:cc:b0: b1:b2:74:cf:78:1d:81:1d:98:74:46:fd:8c:78:f7: e7:72:41:30:c6:25:da:6d:67:5e:5a:8d:e4:31:f3: 1c:b6:ae:39:f1:ad:0f:d0:c7:2e:ca:d9:3b:59:c0: 87:fb:68:78:7f:3c:e1:39:e4:18:af:32:6a:f1:20: 6c:79:2d:9e:6a:dc:88:46:84:4f:d9:2e:7e:65:b9: 0a:2b:b5:c1:e5:32:5e:97:66:02:30:41:d6:86:e6: 79:07:46:df:d5:24:39:7f:9b:4d:ee:36:96:39:de: 17:32:24:57:7b:c2:dd:41:b8:41:3e:58:8f:c0:1f: e2:ff:4f:8a:17:e6:2f:4d:cd:f0:8a:1f:12:ee:35: 00:10:a3:7e:87:92:cc:04:8d:73:52:b6:6f:53:c7: 09:92:cc:a5:cd:41:9f:98:a2:63:9c:7c:8c:ab:1d: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:DF:D2:14:87:50:05:48:01:C7:8C:F6:14:BF:61:3D:67:0D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/23aa1bd6-3d42-3465-b016-ac7eb418e1ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:3a:51:3b:3b:4f:bf:4c:40:93:a6:a2:30:2f:98:7b:50:bf: ce:c3:b1:c0:60:87:e1:c7:89:35:c4:bf:7a:6f:af:a3:b5:5a: 19:d9:7f:2e:2e:cb:e9:27:83:9f:0e:c8:79:c9:2a:10:c3:e9: 92:eb:e8:68:70:42:02:ff:58:75:84:3c:ed:3e:ce:29:b7:30: 7f:f9:41:2a:9d:07:9b:41:5f:4b:f9:85:49:65:7d:81:4b:06: 7b:7a:d6:0b:92:7a:66:22:a8:9e:49:66:cf:f1:fd:94:72:94: 61:47:d1:2d:8c:74:65:be:50:5b:5d:f7:51:38:0a:59:d0:e1: 56:fd:5e:b7:99:4e:4c:59:b1:dc:d4:ac:06:49:48:f1:30:03: 94:ef:fa:1a:d7:b9:dd:d4:5a:6c:23:60:62:69:61:c0:ce:11: 69:f7:28:c3:35:ad:a3:7d:74:84:20:cb:32:dc:de:36:81:f6: 99:76:93:ef:8d:54:fb:3c:c8:5e:3e:1a:3b:99:c2:ff:7b:6c: 57:c1:21:42:90:21:2e:a0:7e:cd:8d:ca:49:31:b2:44:9f:92: 28:10:11:ed:ab:bc:f2:52:43:de:c4:46:ed:14:97:30:02:37: cc:49:04:d3:ad:79:e4:eb:8b:11:d3:c2:ec:81:f5:c2:7c:39: af:1f:b8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPZj2N3EI/xUpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2VkOGI0YzktYmY2YS00OWMwLThmY2ItOTQ1ZDg0ZjQzN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5ow9j18eQ+QhJEAwPtY+Acl3N64b200HP2z nWK3V42uh0XIxH5Lqz4iOgu6BCvqPmD0FR+ItWOUZViGamXUewAzzyQIIKKW5z25 DH0ZM1hQSxqlRZuazLCxsnTPeB2BHZh0Rv2MePfnckEwxiXabWdeWo3kMfMctq45 8a0P0Mcuytk7WcCH+2h4fzzhOeQYrzJq8SBseS2eatyIRoRP2S5+ZbkKK7XB5TJe l2YCMEHWhuZ5B0bf1SQ5f5tN7jaWOd4XMiRXe8LdQbhBPliPwB/i/0+KF+YvTc3w ih8S7jUAEKN+h5LMBI1zUrZvU8cJksylzUGfmKJjnHyMqx3TbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG339IUh1AFSAHHjPYUv2E9Zw3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjNhYTFiZDYtM2Q0Mi0z NDY1LWIwMTYtYWM3ZWI0MThlMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ6UTs7T79MQJOmojAvmHtQv87DscBgh+HHiTXEv3pvr6O1WhnZfy4u y+kng58OyHnJKhDD6ZLr6GhwQgL/WHWEPO0+zim3MH/5QSqdB5tBX0v5hUllfYFL Bnt61guSemYiqJ5JZs/x/ZRylGFH0S2MdGW+UFtd91E4ClnQ4Vb9XreZTkxZsdzU rAZJSPEwA5Tv+hrXud3UWmwjYGJpYcDOEWn3KMM1raN9dIQgyzLc3jaB9pl2k++N VPs8yF4+GjuZwv97bFfBIUKQIS6gfs2NykkxskSfkigQEe2rvPJSQ97ERu0UlzAC N8xJBNOteeTrixHTwuyB9cJ8Oa8fuFA= -----END CERTIFICATE-----Generated at Thu Oct 23 08:20:19 2025 by rpki-client