$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e24fdc7-7692-344d-9b42-a16472f0b2ac.roa File: 3e24fdc7-7692-344d-9b42-a16472f0b2ac.roa (raw, json) Hash identifier: l9q3b8XJPoWjHNZUaxnTQhzhz1ZrfyV3OwzZ2BOLeug= Subject key identifier: FB:F3:3A:6E:8D:4B:40:26:25:5A:78:D1:3B:2A:14:CF:DD:7C:A2:31 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFB1CB86DA601C5D0D600 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e24fdc7-7692-344d-9b42-a16472f0b2ac.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 165.225.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fb:1c:b8:6d:a6:01:c5:d0:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3a602c20-391d-4237-868e-a8efbe4f7d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:84:11:5d:f6:65:96:31:ba:e5:dc:89:e4: a2:2a:9d:5d:82:b7:41:7b:2e:72:d9:98:0a:35:9f: f8:93:9d:f8:99:20:a9:14:e2:b3:e2:db:74:6c:ce: 64:39:73:88:58:7b:9d:ca:7d:46:7e:35:9c:a3:0f: 5c:94:a7:90:61:c2:9c:23:00:45:4b:04:52:3b:50: 10:e2:09:32:d2:65:76:f4:9b:68:00:5f:d8:d0:46: f6:51:84:5d:32:4b:61:16:36:75:75:7c:b1:2f:49: 86:6d:eb:16:69:c4:53:b8:a0:af:62:fc:c5:36:6a: 89:0d:49:39:4f:02:c4:6f:a7:34:70:fb:eb:41:c6: e2:59:a3:ff:71:36:a1:8d:d1:64:8d:6f:91:a5:4f: 70:dd:36:b1:f5:cb:c5:73:4f:3e:7e:d2:a0:57:24: df:6b:01:de:f8:30:7a:82:db:e1:4d:f0:11:94:20: 16:4b:0f:a1:5d:47:9e:1a:5b:4d:92:d8:5c:93:ec: b9:66:92:45:0b:0e:11:dc:75:ba:d7:3d:45:8a:3d: af:80:24:8f:cf:e0:d0:67:05:df:5c:9c:13:38:86: cf:d1:6c:e8:fb:f0:6c:92:b9:23:fe:35:aa:03:bb: 67:62:be:54:61:33:09:41:2a:8d:0b:9d:7f:c0:72: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F3:3A:6E:8D:4B:40:26:25:5A:78:D1:3B:2A:14:CF:DD:7C:A2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e24fdc7-7692-344d-9b42-a16472f0b2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ef:6d:26:19:0c:9c:31:67:4c:44:72:ca:3b:da:71:98:de: fe:ef:99:ec:cb:a9:d7:e2:3c:c5:f4:b4:08:06:4b:b0:1e:9e: 57:45:31:4b:30:a2:bc:b1:01:c7:e5:8d:68:45:0b:9d:e7:64: c9:eb:7d:d0:81:d8:f8:23:7f:ac:a6:93:0c:98:cb:36:92:06: d7:a0:20:10:8f:88:7e:ce:9e:0c:fc:54:4b:9f:77:22:26:ff: 72:f0:4a:c2:08:f4:e2:e8:6e:c7:28:be:ab:bb:26:46:f7:4e: e2:54:0f:aa:09:be:04:b9:40:9d:af:1e:49:45:0a:b3:28:24: 35:11:68:05:67:27:4e:bf:92:79:7d:c3:ed:cd:cb:62:ef:ff: 18:98:66:fa:e9:d5:cb:58:1b:f5:bf:b1:2c:21:4d:89:52:ad: 0e:8a:92:95:8c:9b:2b:b9:04:25:7d:04:e6:6c:d9:9c:44:75: 6a:f5:b1:ae:61:d6:cd:57:03:77:65:39:73:ee:d6:21:7f:a2: ce:1d:45:c8:07:87:98:e2:3b:b8:ec:c8:0e:43:6f:15:a6:d0: 1e:23:78:69:de:87:28:b4:91:ed:8c:49:4f:e5:49:67:1d:91: 4a:e7:44:89:76:2f:92:bf:41:d0:0c:66:95:cb:47:98:a9:8c: ef:3f:8c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPscuG2mAcXQ1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2E2MDJjMjAtMzkxZC00MjM3LTg2OGUtYThlZmJlNGY3ZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZiEEV32ZZYxuuXcieSiKp1dgrdBey5y2ZgK NZ/4k534mSCpFOKz4tt0bM5kOXOIWHudyn1GfjWcow9clKeQYcKcIwBFSwRSO1AQ 4gky0mV29JtoAF/Y0Eb2UYRdMkthFjZ1dXyxL0mGbesWacRTuKCvYvzFNmqJDUk5 TwLEb6c0cPvrQcbiWaP/cTahjdFkjW+RpU9w3Tax9cvFc08+ftKgVyTfawHe+DB6 gtvhTfARlCAWSw+hXUeeGltNkthck+y5ZpJFCw4R3HW61z1Fij2vgCSPz+DQZwXf XJwTOIbP0Wzo+/Bskrkj/jWqA7tnYr5UYTMJQSqNC51/wHLTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvzOm6NS0AmJVp40TsqFM/dfKIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2UyNGZkYzctNzY5Mi0z NDRkLTliNDItYTE2NDcyZjBiMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3vbSYZDJwxZ0xEcso72nGY3v7vmezLqdfiPMX0tAgGS7AenldFMUsw oryxAcfljWhFC53nZMnrfdCB2Pgjf6ymkwyYyzaSBtegIBCPiH7Ongz8VEufdyIm /3LwSsII9OLobscovqu7Jkb3TuJUD6oJvgS5QJ2vHklFCrMoJDURaAVnJ06/knl9 w+3Ny2Lv/xiYZvrp1ctYG/W/sSwhTYlSrQ6KkpWMmyu5BCV9BOZs2ZxEdWr1sa5h 1s1XA3dlOXPu1iF/os4dRcgHh5jiO7jsyA5DbxWm0B4jeGnehyi0ke2MSU/lSWcd kUrnRIl2L5K/QdAMZpXLR5ipjO8/jII= -----END CERTIFICATE-----Generated at Thu Oct 23 08:25:39 2025 by rpki-client