$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa File: bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa (raw, json) Hash identifier: /YHX+vclu8AFGGcphdhzWX2cJ6tugXqwZUXZGfy757c= Subject key identifier: 13:9C:0C:23:75:63:72:D8:58:58:5D:D1:60:80:B1:D5:2A:E4:0F:54 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2FA0517A9CD863D3CED80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 62044 IP address blocks: 165.225.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:fa:05:17:a9:cd:86:3d:3c:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=7fd0a550-d946-4c0a-901c-056eabaa3881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ea:73:4b:21:b3:b2:f3:81:ee:c9:b7:fa:a1: 90:64:c3:ed:8c:18:6c:8d:b4:f0:74:c8:d9:ef:85: 50:c1:9e:79:35:82:a1:3e:53:ba:6e:83:66:32:fd: 37:b4:fc:23:8c:7c:79:84:0e:5b:b9:a4:19:f0:59: 14:97:90:e4:63:2f:37:cd:7c:77:ae:e3:59:59:dc: 64:fc:4b:1b:e7:14:8d:0b:cb:81:1e:58:dd:38:eb: 00:d3:ef:c2:df:37:3f:4d:0d:99:db:1c:86:9d:e4: 43:d4:84:8d:4b:c9:08:8e:ac:9c:6c:b6:0b:bb:35: 34:26:63:86:d3:74:63:c2:88:3f:c2:a9:80:f3:0f: 48:b1:7e:ec:82:f6:4c:f9:6d:40:5d:e8:08:fb:d3: 04:4a:9e:50:6a:66:16:00:4e:4a:c2:62:9e:96:5c: ad:fa:a1:d9:5c:34:40:6e:32:57:05:d1:d7:26:de: 6d:0b:3e:6f:2e:ae:30:70:3c:3a:fb:bc:da:0a:6e: cf:ca:84:6a:fe:9f:e1:9b:e0:83:44:38:48:18:d6: 4f:77:52:ee:d6:09:8b:8f:d2:df:98:29:6f:7a:30: 83:5e:41:cb:ca:c8:63:d6:d7:7c:24:c4:16:e4:63: d6:ed:75:c9:db:64:c6:8a:b6:7a:b1:64:0f:1d:84: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9C:0C:23:75:63:72:D8:58:58:5D:D1:60:80:B1:D5:2A:E4:0F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b3:ae:dd:7c:d4:ef:c9:38:0b:70:b6:f8:0c:68:6a:24:8c: b6:41:63:f7:a2:59:9c:6c:06:86:a8:ba:02:5e:8c:46:0e:95: 9c:b9:70:6c:d5:cb:e3:6c:23:fe:bc:5a:cd:da:ed:5d:7c:16: 5e:0d:0f:bc:2c:dd:e8:df:fe:5a:c5:2a:27:e1:f4:b9:e1:63: 0a:d1:c8:61:24:a1:ba:0b:b4:f6:e3:df:15:bd:46:29:11:49: 8e:cd:83:45:8f:2b:c7:33:23:1c:ee:3b:1a:f3:20:30:50:c4: 84:69:d1:31:47:8d:27:a6:36:30:e7:a1:5b:67:b1:7a:54:d3: e5:c9:9a:96:d7:bc:6a:35:11:21:ff:90:6f:c3:c1:56:9e:fb: 8e:30:db:f5:6a:29:33:50:29:92:1d:6e:71:9f:3e:db:95:3a: 5e:9e:1d:2e:06:04:22:73:77:ff:2b:38:98:9d:79:7f:51:c2: a9:dd:c9:0c:44:ba:5e:46:b6:da:ba:99:91:7a:02:20:fc:e6: 4c:ee:4d:54:18:93:0c:cd:cb:9f:0b:78:f3:ab:a1:42:3d:57: 5e:15:cc:73:21:78:24:b0:2e:8c:0c:3f:44:ca:01:31:84:e9: 85:da:6f:32:b2:e5:cf:ee:a9:fd:ef:c9:83:d0:24:2e:b4:8b: a4:40:a8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4voFF6nNhj087YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk N2ZkMGE1NTAtZDk0Ni00YzBhLTkwMWMtMDU2ZWFiYWEzODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8upzSyGzsvOB7sm3+qGQZMPtjBhsjbTwdMjZ 74VQwZ55NYKhPlO6boNmMv03tPwjjHx5hA5buaQZ8FkUl5DkYy83zXx3ruNZWdxk /Esb5xSNC8uBHljdOOsA0+/C3zc/TQ2Z2xyGneRD1ISNS8kIjqycbLYLuzU0JmOG 03Rjwog/wqmA8w9IsX7sgvZM+W1AXegI+9MESp5QamYWAE5KwmKellyt+qHZXDRA bjJXBdHXJt5tCz5vLq4wcDw6+7zaCm7PyoRq/p/hm+CDRDhIGNZPd1Lu1gmLj9Lf mClvejCDXkHLyshj1td8JMQW5GPW7XXJ22TGirZ6sWQPHYQdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOcDCN1Y3LYWFhd0WCAsdUq5A9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmI4N2M5ZWMtMWQ5YS0z ZWViLTk4N2MtY2ZiNDA0MTNhMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEizrt181O/JOAtwtvgMaGokjLZBY/eiWZxsBoaougJejEYOlZy5cGzV y+NsI/68Ws3a7V18Fl4ND7ws3ejf/lrFKifh9LnhYwrRyGEkoboLtPbj3xW9RikR SY7Ng0WPK8czIxzuOxrzIDBQxIRp0TFHjSemNjDnoVtnsXpU0+XJmpbXvGo1ESH/ kG/DwVae+44w2/VqKTNQKZIdbnGfPtuVOl6eHS4GBCJzd/8rOJideX9RwqndyQxE ul5Gttq6mZF6AiD85kzuTVQYkwzNy58LePOroUI9V14VzHMheCSwLowMP0TKATGE 6YXabzKy5c/uqf3vyYPQJC60i6RAqD0= -----END CERTIFICATE-----Generated at Fri Oct 30 20:24:54 2026 by rpki-client