$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c32008f2-6219-3745-aaf8-fa83e58156a1.roa File: c32008f2-6219-3745-aaf8-fa83e58156a1.roa (raw, json) Hash identifier: OAfTyuPm1bescDDTO2hUEyCDD/S5LgZUKOko24SVw5I= Subject key identifier: 63:3D:E7:B9:38:CD:87:C6:95:A5:38:FD:12:18:D0:D6:CB:A5:41:77 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF8F3C793E6B805191B80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c32008f2-6219-3745-aaf8-fa83e58156a1.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 165.225.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f8:f3:c7:93:e6:b8:05:19:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=811c7a2c-cb34-4a5f-8210-c40c0d8f458a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:37:9b:10:0e:61:30:9f:08:2f:4a:47:89: b4:bc:c1:7c:74:04:14:5a:54:1b:d8:5b:08:88:e5: 6c:e8:05:d7:42:e2:82:ee:5b:8d:f5:74:b1:4a:8c: 20:08:39:dd:1f:91:d4:a7:aa:e5:4f:57:cf:83:f0: e2:74:7b:40:91:8c:66:71:28:bf:6f:53:f1:17:4c: df:61:7e:18:07:f2:27:08:2f:fb:9f:e5:b1:41:14: d6:99:87:57:71:ac:20:7a:d2:a2:18:e7:51:0d:0e: 4c:bb:28:ec:51:64:a4:ad:95:e2:b4:5f:ad:0e:17: 41:c3:62:e8:68:51:60:a8:af:3e:33:d2:9f:ad:2f: 59:1f:d5:3d:13:ed:63:0b:18:e3:03:6b:15:78:ab: c9:d8:e2:5f:89:e6:5c:02:fd:21:e6:21:17:c3:e7: 64:d5:4b:91:31:3f:4c:4e:a3:cb:06:1e:51:6f:0a: 96:8b:92:7f:a1:e2:1a:35:70:a3:bb:cb:97:25:93: 2c:4c:8a:74:17:b6:b3:b4:25:86:79:5f:ad:6b:52: ab:bd:41:de:e8:71:f1:53:f4:8b:1e:7c:05:ed:8e: 92:27:ab:62:d3:8c:5c:16:48:b6:49:3b:46:b4:f9: 21:96:cd:d9:43:5e:54:28:4e:01:ba:6b:27:be:2e: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3D:E7:B9:38:CD:87:C6:95:A5:38:FD:12:18:D0:D6:CB:A5:41:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c32008f2-6219-3745-aaf8-fa83e58156a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:d0:36:67:4e:bd:9e:d1:cf:e0:92:40:b6:a8:1a:ae:f2:36: 11:da:6a:85:18:7f:bb:81:9d:3c:e4:bd:77:64:ef:c4:9d:65: 12:fe:b5:16:61:95:1d:a8:23:03:6a:db:6b:52:a7:44:51:08: 42:04:da:41:75:f9:bd:18:28:c6:8a:78:43:1d:b1:96:2e:a9: 20:0a:9f:1c:db:39:bb:12:a1:ab:72:98:e6:ea:ff:e0:ed:0b: 7f:fb:a7:f2:42:79:3f:68:38:7b:80:46:7f:a5:f4:57:2e:2c: 8d:58:da:54:c6:fa:33:47:0f:f2:23:c1:4c:15:6c:87:02:31: d1:0e:e8:54:9d:79:30:a1:f0:1d:ac:e1:b9:20:d0:85:7e:2a: ef:09:fa:f8:83:62:9e:64:5a:97:a7:61:8c:1d:8b:fc:8a:1b: f8:12:43:36:1d:62:ce:59:34:87:0c:64:69:6f:78:fc:10:9d: 49:cd:51:ce:2b:9c:ab:c7:d0:24:a5:cc:fb:66:2d:c2:8d:43: 25:6b:a0:6a:db:ec:92:c5:b3:40:9e:6e:ad:a6:25:28:a9:17: 50:b9:e1:36:46:7b:b7:c5:b4:5a:8e:32:ec:68:a8:62:86:42: 14:bb:16:38:81:eb:d4:0c:12:54:22:27:36:c8:72:72:69:10: f1:36:cf:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPjzx5PmuAUZG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ODExYzdhMmMtY2IzNC00YTVmLTgyMTAtYzQwYzBkOGY0NThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshQ3mxAOYTCfCC9KR4m0vMF8dAQUWlQb2FsI iOVs6AXXQuKC7luN9XSxSowgCDndH5HUp6rlT1fPg/DidHtAkYxmcSi/b1PxF0zf YX4YB/InCC/7n+WxQRTWmYdXcawgetKiGOdRDQ5MuyjsUWSkrZXitF+tDhdBw2Lo aFFgqK8+M9KfrS9ZH9U9E+1jCxjjA2sVeKvJ2OJfieZcAv0h5iEXw+dk1UuRMT9M TqPLBh5RbwqWi5J/oeIaNXCju8uXJZMsTIp0F7aztCWGeV+ta1KrvUHe6HHxU/SL HnwF7Y6SJ6ti04xcFki2STtGtPkhls3ZQ15UKE4Bumsnvi5/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM957k4zYfGlaU4/RIY0NbLpUF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzMyMDA4ZjItNjIxOS0z NzQ1LWFhZjgtZmE4M2U1ODE1NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPQNmdOvZ7Rz+CSQLaoGq7yNhHaaoUYf7uBnTzkvXdk78SdZRL+tRZh lR2oIwNq22tSp0RRCEIE2kF1+b0YKMaKeEMdsZYuqSAKnxzbObsSoatymObq/+Dt C3/7p/JCeT9oOHuARn+l9FcuLI1Y2lTG+jNHD/IjwUwVbIcCMdEO6FSdeTCh8B2s 4bkg0IV+Ku8J+viDYp5kWpenYYwdi/yKG/gSQzYdYs5ZNIcMZGlvePwQnUnNUc4r nKvH0CSlzPtmLcKNQyVroGrb7JLFs0Cebq2mJSipF1C54TZGe7fFtFqOMuxoqGKG QhS7FjiB69QMElQiJzbIcnJpEPE2z4M= -----END CERTIFICATE-----Generated at Thu Oct 23 08:20:18 2025 by rpki-client