$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dbbde165-10b1-358a-8897-a0f4e427eda4.roa File: dbbde165-10b1-358a-8897-a0f4e427eda4.roa (raw, json) Hash identifier: Pg+vM0ii/q5u0J2S2K1YLcw1ymNypEEk0nvENG6Mn98= Subject key identifier: 20:83:30:91:BC:EB:B7:A4:7A:16:AD:0A:82:B3:BD:CC:F7:48:75:80 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF8E15D315A8ABAD22580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dbbde165-10b1-358a-8897-a0f4e427eda4.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 165.225.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f8:e1:5d:31:5a:8a:ba:d2:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=81016523-8677-4884-8122-f342c4e7e2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:3c:c8:e0:8e:54:26:9c:d9:29:f4:c4:46: 71:b6:d2:86:40:66:b2:56:34:f0:73:51:06:a2:76: ee:3d:3a:97:0d:30:60:e4:3b:f2:e6:b9:72:da:ef: 53:91:fd:47:45:b4:7a:73:85:f7:f8:89:8e:ce:58: 9c:30:df:d2:c3:df:ff:9e:15:ca:d7:0d:e6:03:7c: 9c:60:f0:95:2a:ac:01:ca:ea:80:cf:76:a5:9f:ee: 0b:6f:59:31:08:6c:97:0d:e0:5a:0b:dd:8a:eb:33: d8:1d:2e:b6:c8:9b:bf:3a:6f:83:75:10:ba:49:b0: fd:73:d1:16:c9:4e:35:53:03:ee:28:69:a0:5f:7e: b1:7a:0a:14:d9:bb:88:b2:50:3a:55:13:63:f5:8d: 63:f0:9c:33:e9:3e:a8:e2:69:2c:0a:68:fa:93:4b: 1e:0d:85:48:c6:b1:6a:c0:f7:be:10:06:ff:f5:07: 25:b0:74:30:62:05:e3:1b:af:ca:a1:2d:65:ad:08: 9b:30:8b:1f:3b:e8:e5:0f:32:0b:75:03:55:2a:a9: 98:48:b1:c8:a7:67:b9:af:db:4b:46:0c:75:4c:c6: ee:1f:e5:87:9f:9c:7c:2a:99:bc:01:29:b8:6f:ab: 6c:b4:78:59:38:81:87:6c:25:a2:fa:83:52:3b:ff: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:83:30:91:BC:EB:B7:A4:7A:16:AD:0A:82:B3:BD:CC:F7:48:75:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dbbde165-10b1-358a-8897-a0f4e427eda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4d:c4:f9:38:92:66:58:06:ab:ce:bb:4f:b9:8e:5d:67:38: 76:13:19:a4:7d:ce:69:3b:1b:dc:53:45:9c:6a:9e:b2:e3:cc: b4:a4:5d:36:d1:5c:4d:ac:19:26:7c:61:a1:70:2c:ad:e9:b6: bd:04:29:51:d9:bf:69:d1:7a:16:2b:1f:02:c0:87:60:92:50: 27:dd:c8:76:6f:6e:a8:d7:c4:11:c9:5b:74:0a:8c:d7:c5:49: a1:9e:c5:4e:40:a0:04:e2:31:ac:29:49:a2:79:38:f2:1c:b8: 7e:18:b7:e8:26:6d:3b:b8:cf:3e:93:ce:39:d9:e2:9a:bc:44: 33:88:ad:d9:1c:68:39:3a:76:05:88:a5:8c:c7:71:74:c6:1b: 6b:ef:f1:60:77:82:c9:03:28:68:fa:01:9b:6d:29:ef:4d:fe: 52:22:ea:8c:3c:7f:04:ed:d8:62:a3:b4:4e:b0:37:13:2c:78: 90:9d:df:a8:c2:12:c8:b9:ce:e2:07:1f:8f:b0:fa:58:b1:e4: b9:6f:52:1c:dd:3c:f0:d8:fc:90:24:37:c4:d1:f9:1e:7b:80: 6a:d4:5e:bd:88:6e:f5:47:78:a7:90:34:5f:41:66:4b:16:5f: 13:81:b7:97:12:da:8b:48:3a:3a:7f:80:0e:ae:f9:4b:a2:5a: 2a:23:ef:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPjhXTFairrSJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ODEwMTY1MjMtODY3Ny00ODg0LTgxMjItZjM0MmM0ZTdlMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUc8yOCOVCac2Sn0xEZxttKGQGayVjTwc1EG onbuPTqXDTBg5Dvy5rly2u9Tkf1HRbR6c4X3+ImOzlicMN/Sw9//nhXK1w3mA3yc YPCVKqwByuqAz3aln+4Lb1kxCGyXDeBaC92K6zPYHS62yJu/Om+DdRC6SbD9c9EW yU41UwPuKGmgX36xegoU2buIslA6VRNj9Y1j8Jwz6T6o4mksCmj6k0seDYVIxrFq wPe+EAb/9QclsHQwYgXjG6/KoS1lrQibMIsfO+jlDzILdQNVKqmYSLHIp2e5r9tL Rgx1TMbuH+WHn5x8Kpm8ASm4b6tstHhZOIGHbCWi+oNSO/99CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCDMJG867ekehatCoKzvcz3SHWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGJiZGUxNjUtMTBiMS0z NThhLTg4OTctYTBmNGU0MjdlZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVNxPk4kmZYBqvOu0+5jl1nOHYTGaR9zmk7G9xTRZxqnrLjzLSkXTbR XE2sGSZ8YaFwLK3ptr0EKVHZv2nRehYrHwLAh2CSUCfdyHZvbqjXxBHJW3QKjNfF SaGexU5AoATiMawpSaJ5OPIcuH4Yt+gmbTu4zz6TzjnZ4pq8RDOIrdkcaDk6dgWI pYzHcXTGG2vv8WB3gskDKGj6AZttKe9N/lIi6ow8fwTt2GKjtE6wNxMseJCd36jC Esi5zuIHH4+w+lix5LlvUhzdPPDY/JAkN8TR+R57gGrUXr2IbvVHeKeQNF9BZksW XxOBt5cS2otIOjp/gA6u+UuiWioj77Y= -----END CERTIFICATE-----Generated at Thu Oct 23 08:25:38 2025 by rpki-client