$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d737f2de-eaa1-38b7-9650-44dca4848cdf.roa File: d737f2de-eaa1-38b7-9650-44dca4848cdf.roa (raw, json) Hash identifier: EYyqQqNf4YaSwPXbpBYPcLqRa52MdC31Ak9UY1fCLAg= Subject key identifier: CE:93:D1:3B:84:52:88:E0:BE:9B:73:4E:29:CC:E2:0B:79:0F:BC:D2 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584B0FA6C450A4583569E8104595 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d737f2de-eaa1-38b7-9650-44dca4848cdf.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8075 IP address blocks: 165.224.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c4:50:a4:58:35:69:e8:10:45:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=5a129c8b-131c-4568-99ec-90af10b98ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:54:1d:2f:ff:54:e2:08:54:8d:36:02:ae: a3:e1:31:3b:f9:4d:df:65:1f:2a:02:df:5d:d7:1d: 80:26:7e:b5:66:85:3f:0a:28:33:61:73:1d:f5:0f: d4:44:64:1e:2e:a2:2f:37:0c:6b:73:d7:19:51:96: bc:bf:40:19:0a:69:2c:82:96:e8:d4:e2:85:58:da: cd:85:24:5e:fb:af:41:ed:05:b3:fb:22:b2:5d:21: 74:52:ac:3f:1c:15:0f:f7:2e:55:61:72:f9:fe:66: 08:a6:f8:f3:50:d0:d0:70:d3:68:e2:fa:3d:3d:53: b8:b5:08:9b:e6:d0:ae:52:dc:cb:a9:0a:aa:1a:cf: 11:90:dc:88:ae:b8:5e:6a:47:3d:67:44:2e:9f:0b: 47:35:80:c3:f4:8a:4f:bd:de:d4:c1:df:ef:89:7a: f2:10:0b:b4:06:ca:5c:2f:14:5a:fb:c3:25:ca:e1: 6a:65:82:89:aa:47:9c:73:f1:69:31:21:67:30:91: 10:0a:51:64:50:57:c8:40:23:c2:5b:af:52:97:54: 54:fa:60:8b:3e:93:75:89:08:00:1d:46:05:ca:31: 07:54:df:f9:88:c9:d1:dd:0f:ac:50:54:b9:f3:31: 10:1b:3f:b6:20:29:ae:97:d4:2f:5a:4b:0f:ee:e2: b9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:93:D1:3B:84:52:88:E0:BE:9B:73:4E:29:CC:E2:0B:79:0F:BC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/d737f2de-eaa1-38b7-9650-44dca4848cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ae:4d:3f:c5:de:e6:4c:d3:8e:68:9c:f9:3f:c4:72:76:57: c8:0e:f3:4d:10:d3:05:89:6b:4d:cd:f3:01:6a:be:05:96:6d: 86:45:cb:ba:d7:0e:a8:12:ea:1a:2c:39:b5:df:3f:05:f5:c3: 11:03:44:66:65:74:50:6c:69:9c:59:e1:92:ff:99:18:06:8c: d4:ce:08:22:7d:98:f1:b3:57:b5:dd:45:84:d5:50:ec:36:2f: 17:9d:e5:2f:fa:b7:54:5c:dd:94:86:a5:64:95:9a:5b:0a:7d: d4:63:5c:84:67:da:70:b2:b6:cd:cb:0d:27:d6:17:71:c1:f0: 5f:55:3b:a2:41:cc:60:d5:46:22:a5:b8:65:af:d8:fb:07:fc: 2b:12:42:26:58:93:ff:88:9d:e6:44:e7:1c:00:c6:16:a5:51: 58:96:d3:72:5d:44:5b:2a:0c:38:26:ea:4f:90:ae:24:95:e7: f1:d5:65:d0:d2:8f:2f:cc:97:9d:1e:99:22:c1:c8:74:86:cc: b1:5e:06:31:e6:12:65:f8:d3:20:c5:d2:97:6e:c6:4e:09:a6: 50:04:8e:23:80:58:73:ba:fd:ab:47:df:d1:c0:be:21:d8:ed: 40:9c:ca:dd:ca:56:73:dd:f0:ce:3e:1a:6d:65:b7:8c:4a:09: 2a:3a:de:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsRQpFg1aegQRZUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk NWExMjljOGItMTMxYy00NTY4LTk5ZWMtOTBhZjEwYjk4ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh5UHS//VOIIVI02Aq6j4TE7+U3fZR8qAt9d 1x2AJn61ZoU/CigzYXMd9Q/URGQeLqIvNwxrc9cZUZa8v0AZCmksgpbo1OKFWNrN hSRe+69B7QWz+yKyXSF0Uqw/HBUP9y5VYXL5/mYIpvjzUNDQcNNo4vo9PVO4tQib 5tCuUtzLqQqqGs8RkNyIrrheakc9Z0QunwtHNYDD9IpPvd7Uwd/viXryEAu0Bspc LxRa+8MlyuFqZYKJqkecc/FpMSFnMJEQClFkUFfIQCPCW69Sl1RU+mCLPpN1iQgA HUYFyjEHVN/5iMnR3Q+sUFS58zEQGz+2ICmul9QvWksP7uK5TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6T0TuEUojgvptzTinM4gt5D7zSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZDczN2YyZGUtZWFhMS0z OGI3LTk2NTAtNDRkY2E0ODQ4Y2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6uTT/F3uZM045onPk/xHJ2V8gO800Q0wWJa03N8wFqvgWWbYZFy7rX DqgS6hosObXfPwX1wxEDRGZldFBsaZxZ4ZL/mRgGjNTOCCJ9mPGzV7XdRYTVUOw2 Lxed5S/6t1Rc3ZSGpWSVmlsKfdRjXIRn2nCyts3LDSfWF3HB8F9VO6JBzGDVRiKl uGWv2PsH/CsSQiZYk/+IneZE5xwAxhalUViW03JdRFsqDDgm6k+QriSV5/HVZdDS jy/Ml50emSLByHSGzLFeBjHmEmX40yDF0pduxk4JplAEjiOAWHO6/atH39HAviHY 7UCcyt3KVnPd8M4+Gm1lt4xKCSo63k8= -----END CERTIFICATE-----Generated at Wed Sep 3 23:51:57 2025 by rpki-client