$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa File: e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa (raw, json) Hash identifier: QqmRCiNCqoim+a11wjbzj+G2dNMmzfslW61px33RvUQ= Subject key identifier: 6F:47:F2:95:56:07:E5:23:09:FD:7A:9E:C4:EC:1F:11:BA:2E:D6:30 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584B8EACE8E6F3623577D2B4DA00 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 8987 IP address blocks: 165.224.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e8:e6:f3:62:35:77:d2:b4:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5b7591d6-ce01-4cf6-8f68-c38e0dbe3e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:48:fe:b0:e7:40:c5:20:f6:cf:13:19:1f: 7b:24:af:5d:f0:51:a5:27:b0:74:cd:a6:51:35:94: 65:ff:1b:c9:81:43:89:be:b6:18:56:a5:c0:03:44: 23:ba:9c:7d:01:32:4b:0a:97:79:38:49:c5:73:cb: 21:18:73:7e:49:2c:90:63:df:64:56:c4:2a:c1:f1: 09:7f:a6:a4:b8:1e:fc:5d:78:61:81:c5:47:e2:12: d3:2a:c0:12:4c:ff:a3:c1:b9:63:f8:f5:77:88:66: ed:28:1c:81:88:ee:bd:e8:7b:09:dc:38:1e:7c:ce: 40:cd:06:c0:4b:96:95:f0:ee:12:38:b0:5e:58:b5: 71:6b:b0:c8:cc:1e:bd:eb:a3:5b:5a:0e:df:9e:02: 6f:6a:59:11:dc:72:3b:ad:20:fd:13:b4:4a:a5:95: 4d:29:4a:0d:2a:b1:b4:dd:fb:22:81:03:25:4a:4e: 13:1c:f5:cc:c6:60:a6:62:f6:e6:b5:9b:2a:ba:b8: b3:0d:f7:9a:85:ce:52:a1:d7:08:f1:ab:03:d1:b9: c5:a4:15:81:f0:ab:d5:d9:10:60:03:66:da:98:fb: b2:1e:6e:c5:5f:f0:35:9e:26:75:28:67:75:f5:2f: 89:30:13:05:17:19:f8:b4:b1:95:4e:8e:53:98:5e: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:47:F2:95:56:07:E5:23:09:FD:7A:9E:C4:EC:1F:11:BA:2E:D6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c1:45:e6:df:c5:83:4a:1c:fd:7c:fe:e7:fa:4c:66:65:c4: 77:af:e2:fa:e9:8b:9f:fc:46:09:7b:11:f9:19:86:17:17:31: dc:fb:57:df:52:9c:1e:8d:be:af:97:7a:46:94:2d:f9:9e:87: b4:e9:e8:fa:f1:39:5b:a6:ea:8c:96:36:04:f8:d4:69:3c:74: 73:e7:90:95:34:ba:d1:8c:f4:a6:19:86:4d:f1:a5:6a:d2:20: 3c:5a:04:20:c9:91:89:0c:b8:18:0e:83:ce:5b:4f:65:90:0b: 8e:82:c8:ba:e1:bf:d3:c1:3e:0a:5a:c1:8f:5f:09:bd:97:b3: c8:3c:e0:a5:71:c5:7b:c4:d1:74:d8:e7:1a:75:1e:cb:70:0d: 49:90:89:43:93:f1:bb:64:23:14:b1:46:29:08:9e:1c:90:2c: 83:eb:2f:ec:73:4d:93:79:cd:eb:17:13:8f:9d:01:d4:2e:1c: 8d:4b:54:15:22:0e:89:0c:57:4b:51:8a:5b:02:31:01:79:ba: b5:24:cc:68:1d:50:ed:a3:d2:61:4f:9d:96:aa:27:24:80:ea: 4e:57:08:ef:85:ca:45:14:0a:18:58:75:fc:1d:f9:2d:00:a4: 3a:6c:58:fd:bf:ed:95:94:97:f3:79:19:ce:99:c3:91:75:be: 53:1e:48:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOjm82I1d9K02gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWI3NTkxZDYtY2UwMS00Y2Y2LThmNjgtYzM4ZTBkYmUzZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEZI/rDnQMUg9s8TGR97JK9d8FGlJ7B0zaZR NZRl/xvJgUOJvrYYVqXAA0Qjupx9ATJLCpd5OEnFc8shGHN+SSyQY99kVsQqwfEJ f6akuB78XXhhgcVH4hLTKsASTP+jwblj+PV3iGbtKByBiO696HsJ3DgefM5AzQbA S5aV8O4SOLBeWLVxa7DIzB6966NbWg7fngJvalkR3HI7rSD9E7RKpZVNKUoNKrG0 3fsigQMlSk4THPXMxmCmYvbmtZsqurizDfeahc5SodcI8asD0bnFpBWB8KvV2RBg A2bamPuyHm7FX/A1niZ1KGd19S+JMBMFFxn4tLGVTo5TmF5Z9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9H8pVWB+UjCf16nsTsHxG6LtYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZTBlNDQ5NzAtMmY4Ny0z NmJlLWI0YjgtNmUzZGFlOWYxMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvBRebfxYNKHP18/uf6TGZlxHev4vrpi5/8Rgl7EfkZhhcXMdz7V99S nB6Nvq+XekaULfmeh7Tp6PrxOVum6oyWNgT41Gk8dHPnkJU0utGM9KYZhk3xpWrS IDxaBCDJkYkMuBgOg85bT2WQC46CyLrhv9PBPgpawY9fCb2Xs8g84KVxxXvE0XTY 5xp1HstwDUmQiUOT8btkIxSxRikInhyQLIPrL+xzTZN5zesXE4+dAdQuHI1LVBUi DokMV0tRilsCMQF5urUkzGgdUO2j0mFPnZaqJySA6k5XCO+FykUUChhYdfwd+S0A pDpsWP2/7ZWUl/N5Gc6Zw5F1vlMeSP0= -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:09 2025 by rpki-client