$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa File: 024ca933-fa24-36cd-85e1-460a5cc4da90.roa (raw, json) Hash identifier: xRhNq9L1g3No0CzAP19N2iuLcO+DsAZPCwdXxeIFzaE= Subject key identifier: A7:84:EE:86:05:98:37:08:04:BF:28:B3:A0:1A:18:6F:C7:8A:E5:2B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AADF12681F88357F99636C138 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 165.225.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:26:81:f8:83:57:f9:96:36:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=6cf2c9a6-3fcb-4029-af8f-d7a2918b6645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:97:9f:69:57:7b:aa:0f:e4:fc:77:a0:94: c6:75:31:81:7e:67:d6:f5:05:62:60:59:de:74:ef: 43:d7:08:73:f7:2b:87:e5:23:e3:61:9f:dd:33:36: 3c:c8:f8:7c:ee:46:aa:a0:f4:d0:e8:ac:b1:f3:18: 5c:75:ec:3f:b8:19:6c:94:92:b9:db:0e:36:98:e4: b1:40:e9:20:90:00:5e:28:42:a4:54:3b:d8:ea:f8: 77:cd:94:87:c1:b1:78:07:8b:9c:4c:19:d7:a8:93: 8f:e6:aa:27:06:24:62:2b:43:27:b6:b0:af:af:86: 83:b2:6d:50:60:30:7a:6c:40:56:08:7e:82:15:56: 85:d0:1c:18:8e:50:39:fe:69:4d:c7:ea:8b:c9:3b: 39:22:0e:a0:b1:60:01:a2:73:9a:88:ef:57:3c:e9: 9a:d8:fa:25:14:d5:b0:84:12:a9:7a:f4:c4:a1:9f: 10:34:12:a9:43:85:8f:77:20:98:9a:bd:18:8b:b3: 73:c0:b6:a9:53:4d:96:28:90:af:fd:90:97:9d:17: 6c:14:1b:74:e2:18:75:9e:35:9e:d7:da:79:f5:61: 6d:a2:b0:38:e9:14:72:17:a3:29:4b:c8:74:bf:c6: 73:a9:17:93:c0:1c:2f:83:0a:83:83:b9:72:ae:96: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:84:EE:86:05:98:37:08:04:BF:28:B3:A0:1A:18:6F:C7:8A:E5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a5:46:60:e4:a5:71:fd:1d:68:9c:81:28:e2:91:42:22:30: fc:8e:0d:e1:b0:aa:4b:10:b6:6f:a1:4f:1f:60:50:74:0b:dc: fc:4b:c4:c2:f3:3a:d3:d7:9c:2e:c4:08:8d:e2:3e:dd:cf:59: 49:f3:e6:17:56:7d:82:3d:b2:7e:51:24:05:59:12:c9:7f:fe: 33:ef:c1:61:8e:ac:7c:d9:7e:6d:2b:11:21:0e:4c:eb:d2:b5: 9e:86:1d:f8:db:f5:40:4b:e8:30:f5:5b:ff:0f:f4:df:cf:a8: b9:4f:7b:e5:de:2d:80:e8:f8:57:32:eb:7b:9d:6d:8b:45:fe: 48:cd:97:36:38:9b:e6:d7:8a:d8:a1:72:28:74:a3:f7:6b:ee: b1:1c:f0:f6:38:38:c0:dc:e6:4f:27:73:aa:53:72:a1:6c:9a: 66:4f:0e:2a:d1:20:f9:88:88:aa:e8:37:bc:54:ee:82:94:49: 43:b2:7f:e7:d8:3a:10:d5:90:cc:96:15:29:48:a2:19:a7:5e: 91:6f:1f:51:1e:c9:76:b9:95:2a:96:7b:c5:a6:4f:b8:72:b6: 4a:ab:62:8c:d3:ac:93:fb:a0:73:73:d0:41:ff:82:74:ff:ad: 81:2c:4d:b4:14:1d:a9:01:eb:78:62:08:df:1c:3c:2b:97:88: f8:10:de:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SaB+INX+ZY2wTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NmNmMmM5YTYtM2ZjYi00MDI5LWFmOGYtZDdhMjkxOGI2NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6SXn2lXe6oP5Px3oJTGdTGBfmfW9QViYFne dO9D1whz9yuH5SPjYZ/dMzY8yPh87kaqoPTQ6Kyx8xhcdew/uBlslJK52w42mOSx QOkgkABeKEKkVDvY6vh3zZSHwbF4B4ucTBnXqJOP5qonBiRiK0MntrCvr4aDsm1Q YDB6bEBWCH6CFVaF0BwYjlA5/mlNx+qLyTs5Ig6gsWABonOaiO9XPOma2PolFNWw hBKpevTEoZ8QNBKpQ4WPdyCYmr0Yi7NzwLapU02WKJCv/ZCXnRdsFBt04hh1njWe 19p59WFtorA46RRyF6MpS8h0v8ZzqReTwBwvgwqDg7lyrpZThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeE7oYFmDcIBL8os6AaGG/HiuUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDI0Y2E5MzMtZmEyNC0z NmNkLTg1ZTEtNDYwYTVjYzRkYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2lRmDkpXH9HWicgSjikUIiMPyODeGwqksQtm+hTx9gUHQL3PxLxMLz OtPXnC7ECI3iPt3PWUnz5hdWfYI9sn5RJAVZEsl//jPvwWGOrHzZfm0rESEOTOvS tZ6GHfjb9UBL6DD1W/8P9N/PqLlPe+XeLYDo+Fcy63udbYtF/kjNlzY4m+bXitih cih0o/dr7rEc8PY4OMDc5k8nc6pTcqFsmmZPDirRIPmIiKroN7xU7oKUSUOyf+fY OhDVkMyWFSlIohmnXpFvH1EeyXa5lSqWe8WmT7hytkqrYozTrJP7oHNz0EH/gnT/ rYEsTbQUHakB63hiCN8cPCuXiPgQ3rE= -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:57 2025 by rpki-client