$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/223d983a-e50b-305d-a6e1-020603d16c6c.roa File: 223d983a-e50b-305d-a6e1-020603d16c6c.roa (raw, json) Hash identifier: 9Ajiz82DaMsfr1TUoPo12cxWL9sLvb2x9aGeDQ7L+QQ= Subject key identifier: 16:EF:41:63:DF:41:27:BA:03:95:88:47:F8:F3:64:9C:09:13:CD:44 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF818C3295251570AA4C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/223d983a-e50b-305d-a6e1-020603d16c6c.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f8:18:c3:29:52:51:57:0a:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=c081dd81-2751-4613-9866-444ce7644bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:8c:92:eb:4e:ad:d1:91:a3:0b:f4:c8:fb: 42:3d:39:aa:54:88:19:96:11:2d:67:fb:25:fa:4b: 2a:b5:0e:d9:11:eb:4a:73:bd:83:b9:31:30:9d:43: 99:d6:0b:a0:83:57:cd:ad:bd:01:ff:cd:e5:60:6e: 9d:78:a9:ee:33:22:9f:91:11:eb:72:d0:76:35:3b: fa:e6:3f:27:19:93:9e:7d:66:1a:c0:1c:dc:a1:0d: 12:4d:2b:8c:49:81:0a:ee:3f:2f:a7:ed:e1:5a:24: 0e:37:d6:11:c9:34:f5:c0:8a:e4:89:bb:b7:3b:ec: e2:fa:89:8f:c2:2a:c2:4e:db:09:3a:7d:bf:c7:68: 64:d7:31:33:6c:8a:15:e0:80:bc:a3:ff:46:3c:44: 81:8e:e1:b4:63:73:b6:8f:55:ed:d5:5e:96:24:64: 3a:fc:6f:cd:58:92:ca:34:fc:ef:4e:9b:6b:5b:72: 3c:37:e0:80:92:97:95:49:50:2d:8a:5a:0a:aa:0e: 2f:ad:83:f3:d1:c1:3f:dc:bd:c4:e9:e5:59:c5:24: 92:08:47:24:e9:a6:7c:3b:69:3c:1e:f9:49:b6:7d: 92:e4:89:b3:00:db:6b:b5:7f:00:a1:57:19:0c:60: 8c:79:a1:70:77:e3:69:80:69:49:f2:8e:8c:65:7b: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EF:41:63:DF:41:27:BA:03:95:88:47:F8:F3:64:9C:09:13:CD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/223d983a-e50b-305d-a6e1-020603d16c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:8f:03:1f:3f:a8:37:48:8c:a6:fc:92:9c:b3:d0:a9:f2:d1: 21:90:d1:ce:46:bc:e1:bc:93:a7:75:b6:d9:47:c9:46:b5:72: 22:47:91:fd:d5:dd:14:2b:6a:09:75:a4:19:48:e5:a8:ea:c0: f9:90:e0:75:2f:b6:84:5e:3a:76:41:2b:35:5b:ce:e0:64:2d: 4c:57:78:d1:16:dc:07:30:0e:ee:91:1d:7d:12:22:00:3f:4f: c7:93:3b:2f:e0:48:88:53:ae:4f:7f:4f:6f:11:b8:96:99:6f: e3:df:c9:dc:6a:5a:41:26:f6:2a:a1:52:c7:e3:3b:35:8d:59: 73:11:22:c1:8a:cd:0f:b5:27:07:60:dd:60:87:7b:aa:7c:79: 24:74:11:fd:d1:a3:70:e9:69:3f:26:a0:de:e4:3a:09:3f:a0: 58:25:6f:90:89:e4:25:bb:22:7f:55:ff:44:e3:36:1a:95:17: 52:81:76:f5:9e:a9:42:1c:66:32:8f:ad:b0:5e:8c:ef:ce:7e: 76:41:82:de:ee:a1:94:3c:1e:84:c2:3b:31:11:1c:8f:0b:0f: 5c:b8:94:3d:a9:7b:0b:4a:32:a0:72:ee:ca:0e:9f:76:6e:5b: ca:47:47:83:d9:ff:78:5d:b5:5f:83:63:23:42:72:9f:e2:f8: 49:42:f9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPgYwylSUVcKpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YzA4MWRkODEtMjc1MS00NjEzLTk4NjYtNDQ0Y2U3NjQ0YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ2MkutOrdGRowv0yPtCPTmqVIgZlhEtZ/sl +ksqtQ7ZEetKc72DuTEwnUOZ1gugg1fNrb0B/83lYG6deKnuMyKfkRHrctB2NTv6 5j8nGZOefWYawBzcoQ0STSuMSYEK7j8vp+3hWiQON9YRyTT1wIrkibu3O+zi+omP wirCTtsJOn2/x2hk1zEzbIoV4IC8o/9GPESBjuG0Y3O2j1Xt1V6WJGQ6/G/NWJLK NPzvTptrW3I8N+CAkpeVSVAtiloKqg4vrYPz0cE/3L3E6eVZxSSSCEck6aZ8O2k8 HvlJtn2S5ImzANtrtX8AoVcZDGCMeaFwd+NpgGlJ8o6MZXv93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbvQWPfQSe6A5WIR/jzZJwJE81EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjIzZDk4M2EtZTUwYi0z MDVkLWE2ZTEtMDIwNjAzZDE2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKPAx8/qDdIjKb8kpyz0Kny0SGQ0c5GvOG8k6d1ttlHyUa1ciJHkf3V 3RQragl1pBlI5ajqwPmQ4HUvtoReOnZBKzVbzuBkLUxXeNEW3AcwDu6RHX0SIgA/ T8eTOy/gSIhTrk9/T28RuJaZb+PfydxqWkEm9iqhUsfjOzWNWXMRIsGKzQ+1Jwdg 3WCHe6p8eSR0Ef3Ro3DpaT8moN7kOgk/oFglb5CJ5CW7In9V/0TjNhqVF1KBdvWe qUIcZjKPrbBejO/OfnZBgt7uoZQ8HoTCOzERHI8LD1y4lD2pewtKMqBy7soOn3Zu W8pHR4PZ/3hdtV+DYyNCcp/i+ElC+cA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:11 2025 by rpki-client