$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2ba869d5-de64-350b-8512-ef56e9e65a46.roa File: 2ba869d5-de64-350b-8512-ef56e9e65a46.roa (raw, json) Hash identifier: VZa6CiSml4EZq5GCyjFA9OXPRovqqFA1ZkLlvBLWHWU= Subject key identifier: A5:D9:DD:DA:40:AD:C8:76:62:92:25:29:8B:26:18:7A:49:2A:A0:E0 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB0029E7C2364956DB51A00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2ba869d5-de64-350b-8512-ef56e9e65a46.roa Signing time: Sun 03 Aug 2025 02:35:45 +0000 ROA not before: Sun 03 Aug 2025 02:35:45 +0000 ROA not after: Sat 01 Nov 2025 02:35:45 +0000 asID: 62044 IP address blocks: 165.225.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:02:9e:7c:23:64:95:6d:b5:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:45 2025 GMT Not After : Nov 1 02:35:45 2025 GMT Subject: CN=cb4686be-bdbd-4b42-9d6a-ff5c3aba4d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:c5:f9:13:09:a2:f5:28:f9:9c:07:2f:8e: f8:e4:6a:cc:db:c2:8e:41:99:ba:36:d6:d8:71:8c: dc:1f:1b:3b:22:c3:56:a1:47:63:46:81:29:5c:37: d2:d1:4d:8b:32:01:1c:7d:cb:ea:49:92:dc:6b:26: 0f:07:01:d6:7c:2b:74:d1:15:3e:11:3c:2f:00:02: 35:0d:e1:f8:23:c6:c2:94:e5:b6:8c:07:d2:dc:67: 74:5b:fc:9e:c7:86:2e:66:52:cd:9c:b1:75:0a:76: a2:da:8f:8d:6a:e1:ad:16:83:bb:48:8d:94:78:de: af:c4:d4:f5:e8:13:63:a6:91:3c:71:98:7d:e7:13: 1b:8d:2c:fc:0f:99:69:ac:a1:bc:cc:79:3e:66:c1: 93:00:38:79:28:2c:69:75:29:5a:56:f5:34:76:5f: 6d:51:3a:e1:0a:f0:31:b8:fb:1a:04:a3:1f:88:a6: c5:04:3e:45:7d:2e:55:c6:3c:b2:26:2d:79:a8:87: 58:bc:17:c9:59:4d:59:3d:f1:af:f6:88:fe:2b:9b: 82:c8:50:52:2c:50:6d:f9:97:58:32:dc:c1:5e:d2: b2:83:d9:e8:e9:0e:b1:4a:5b:74:91:b6:92:c6:48: 8c:8b:73:b8:2c:46:db:92:10:ac:15:2c:91:97:06: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:DD:DA:40:AD:C8:76:62:92:25:29:8B:26:18:7A:49:2A:A0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2ba869d5-de64-350b-8512-ef56e9e65a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:42:66:9b:66:e0:eb:4c:ea:8a:c4:ea:a6:00:0f:63:95:b4: f2:e6:40:87:ce:73:21:f8:6a:48:33:02:97:20:76:b2:4f:af: fc:e9:2d:e2:3d:fa:db:3c:ab:f1:7d:46:f5:7f:fe:4c:0f:85: e6:aa:94:c0:06:df:29:6f:a4:83:01:d4:41:a5:a1:f2:09:17: ed:92:39:6e:cd:aa:cb:f2:46:e3:ce:29:fa:eb:38:e3:de:23: eb:c0:74:5c:69:1d:3c:0b:8e:5b:74:fa:fd:39:a5:76:db:e6: 94:e1:14:74:92:9a:ea:4d:36:18:45:f4:86:b0:37:34:5a:52: ea:21:a7:60:80:b6:d8:7e:77:eb:e5:94:09:b6:d6:3b:5b:b5: c0:35:55:65:7c:1b:99:79:51:6c:5c:7f:9b:58:a0:97:d0:9c: 07:83:3a:94:dd:7d:d3:32:f9:b5:1d:a4:68:f7:ba:3a:62:ad: cd:74:3e:93:d9:77:d1:b3:5e:c7:2f:9b:e6:1e:1e:7c:f5:53: 3d:ef:d9:85:d7:b4:3f:1c:87:9d:c8:49:ce:38:2a:a8:5a:a2: 61:9c:ef:4b:b2:45:28:59:a9:eb:59:2f:87:fa:91:99:7c:bc: 77:df:51:18:f6:26:50:64:74:ae:49:94:32:c2:23:35:f2:2e: 6b:7e:d2:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAKefCNklW21GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0NVoXDTI1MTEwMTAyMzU0NVowLzEtMCsGA1UEAxMk Y2I0Njg2YmUtYmRiZC00YjQyLTlkNmEtZmY1YzNhYmE0ZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUrF+RMJovUo+ZwHL4745GrM28KOQZm6NtbY cYzcHxs7IsNWoUdjRoEpXDfS0U2LMgEcfcvqSZLcayYPBwHWfCt00RU+ETwvAAI1 DeH4I8bClOW2jAfS3Gd0W/yex4YuZlLNnLF1Cnai2o+NauGtFoO7SI2UeN6vxNT1 6BNjppE8cZh95xMbjSz8D5lprKG8zHk+ZsGTADh5KCxpdSlaVvU0dl9tUTrhCvAx uPsaBKMfiKbFBD5FfS5VxjyyJi15qIdYvBfJWU1ZPfGv9oj+K5uCyFBSLFBt+ZdY MtzBXtKyg9no6Q6xSlt0kbaSxkiMi3O4LEbbkhCsFSyRlwbXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXZ3dpArch2YpIlKYsmGHpJKqDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmJhODY5ZDUtZGU2NC0z NTBiLTg1MTItZWY1NmU5ZTY1YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZCZptm4OtM6orE6qYAD2OVtPLmQIfOcyH4akgzApcgdrJPr/zpLeI9 +ts8q/F9RvV//kwPheaqlMAG3ylvpIMB1EGlofIJF+2SOW7NqsvyRuPOKfrrOOPe I+vAdFxpHTwLjlt0+v05pXbb5pThFHSSmupNNhhF9IawNzRaUuohp2CAtth+d+vl lAm21jtbtcA1VWV8G5l5UWxcf5tYoJfQnAeDOpTdfdMy+bUdpGj3ujpirc10PpPZ d9GzXscvm+YeHnz1Uz3v2YXXtD8ch53ISc44KqhaomGc70uyRShZqetZL4f6kZl8 vHffURj2JlBkdK5JlDLCIzXyLmt+0lc= -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:13 2025 by rpki-client