$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/38758eeb-8980-3325-b0bf-6075aeb6121c.roa File: 38758eeb-8980-3325-b0bf-6075aeb6121c.roa (raw, json) Hash identifier: zQ5oTkzU37Hq2yYv7ysRZsCTty/fBW4ur0lxLtRxkiY= Subject key identifier: FC:F3:D1:54:4A:F8:77:F1:D8:88:7F:9B:75:88:AC:2C:F0:D1:0C:57 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF7407EA7B0DC3DA8C480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/38758eeb-8980-3325-b0bf-6075aeb6121c.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f7:40:7e:a7:b0:dc:3d:a8:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=cf642bac-43fa-4241-a59f-2ba49e58a9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ef:a6:1c:66:9a:c0:5d:cb:55:8c:d1:9f:35: bc:2d:8c:55:a8:c3:e2:ab:da:5d:c1:39:b6:3f:7a: bd:8b:8a:dc:e9:76:44:cb:df:6c:6a:8c:40:6b:91: d4:4f:41:e9:3c:29:dd:76:26:14:3b:9a:5f:ae:dd: 22:cf:ca:5c:45:88:cc:fa:73:89:95:62:05:6b:6d: 91:c9:18:ce:62:79:43:1c:31:1d:e8:d4:bf:ff:ff: 22:3f:7c:ab:b9:1f:51:9d:4a:95:67:ad:08:02:4e: ad:73:cd:5b:a2:35:a3:bb:60:04:c2:6c:5d:e6:d1: 16:29:07:81:c0:1c:60:ae:52:53:78:03:e2:ac:4e: 65:16:52:51:b0:a7:26:bb:e8:82:c2:ad:28:67:80: b2:f2:c4:27:27:69:fa:80:ff:fb:0b:fa:0c:dd:9d: 3b:3e:9f:84:e0:1b:92:92:19:a1:07:1f:d6:32:d4: 4b:fe:49:cf:8f:46:59:1c:0c:4c:60:4e:d1:eb:9d: 23:b3:d1:d9:e7:ad:da:7b:dc:d1:05:e0:07:7a:50: 8d:c9:e8:8f:6f:e5:36:5c:d7:48:42:a8:0d:82:ff: ef:77:26:86:f7:58:60:b3:f2:4c:ab:10:d2:08:a5: 7d:d5:e6:59:f3:ee:cd:e7:9d:8c:42:f2:7d:7b:bb: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F3:D1:54:4A:F8:77:F1:D8:88:7F:9B:75:88:AC:2C:F0:D1:0C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/38758eeb-8980-3325-b0bf-6075aeb6121c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d7:e3:5d:1d:b6:3c:73:1f:eb:e0:ba:d2:e6:3f:a9:b1:69: 71:41:c7:35:13:33:f4:48:51:da:c7:d0:37:6f:bb:16:9d:19: 31:bc:7a:39:be:cc:e3:4d:1b:4b:51:6f:46:d0:ec:28:f6:6c: f5:87:2d:b2:ec:3f:df:b3:65:fd:2d:d4:06:ba:db:60:01:99: 22:3e:48:f7:1d:f9:de:1b:b7:77:1b:1e:c3:97:96:5f:98:09: e5:14:12:2f:63:2b:c1:be:46:dc:9d:36:e8:38:b9:0b:13:fe: a0:99:d3:0f:f0:05:58:25:db:49:12:ee:c3:41:37:30:22:1d: b2:d3:ba:ae:43:dc:0f:7b:e6:ca:4c:75:43:a3:5b:9e:0f:0a: 37:58:3f:5e:5a:6b:6d:ac:3d:96:6e:9f:1a:84:11:56:3c:a6: bf:9f:88:2c:d1:0b:8a:70:8f:4b:6d:bc:3a:9e:09:46:72:da: c6:8d:bd:b6:e6:eb:81:0f:54:36:32:87:70:8e:99:52:86:2f: b9:74:78:a0:b1:73:f7:39:70:78:d9:a2:b4:19:f8:5e:c1:88: 95:ef:92:e8:63:9d:de:85:7b:d0:7b:5f:33:f3:b1:a9:b4:c0: 7a:d5:27:06:ec:10:75:cf:f3:e7:90:cd:e5:d6:08:4e:cd:ed: d7:89:8e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPdAfqew3D2oxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk Y2Y2NDJiYWMtNDNmYS00MjQxLWE1OWYtMmJhNDllNThhOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt++mHGaawF3LVYzRnzW8LYxVqMPiq9pdwTm2 P3q9i4rc6XZEy99saoxAa5HUT0HpPCnddiYUO5pfrt0iz8pcRYjM+nOJlWIFa22R yRjOYnlDHDEd6NS///8iP3yruR9RnUqVZ60IAk6tc81bojWju2AEwmxd5tEWKQeB wBxgrlJTeAPirE5lFlJRsKcmu+iCwq0oZ4Cy8sQnJ2n6gP/7C/oM3Z07Pp+E4BuS khmhBx/WMtRL/knPj0ZZHAxMYE7R650js9HZ563ae9zRBeAHelCNyeiPb+U2XNdI QqgNgv/vdyaG91hgs/JMqxDSCKV91eZZ8+7N552MQvJ9e7t6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzz0VRK+Hfx2Ih/m3WIrCzw0QxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzg3NThlZWItODk4MC0z MzI1LWIwYmYtNjA3NWFlYjYxMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3X410dtjxzH+vgutLmP6mxaXFBxzUTM/RIUdrH0DdvuxadGTG8ejm+ zONNG0tRb0bQ7Cj2bPWHLbLsP9+zZf0t1Aa622ABmSI+SPcd+d4bt3cbHsOXll+Y CeUUEi9jK8G+RtydNug4uQsT/qCZ0w/wBVgl20kS7sNBNzAiHbLTuq5D3A975spM dUOjW54PCjdYP15aa22sPZZunxqEEVY8pr+fiCzRC4pwj0ttvDqeCUZy2saNvbbm 64EPVDYyh3COmVKGL7l0eKCxc/c5cHjZorQZ+F7BiJXvkuhjnd6Fe9B7XzPzsam0 wHrVJwbsEHXP8+eQzeXWCE7N7deJjuE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:28 2025 by rpki-client