$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/47c6b4d8-1273-3be3-b355-561d935f5734.roa File: 47c6b4d8-1273-3be3-b355-561d935f5734.roa (raw, json) Hash identifier: iGUIi/VpxuyTlETLcRsKXvqWXe29Bg8yr5Pv9y4AMcA= Subject key identifier: F2:43:69:E2:07:12:FF:F6:0C:55:83:73:40:29:68:56:4D:53:13:2E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF776ABCBB83981118880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/47c6b4d8-1273-3be3-b355-561d935f5734.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f7:76:ab:cb:b8:39:81:11:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=fb4bd00e-f5bc-4483-9579-2d0500f634af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:5f:49:54:76:9d:73:04:2f:59:83:26:52: 69:9a:68:f9:9b:08:89:25:f0:8c:22:d7:61:ee:3d: d3:fe:41:8c:49:34:f0:92:5e:8b:ba:3a:9c:c8:2d: 37:79:f0:5e:42:55:71:35:12:4d:d8:3a:61:54:e2: a2:99:48:bb:65:dc:16:fd:6b:1c:9e:51:7c:db:4a: 69:69:57:09:89:3e:92:20:9d:2f:47:f2:9d:32:b0: 25:ed:7d:4c:97:65:d5:5e:bc:ce:29:63:4c:44:3e: 3f:b7:da:69:c1:01:1e:45:7a:ec:9d:6c:f5:59:12: 58:f9:2b:1e:08:a1:78:ea:25:5f:76:57:70:90:e8: 1a:76:b1:08:72:42:ea:1a:d7:d0:c3:1c:50:6d:9e: 7b:f0:35:6c:b2:14:e7:b8:23:34:6c:16:78:08:d9: ab:c3:15:4f:7f:62:e5:97:cb:d8:cc:07:eb:03:5d: ce:e5:9a:7a:33:9f:41:23:aa:e5:c3:dd:34:23:c9: 1c:15:a3:48:ef:c0:13:f2:70:3f:57:0e:d5:94:47: d3:f2:f0:35:3f:ed:24:ee:c5:e5:5f:d3:5a:5b:db: ad:e1:e5:99:b5:e5:1c:b0:e7:2e:41:18:ce:57:67: 5a:44:aa:9b:78:65:90:e3:60:67:25:b6:70:8e:b5: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:43:69:E2:07:12:FF:F6:0C:55:83:73:40:29:68:56:4D:53:13:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/47c6b4d8-1273-3be3-b355-561d935f5734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e4:a2:39:a3:f5:7f:d7:52:b7:8d:63:40:9d:56:f8:28:e9: 41:10:80:78:4c:3e:5a:80:aa:5a:bc:dc:87:dd:f2:69:c0:6a: ae:7c:46:47:7f:9f:31:f9:94:a7:96:fc:f5:95:5e:31:40:6e: 21:09:14:58:48:1e:44:77:ef:9c:25:3f:a9:a2:d2:ac:cf:0d: a1:18:9c:8d:0c:1f:86:c0:04:95:3f:d6:3b:89:03:81:07:f9: 22:5d:84:44:36:2d:a0:7e:fc:8a:1c:b2:f1:b9:a0:d8:24:04: d8:fe:4f:5d:7a:4f:02:a1:e2:03:ff:62:9c:9f:1b:b1:4b:38: e5:23:57:33:43:e2:29:41:ea:59:09:02:96:1f:15:ff:27:73: f8:d3:a2:63:e1:e9:08:52:58:64:b8:86:bf:f4:92:40:05:91: b8:e5:a1:8a:7e:6a:52:5e:de:05:3c:ff:37:cc:2c:26:81:6c: 2c:23:d5:04:e3:7e:ca:a7:fc:11:d6:c9:d9:26:d8:c8:b5:d6: 5a:81:5f:35:b9:d7:27:60:2a:11:e2:40:a8:9e:1e:f0:c3:ca: 78:6e:67:29:ce:75:c6:7c:1f:d2:26:c1:f8:f2:0f:be:fd:4f: 37:09:01:e0:dd:86:dc:e7:c5:ae:3b:49:6d:37:ae:c5:b7:83: 08:3a:77:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPd2q8u4OYERiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZmI0YmQwMGUtZjViYy00NDgzLTk1NzktMmQwNTAwZjYzNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuINfSVR2nXMEL1mDJlJpmmj5mwiJJfCMItdh 7j3T/kGMSTTwkl6LujqcyC03efBeQlVxNRJN2DphVOKimUi7ZdwW/WscnlF820pp aVcJiT6SIJ0vR/KdMrAl7X1Ml2XVXrzOKWNMRD4/t9ppwQEeRXrsnWz1WRJY+Sse CKF46iVfdldwkOgadrEIckLqGtfQwxxQbZ578DVsshTnuCM0bBZ4CNmrwxVPf2Ll l8vYzAfrA13O5Zp6M59BI6rlw900I8kcFaNI78AT8nA/Vw7VlEfT8vA1P+0k7sXl X9NaW9ut4eWZteUcsOcuQRjOV2daRKqbeGWQ42BnJbZwjrVG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJDaeIHEv/2DFWDc0ApaFZNUxMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDdjNmI0ZDgtMTI3My0z YmUzLWIzNTUtNTYxZDkzNWY1NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnkojmj9X/XUreNY0CdVvgo6UEQgHhMPlqAqlq83Ifd8mnAaq58Rkd/ nzH5lKeW/PWVXjFAbiEJFFhIHkR375wlP6mi0qzPDaEYnI0MH4bABJU/1juJA4EH +SJdhEQ2LaB+/IocsvG5oNgkBNj+T116TwKh4gP/YpyfG7FLOOUjVzND4ilB6lkJ ApYfFf8nc/jTomPh6QhSWGS4hr/0kkAFkbjloYp+alJe3gU8/zfMLCaBbCwj1QTj fsqn/BHWydkm2Mi11lqBXzW51ydgKhHiQKieHvDDynhuZynOdcZ8H9ImwfjyD779 TzcJAeDdhtznxa47SW03rsW3gwg6d1s= -----END CERTIFICATE-----Generated at Wed Nov 5 16:16:56 2025 by rpki-client