$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa File: 7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa (raw, json) Hash identifier: zcxDlvlYRd6VaIrlsERxbIJPmyqFZiXtk8RtI3qF23o= Subject key identifier: A6:8B:FA:07:30:DA:30:A9:EB:15:60:8E:8E:EA:15:22:B5:F7:AD:9E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B583C865FAD21E2C4CDEF4200 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 53813 IP address blocks: 165.225.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:86:5f:ad:21:e2:c4:cd:ef:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ad4739d6-3341-4332-80a4-cf8381af9dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:1e:f7:7c:37:c7:e7:b5:98:23:95:12:14: 23:b3:93:b8:88:45:85:4b:06:27:b2:e4:40:a7:fd: 6d:2a:0e:94:ea:60:1b:7e:95:88:e9:e4:ca:1c:1b: 91:2a:f6:eb:b4:f5:93:5e:32:80:c7:b0:ad:af:e8: 66:6a:35:f3:66:e3:ac:de:09:42:73:0b:23:37:59: 4a:4e:7a:79:12:eb:81:3c:a8:e5:a1:31:5d:f5:4c: d6:b5:d3:e7:84:60:16:34:35:bc:55:db:7d:79:34: 37:05:d8:19:67:79:28:fd:37:6d:2f:d1:78:c1:8f: 5f:96:aa:0e:da:fa:80:7b:28:90:d6:65:bd:d2:a2: b2:5f:03:cc:fd:c0:53:36:ea:d7:f7:62:5b:de:89: 21:20:c2:37:da:fc:95:65:3f:67:28:68:f5:33:76: 64:25:0f:dd:56:65:9f:bc:6d:60:2d:9f:67:c6:3b: 1b:83:cd:db:3e:fb:ed:34:8d:ae:be:54:ec:19:16: b0:4f:20:fb:e9:dd:70:0d:35:1c:f5:98:fa:0c:09: 40:d7:83:ec:f0:a4:39:59:03:0c:29:3a:eb:10:ab: 18:97:c5:6b:8c:cc:f7:f7:d9:9e:51:e3:84:bb:c5: 82:b7:5f:46:f6:9b:4f:ea:d3:1e:32:19:c2:cb:71: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8B:FA:07:30:DA:30:A9:EB:15:60:8E:8E:EA:15:22:B5:F7:AD:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7055b94f-2272-3a0f-8c2f-5641abccd6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:cc:c1:18:07:7c:63:41:84:9d:d3:57:48:62:3e:e2:54:f4: c6:5b:5b:85:a2:4e:8f:74:89:77:55:7d:f9:8a:96:07:9c:58: f9:47:29:db:6f:7b:74:c0:32:03:14:19:35:b1:7c:69:f7:d0: ba:2b:50:3d:99:c0:8e:51:a7:1b:83:83:ce:86:77:50:da:e2: a4:9f:2a:7f:91:59:4c:18:6c:16:02:ea:ab:35:80:8c:8f:88: eb:07:27:26:f2:e6:82:dc:24:a1:2a:39:4e:54:25:3c:26:fe: 2f:e4:13:ff:e9:90:ec:5c:bd:6a:88:cf:92:47:38:1a:b3:ba: 47:5a:5e:c8:9c:35:d2:24:aa:d2:cb:46:a1:24:f8:e4:ac:04: 28:62:54:f3:41:bb:b3:fd:3d:60:6a:bc:9e:9e:04:74:aa:0c: 92:00:e2:5a:23:08:4c:df:38:f9:00:45:c0:bf:30:01:ff:7d: a8:ac:17:86:d6:bb:cc:0e:f6:a7:20:a0:27:37:ee:7b:d3:cc: 96:b0:20:3b:78:c0:65:c0:37:b5:f1:3e:aa:d5:e3:9d:ff:a6: 69:2f:ca:b1:c5:47:40:ab:ff:dc:81:2b:d1:78:57:1b:a9:61: b3:04:6e:0d:bb:76:d5:80:48:ea:58:2d:39:c7:71:8a:b7:af: a0:d3:17:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIZfrSHixM3vQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWQ0NzM5ZDYtMzM0MS00MzMyLTgwYTQtY2Y4MzgxYWY5ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpse93w3x+e1mCOVEhQjs5O4iEWFSwYnsuRA p/1tKg6U6mAbfpWI6eTKHBuRKvbrtPWTXjKAx7Ctr+hmajXzZuOs3glCcwsjN1lK Tnp5EuuBPKjloTFd9UzWtdPnhGAWNDW8Vdt9eTQ3BdgZZ3ko/TdtL9F4wY9flqoO 2vqAeyiQ1mW90qKyXwPM/cBTNurX92Jb3okhIMI32vyVZT9nKGj1M3ZkJQ/dVmWf vG1gLZ9nxjsbg83bPvvtNI2uvlTsGRawTyD76d1wDTUc9Zj6DAlA14Ps8KQ5WQMM KTrrEKsYl8VrjMz399meUeOEu8WCt19G9ptP6tMeMhnCy3FKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaL+gcw2jCp6xVgjo7qFSK1962eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNzA1NWI5NGYtMjI3Mi0z YTBmLThjMmYtNTY0MWFiY2NkNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/MwRgHfGNBhJ3TV0hiPuJU9MZbW4WiTo90iXdVffmKlgecWPlHKdtv e3TAMgMUGTWxfGn30LorUD2ZwI5RpxuDg86Gd1Da4qSfKn+RWUwYbBYC6qs1gIyP iOsHJyby5oLcJKEqOU5UJTwm/i/kE//pkOxcvWqIz5JHOBqzukdaXsicNdIkqtLL RqEk+OSsBChiVPNBu7P9PWBqvJ6eBHSqDJIA4lojCEzfOPkARcC/MAH/faisF4bW u8wO9qcgoCc37nvTzJawIDt4wGXAN7XxPqrV453/pmkvyrHFR0Cr/9yBK9F4Vxup YbMEbg27dtWASOpYLTnHcYq3r6DTFwM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:53:17 2025 by rpki-client