$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8c120d72-1fce-35b6-80b9-cc3a1a79dae2.roa File: 8c120d72-1fce-35b6-80b9-cc3a1a79dae2.roa (raw, json) Hash identifier: zn9+SqyjChICRuEwTzmZgMIOnuOpwb0jZW0bIlhScKM= Subject key identifier: 59:1D:F0:D0:77:C4:CE:87:BC:F7:AD:F1:1F:2F:AF:3D:63:0E:9F:79 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFC805654ADFC1AE0BE80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8c120d72-1fce-35b6-80b9-cc3a1a79dae2.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fc:80:56:54:ad:fc:1a:e0:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=77d973bf-b754-440b-ae7d-f6a0c0531a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:c4:b7:d1:d4:9c:ab:b4:07:27:29:56:4e: 9b:ec:08:ed:89:2c:4f:73:2e:33:0c:65:9e:f0:1c: 39:3c:de:1b:39:77:9f:f2:d3:34:50:c3:d3:71:71: 51:ce:bd:12:97:9e:11:69:e2:af:05:d6:f4:fc:44: 1b:5a:4b:4f:4c:32:f2:37:a1:4a:1a:64:5e:1b:7b: eb:c7:10:2d:9c:a0:39:63:47:ae:10:cc:02:c2:1a: a6:7d:02:88:89:47:9f:69:a7:24:16:4c:94:ca:8a: 71:60:1f:ba:2e:c0:b2:de:47:ca:bf:d2:c2:eb:3b: fb:11:2e:0c:89:64:72:c3:a3:1e:c9:5f:83:01:fb: de:a5:40:e7:93:65:b4:3a:5a:25:13:5c:44:51:f2: 15:c8:ad:2c:4d:d9:ff:25:a9:81:f4:97:7b:fe:1e: ab:38:85:8f:84:65:b6:ee:42:aa:9c:8d:44:39:16: 86:48:4d:44:e5:cc:70:e6:42:93:2c:7f:2e:54:22: b0:3c:71:3e:5a:2d:8a:c2:b9:2c:db:46:94:4a:04: 2c:77:be:2e:86:ea:c8:6d:6f:46:6f:88:fa:79:ad: 96:25:6f:b7:78:11:0c:46:dc:29:f8:5e:30:71:7f: c1:f3:30:bb:44:da:04:d4:c6:b9:9b:21:83:c2:15: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:F0:D0:77:C4:CE:87:BC:F7:AD:F1:1F:2F:AF:3D:63:0E:9F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8c120d72-1fce-35b6-80b9-cc3a1a79dae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:38:d1:8a:4d:ec:e5:9a:d4:ca:0e:e9:51:e5:fb:a8:65:d8: 5a:21:03:74:3c:63:29:ba:fe:f5:8c:fd:4d:d6:e9:fe:d8:a4: fb:6b:7c:e4:60:06:7f:36:d1:7d:77:af:53:97:56:9d:ad:1c: b1:84:44:99:48:5d:1b:93:a6:3d:f6:08:03:3a:4f:58:89:99: 66:4b:88:a0:43:95:04:5f:5c:4f:f2:05:34:31:db:7c:4c:f1: b1:65:7f:a4:40:6a:49:57:ef:2f:a8:08:2e:99:a6:fe:b2:73: dc:7f:50:fc:5c:af:cf:7e:fc:e9:e2:68:65:00:e9:d4:11:6b: 4e:d9:ed:2f:8f:7f:6d:dc:99:f8:88:07:4f:0a:e1:da:90:b0: 70:d2:3d:ac:9b:0f:b9:7a:7a:5e:3a:ed:7d:74:aa:4d:cf:ca: 36:e5:9c:e3:ba:36:a0:26:40:1a:f0:79:90:f8:fe:43:28:9b: a7:1c:04:c5:ed:4d:da:68:90:2e:f0:72:69:a9:53:03:d9:81: f4:44:09:b8:1d:9b:1f:47:76:da:bf:88:eb:69:16:57:2a:25: cd:3a:6f:5d:e8:52:1c:a7:a0:a8:57:e5:a3:ac:b6:8b:76:0d: f2:24:a2:d2:57:56:0d:1f:cd:42:fe:43:b7:04:f8:77:32:6a: 0d:c8:3c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPyAVlSt/BrgvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NzdkOTczYmYtYjc1NC00NDBiLWFlN2QtZjZhMGMwNTMxYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqzEt9HUnKu0BycpVk6b7AjtiSxPcy4zDGWe 8Bw5PN4bOXef8tM0UMPTcXFRzr0Sl54RaeKvBdb0/EQbWktPTDLyN6FKGmReG3vr xxAtnKA5Y0euEMwCwhqmfQKIiUefaackFkyUyopxYB+6LsCy3kfKv9LC6zv7ES4M iWRyw6MeyV+DAfvepUDnk2W0OlolE1xEUfIVyK0sTdn/JamB9Jd7/h6rOIWPhGW2 7kKqnI1EORaGSE1E5cxw5kKTLH8uVCKwPHE+Wi2Kwrks20aUSgQsd74uhurIbW9G b4j6ea2WJW+3eBEMRtwp+F4wcX/B8zC7RNoE1Ma5myGDwhVrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkd8NB3xM6HvPet8R8vrz1jDp95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOGMxMjBkNzItMWZjZS0z NWI2LTgwYjktY2MzYTFhNzlkYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc40YpN7OWa1MoO6VHl+6hl2FohA3Q8Yym6/vWM/U3W6f7YpPtrfORg Bn820X13r1OXVp2tHLGERJlIXRuTpj32CAM6T1iJmWZLiKBDlQRfXE/yBTQx23xM 8bFlf6RAaklX7y+oCC6Zpv6yc9x/UPxcr89+/OniaGUA6dQRa07Z7S+Pf23cmfiI B08K4dqQsHDSPaybD7l6el467X10qk3PyjblnOO6NqAmQBrweZD4/kMom6ccBMXt TdpokC7wcmmpUwPZgfRECbgdmx9Hdtq/iOtpFlcqJc06b13oUhynoKhX5aOstot2 DfIkotJXVg0fzUL+Q7cE+Hcyag3IPDA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:27 2025 by rpki-client