$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa File: c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa (raw, json) Hash identifier: USuRy0x3VSPe8nusd8ddVJAYzUD5DsLvoixBW9lDAME= Subject key identifier: A6:DF:51:E7:3E:FB:72:38:AC:A6:EA:B4:F7:F9:FE:19:FE:E2:FF:7F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFCBB707D07BB993A0480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fc:bb:70:7d:07:bb:99:3a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=05cbb852-6c9e-4ee0-9a03-8946aecf2a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:f6:cd:0f:56:08:e8:32:51:b1:57:0d:5f: 12:f4:5d:61:b0:a0:f2:0f:cc:43:63:34:62:8c:e7: 21:1a:a9:c7:ce:8f:6f:3b:4f:57:e1:f7:42:3e:6c: fb:a7:6f:96:b2:fa:a2:f7:52:bc:66:53:56:6d:12: 85:bb:20:77:f5:2c:9a:5c:7d:a3:60:eb:5b:3e:9f: bd:f9:06:d9:ab:65:cd:ba:8d:55:b4:54:b7:db:a8: f4:c8:6e:56:85:2d:44:93:2f:db:89:33:f9:ba:e4: 31:9f:d2:c2:56:bd:74:ab:07:1c:2a:33:e2:24:f3: 8a:e4:6c:1f:b2:b1:4f:77:0f:ab:83:4d:52:63:bb: 4a:d5:e6:75:81:ab:af:3f:49:9b:ce:47:70:99:29: d6:08:51:fc:a8:25:80:ab:ab:16:1a:c5:48:9f:32: 73:24:d0:49:38:d3:57:e9:4d:1e:e2:b8:2d:bb:b5: 10:90:af:dc:c9:ea:41:04:e7:fb:2d:67:b8:fd:60: d4:0f:12:80:06:6a:d6:41:26:e5:d4:7d:36:b8:f6: ad:3a:3f:e2:fd:58:34:ae:c5:2c:2a:32:75:ab:8a: be:d8:32:da:62:15:1f:a5:49:6a:1c:f8:44:80:5c: 04:36:78:9f:f8:db:93:de:00:6c:c0:ff:e3:17:d8: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DF:51:E7:3E:FB:72:38:AC:A6:EA:B4:F7:F9:FE:19:FE:E2:FF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c36d2c3a-32a9-3381-a7ed-2a934cff1d11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c8:06:fb:5b:8c:14:4f:2c:f8:dc:4a:12:9f:f3:bc:3e:71: a5:78:c9:d1:78:ef:4b:33:41:e7:d4:d1:4d:07:1c:48:7d:dc: f1:f9:2b:51:4b:37:61:24:58:57:28:64:93:1e:2c:7e:6c:ed: 6c:ee:09:6c:3e:84:b0:f6:43:19:d1:d2:49:1f:02:a0:32:8c: cf:53:87:cc:32:66:f6:1d:8c:c7:b0:09:f7:9b:00:09:ac:c8: 5b:9a:50:31:1d:8a:b8:71:74:0d:55:82:c4:ca:6b:cc:dc:99: 4d:a4:c9:ce:52:c2:d6:26:df:1d:0e:11:17:7a:bf:fa:68:ff: a0:18:db:27:d2:ec:c7:c5:17:33:30:5a:4f:74:9e:d0:fd:4c: 79:07:32:d8:b8:68:b1:e3:bb:c5:f6:2e:88:0d:cb:84:e5:4d: 5f:4c:eb:a3:db:5c:82:23:d2:ac:4b:6b:ed:91:7f:c5:45:13: e4:01:8c:46:83:a6:38:ad:d0:89:54:b8:e5:1d:a9:5d:d7:a6: 31:3d:48:d2:5b:3e:72:2e:e8:02:1e:eb:c7:c1:14:56:7e:5b: 13:cc:a9:3a:8f:80:7a:6e:ca:a5:b1:c0:3e:3f:02:a9:ac:4f: ea:a4:6e:e8:69:da:da:13:ad:8c:6d:90:50:93:ee:df:83:1e: b4:e9:fc:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPy7cH0Hu5k6BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MDVjYmI4NTItNmM5ZS00ZWUwLTlhMDMtODk0NmFlY2YyYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtD2zQ9WCOgyUbFXDV8S9F1hsKDyD8xDYzRi jOchGqnHzo9vO09X4fdCPmz7p2+Wsvqi91K8ZlNWbRKFuyB39SyaXH2jYOtbPp+9 +QbZq2XNuo1VtFS326j0yG5WhS1Eky/biTP5uuQxn9LCVr10qwccKjPiJPOK5Gwf srFPdw+rg01SY7tK1eZ1gauvP0mbzkdwmSnWCFH8qCWAq6sWGsVInzJzJNBJONNX 6U0e4rgtu7UQkK/cyepBBOf7LWe4/WDUDxKABmrWQSbl1H02uPatOj/i/Vg0rsUs KjJ1q4q+2DLaYhUfpUlqHPhEgFwENnif+NuT3gBswP/jF9hSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbfUec++3I4rKbqtPf5/hn+4v9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzM2ZDJjM2EtMzJhOS0z MzgxLWE3ZWQtMmE5MzRjZmYxZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/IBvtbjBRPLPjcShKf87w+caV4ydF470szQefU0U0HHEh93PH5K1FL N2EkWFcoZJMeLH5s7WzuCWw+hLD2QxnR0kkfAqAyjM9Th8wyZvYdjMewCfebAAms yFuaUDEdirhxdA1VgsTKa8zcmU2kyc5SwtYm3x0OERd6v/po/6AY2yfS7MfFFzMw Wk90ntD9THkHMti4aLHju8X2LogNy4TlTV9M66PbXIIj0qxLa+2Rf8VFE+QBjEaD pjit0IlUuOUdqV3XpjE9SNJbPnIu6AIe68fBFFZ+WxPMqTqPgHpuyqWxwD4/Aqms T+qkbuhp2toTrYxtkFCT7t+DHrTp/MM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:19:27 2025 by rpki-client