$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c39f6651-0812-3c2c-a32f-615026376317.roa File: c39f6651-0812-3c2c-a32f-615026376317.roa (raw, json) Hash identifier: 4x6mUVownZGw6upVeG44qzpBx+Rw89vvjkD57UzOgf0= Subject key identifier: 85:28:88:D0:11:6B:6D:29:9A:B5:58:76:11:84:A3:17:CF:1E:26:7E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFB7972434A2669DF3D80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c39f6651-0812-3c2c-a32f-615026376317.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fb:79:72:43:4a:26:69:df:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=9cbcc6a4-0dd3-490d-926a-1411c6b25db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:d0:c9:1f:d9:9d:c7:7a:da:ef:0c:fb:b5: cd:43:b2:e8:34:21:c2:b4:56:65:5a:d0:87:b4:0e: 9a:ae:02:83:23:d5:21:61:07:25:7d:46:82:4a:73: 23:70:f7:73:39:ec:f3:9c:7e:99:15:69:f7:23:ee: c6:3e:5b:6b:ec:c5:c6:d1:19:86:33:e7:dc:9d:a0: a9:36:d5:39:fe:62:82:c0:15:3b:30:10:42:f7:89: 82:29:53:b5:31:5d:a1:a1:6e:ec:80:3d:f8:ed:30: 90:b5:db:e1:a8:ca:52:15:a8:40:53:6e:49:42:9d: 81:7d:22:e7:e0:48:71:c0:28:2a:92:67:39:40:0b: de:ae:1b:13:6a:72:d4:4b:b8:48:12:33:d0:09:0a: 1a:69:84:32:ed:a0:3b:34:3b:15:25:bc:a8:82:25: 1f:a5:81:89:64:99:a6:34:f6:f3:74:a1:9a:61:2a: 11:84:e9:b6:19:83:2e:d6:de:cb:9e:99:93:ef:02: 39:b9:aa:7c:03:0f:b3:d5:7c:86:1e:11:87:7e:0e: 8c:d4:54:5e:01:61:9b:b4:4e:78:d7:40:e3:87:31: 57:32:97:89:ba:16:e1:0c:87:a7:31:4a:51:b3:23: ce:41:1e:1b:51:3d:1b:30:d6:9b:cd:ae:0a:0b:9a: 6c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:28:88:D0:11:6B:6D:29:9A:B5:58:76:11:84:A3:17:CF:1E:26:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c39f6651-0812-3c2c-a32f-615026376317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:6f:f9:b9:aa:bf:eb:55:0e:8a:89:a8:96:da:46:b4:3d:d0: 08:e8:48:30:98:46:09:65:d7:01:72:f3:5a:e6:e9:c0:03:2b: 9c:34:e5:4d:dc:3f:ce:7b:85:87:b4:5c:21:6b:26:97:52:c9: d6:0d:03:c3:24:8b:ff:16:b7:c5:6d:49:c3:cb:d7:93:72:48: 42:1d:26:67:b6:63:50:cb:1c:a8:bc:96:54:79:32:2c:4a:c1: 8c:a5:63:ab:66:8d:b9:87:20:6b:af:29:c1:24:9a:a6:b9:55: 61:d0:7d:46:11:c7:f6:0e:41:b5:e4:53:13:4f:36:94:af:25: fe:10:13:68:42:00:d2:ac:1a:92:3a:51:86:36:66:34:eb:08: 15:8c:c7:ff:83:01:d5:81:35:25:f7:84:f6:a5:ba:5d:0e:14: f1:3b:7d:de:b1:98:20:c0:83:a1:45:70:80:82:36:93:2d:c8: 5d:95:89:43:35:94:0e:be:b2:83:05:82:f9:c4:ff:f4:8a:8b: 05:c3:40:bf:92:81:54:1c:1e:a3:f7:6d:2c:40:e2:f4:70:8b: 1c:25:d5:5d:2d:09:fb:2e:42:ac:3f:20:4f:1f:47:9e:aa:81: 3c:d9:5b:d1:ff:50:a2:df:9b:51:40:bf:63:83:1e:98:61:41: 3a:5e:4c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPt5ckNKJmnfPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OWNiY2M2YTQtMGRkMy00OTBkLTkyNmEtMTQxMWM2YjI1ZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswDQyR/Zncd62u8M+7XNQ7LoNCHCtFZlWtCH tA6argKDI9UhYQclfUaCSnMjcPdzOezznH6ZFWn3I+7GPltr7MXG0RmGM+fcnaCp NtU5/mKCwBU7MBBC94mCKVO1MV2hoW7sgD347TCQtdvhqMpSFahAU25JQp2BfSLn 4EhxwCgqkmc5QAverhsTanLUS7hIEjPQCQoaaYQy7aA7NDsVJbyogiUfpYGJZJmm NPbzdKGaYSoRhOm2GYMu1t7LnpmT7wI5uap8Aw+z1XyGHhGHfg6M1FReAWGbtE54 10DjhzFXMpeJuhbhDIenMUpRsyPOQR4bUT0bMNabza4KC5psnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUoiNARa20pmrVYdhGEoxfPHiZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzM5ZjY2NTEtMDgxMi0z YzJjLWEzMmYtNjE1MDI2Mzc2MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhv+bmqv+tVDoqJqJbaRrQ90AjoSDCYRgll1wFy81rm6cADK5w05U3c P857hYe0XCFrJpdSydYNA8Mki/8Wt8VtScPL15NySEIdJme2Y1DLHKi8llR5MixK wYylY6tmjbmHIGuvKcEkmqa5VWHQfUYRx/YOQbXkUxNPNpSvJf4QE2hCANKsGpI6 UYY2ZjTrCBWMx/+DAdWBNSX3hPalul0OFPE7fd6xmCDAg6FFcICCNpMtyF2ViUM1 lA6+soMFgvnE//SKiwXDQL+SgVQcHqP3bSxA4vRwixwl1V0tCfsuQqw/IE8fR56q gTzZW9H/UKLfm1FAv2ODHphhQTpeTNY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:28 2025 by rpki-client