$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1b918b7-6c49-3f1e-b071-32667cd45682.roa File: d1b918b7-6c49-3f1e-b071-32667cd45682.roa (raw, json) Hash identifier: 1mjTEZ485JjecrNgRDuERZoiAmymgEh19aAlua/r0Ds= Subject key identifier: 92:4F:94:59:21:10:CC:97:F4:2F:89:68:8E:26:53:12:DE:28:F5:43 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF999186957B1A6156768 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1b918b7-6c49-3f1e-b071-32667cd45682.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f9:99:18:69:57:b1:a6:15:67:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=32f0d818-5adb-4fed-8bd0-aaecf22929b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:44:fd:64:90:22:d6:0e:51:67:65:6e:87: 79:07:81:a4:80:f5:05:51:cc:c6:9b:96:90:f9:1c: d3:95:04:ca:b8:18:5c:c4:2a:82:24:c2:0b:bb:19: 68:67:1e:fa:f0:d2:93:e9:29:ce:7a:9f:09:22:14: 0d:a4:58:fa:f0:75:5a:67:d6:45:0f:3b:ca:b2:1d: 3b:cc:0e:33:95:23:41:a0:ab:9b:12:0f:a0:3d:55: ac:94:ff:de:fc:25:75:20:ec:b4:fb:d1:ed:4c:b1: f8:44:64:6b:66:db:37:9a:6e:b4:d4:6a:c1:52:74: d5:b6:41:34:e8:b4:74:cb:b2:67:d8:47:5c:10:c1: 83:2d:c3:d5:70:de:5c:e2:3f:42:31:d2:1c:f8:77: 03:12:86:6b:a1:f2:4f:b1:e3:87:78:33:af:d8:1e: 1d:c5:17:eb:bf:04:8a:45:8d:99:af:65:59:a8:00: d4:8b:1b:ef:28:38:c0:32:b3:53:f0:5e:00:12:52: 7e:5a:7e:5c:c4:77:cb:5a:f7:f1:e5:f8:2e:63:b1: 69:17:d7:b5:60:63:59:89:72:8e:8d:90:b3:1f:4e: 67:2a:65:8d:e3:a2:a7:6b:14:c6:b4:38:d6:0c:39: cc:9c:5c:e0:48:c2:ee:58:e6:0b:f8:4d:a0:49:dd: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:94:59:21:10:CC:97:F4:2F:89:68:8E:26:53:12:DE:28:F5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1b918b7-6c49-3f1e-b071-32667cd45682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:dc:79:20:a4:97:8c:c9:0a:a2:a3:f6:8f:f6:a5:27:c1:7c: d2:e4:86:87:e7:cf:d0:f5:30:bb:68:e2:80:c2:72:46:b2:bb: 9d:1b:ec:5a:7e:0c:54:d9:1a:80:e4:4e:e1:26:73:24:3b:c6: ab:e6:00:db:53:ca:03:60:fa:2e:57:26:f4:b9:94:05:1d:db: 92:62:f0:0c:ac:e0:e0:b1:c5:20:0a:56:ae:a1:28:08:e3:e0: 2f:2e:e9:69:d1:91:e9:d5:04:3d:aa:dd:0f:0f:b3:9d:98:13: 1c:fd:6c:23:80:08:43:0e:fa:f1:9c:f5:2d:1a:b0:65:54:03: ea:80:f4:c8:df:5c:aa:61:db:c2:b3:d5:5e:1a:83:b0:69:7a: 61:22:8b:3f:77:0f:44:b7:ea:ec:bf:10:04:26:fd:5d:67:14: bb:4b:0c:fc:4c:81:ba:73:2e:56:1c:f4:1d:ec:54:49:32:f0: 64:0d:7c:63:6c:fa:58:83:01:0b:c5:c6:77:8b:8f:c8:e7:46: 8c:63:95:d3:54:43:a0:ce:76:86:1f:07:f1:f4:75:7d:b2:4c: 9e:8a:85:ab:35:02:e3:38:9a:80:4c:55:f7:da:73:26:16:48: 19:52:f1:08:9e:60:f6:c1:11:ed:04:03:56:e4:ba:c4:a7:ae: be:f0:a0:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPmZGGlXsaYVZ2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MzJmMGQ4MTgtNWFkYi00ZmVkLThiZDAtYWFlY2YyMjkyOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPpE/WSQItYOUWdlbod5B4GkgPUFUczGm5aQ +RzTlQTKuBhcxCqCJMILuxloZx768NKT6SnOep8JIhQNpFj68HVaZ9ZFDzvKsh07 zA4zlSNBoKubEg+gPVWslP/e/CV1IOy0+9HtTLH4RGRrZts3mm601GrBUnTVtkE0 6LR0y7Jn2EdcEMGDLcPVcN5c4j9CMdIc+HcDEoZrofJPseOHeDOv2B4dxRfrvwSK RY2Zr2VZqADUixvvKDjAMrNT8F4AElJ+Wn5cxHfLWvfx5fguY7FpF9e1YGNZiXKO jZCzH05nKmWN46KnaxTGtDjWDDnMnFzgSMLuWOYL+E2gSd0cEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJPlFkhEMyX9C+JaI4mUxLeKPVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDFiOTE4YjctNmM0OS0z ZjFlLWIwNzEtMzI2NjdjZDQ1NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLceSCkl4zJCqKj9o/2pSfBfNLkhofnz9D1MLto4oDCckayu50b7Fp+ DFTZGoDkTuEmcyQ7xqvmANtTygNg+i5XJvS5lAUd25Ji8Ays4OCxxSAKVq6hKAjj 4C8u6WnRkenVBD2q3Q8Ps52YExz9bCOACEMO+vGc9S0asGVUA+qA9MjfXKph28Kz 1V4ag7BpemEiiz93D0S36uy/EAQm/V1nFLtLDPxMgbpzLlYc9B3sVEky8GQNfGNs +liDAQvFxneLj8jnRoxjldNUQ6DOdoYfB/H0dX2yTJ6Khas1AuM4moBMVffacyYW SBlS8QieYPbBEe0EA1bkusSnrr7woMU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:14:10 2025 by rpki-client