$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1e7dd07-dcd6-3ad3-9160-da2368db9090.roa File: d1e7dd07-dcd6-3ad3-9160-da2368db9090.roa (raw, json) Hash identifier: 0XCsCgzsrZ2NQF9s4gSlKwaHy8ycpYvWPWBQwLQo0vM= Subject key identifier: D0:C0:5E:3C:3B:F8:10:4B:80:D7:87:69:A7:54:F2:FD:86:19:09:F7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF7AB476C3AB412669A80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1e7dd07-dcd6-3ad3-9160-da2368db9090.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f7:ab:47:6c:3a:b4:12:66:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=25351a0b-66ea-403a-8003-cdd157b98165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:86:fa:88:dc:d2:46:42:79:8f:81:0c:c2:d8: 48:50:b3:48:fc:27:dc:dc:b7:1e:8b:ee:be:a4:13: d3:41:93:9d:2d:54:46:94:eb:f9:94:9d:7f:70:5f: 5a:90:46:23:e5:19:61:a8:ee:ef:ca:5a:a7:30:35: d6:ce:80:15:12:ec:c9:ba:05:96:6f:d0:6f:36:48: 7d:6a:83:fd:53:51:24:04:29:c0:03:ff:c0:50:39: 00:3f:c6:cf:a2:c6:58:c9:79:2b:b4:0e:74:63:f1: f4:f3:99:4e:cf:f6:f3:4f:c8:5b:8f:8a:3c:a6:cd: 81:ba:86:d5:0f:08:b6:2b:12:c4:ec:9e:00:3d:35: 8c:d2:cd:f4:c0:4b:ff:7a:be:ca:9b:63:44:d9:45: 38:cb:22:e4:e7:bb:e9:5b:3a:ec:90:4d:dc:eb:49: 31:06:aa:21:2a:eb:ef:96:11:a5:a5:e4:3b:4e:b4: c7:87:0a:53:ab:e4:0c:72:77:72:a7:68:e6:51:0c: 9c:d8:c4:6b:c4:78:1d:36:3d:36:48:25:92:4c:ee: 21:0f:ab:87:d1:62:dd:5e:80:e4:d5:1e:0b:a9:ef: b1:f8:a4:ac:22:3e:bb:54:88:66:0a:7a:f3:10:dc: e1:cf:21:18:d3:4c:fd:64:c4:c3:39:75:54:90:13: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C0:5E:3C:3B:F8:10:4B:80:D7:87:69:A7:54:F2:FD:86:19:09:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1e7dd07-dcd6-3ad3-9160-da2368db9090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:95:85:f8:d3:61:6a:bd:81:64:ce:c9:c4:37:c6:aa:94:a6: e4:80:63:02:58:f7:97:9b:37:bd:83:3a:c1:d8:b2:b9:df:c2: 80:8d:34:76:28:78:44:b3:d5:63:55:2c:ce:5e:42:ae:7a:31: 3c:24:63:01:db:8e:a7:35:6b:5d:74:65:f7:0a:ad:1c:0a:55: 02:6a:f4:20:ea:be:8f:66:fd:d3:7b:d6:86:3c:48:46:5d:52: fe:d2:ee:5f:38:2f:e5:e2:2e:2f:69:af:39:38:5b:62:cf:e8: 04:ff:d8:92:5a:83:cb:04:12:54:f6:af:89:a6:c2:d8:ae:74: 41:ff:39:f8:15:96:e0:96:af:c5:ff:57:8b:47:86:a8:6c:0c: 8f:0d:79:b3:77:fc:c5:76:76:d6:ee:e7:e4:bb:b8:b0:0d:3b: 36:c5:11:83:e1:6b:54:25:7f:8d:73:a1:ef:55:a3:8c:96:84: f5:00:5d:8d:b4:1f:00:da:59:ed:19:d2:27:2c:73:71:1f:4c: 6c:54:f9:b6:ed:09:5e:aa:3c:01:cd:85:a8:e9:ca:1d:3d:42: 52:54:64:3d:06:d9:12:8a:8c:a5:9c:76:ac:66:e4:33:c4:09: 34:a6:dd:a7:d2:88:ff:f1:a3:0b:ff:c6:2d:bc:ff:1b:e9:95: e0:1d:66:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPerR2w6tBJmmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MjUzNTFhMGItNjZlYS00MDNhLTgwMDMtY2RkMTU3Yjk4MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4b6iNzSRkJ5j4EMwthIULNI/Cfc3Lcei+6+ pBPTQZOdLVRGlOv5lJ1/cF9akEYj5RlhqO7vylqnMDXWzoAVEuzJugWWb9BvNkh9 aoP9U1EkBCnAA//AUDkAP8bPosZYyXkrtA50Y/H085lOz/bzT8hbj4o8ps2BuobV Dwi2KxLE7J4APTWM0s30wEv/er7Km2NE2UU4yyLk57vpWzrskE3c60kxBqohKuvv lhGlpeQ7TrTHhwpTq+QMcndyp2jmUQyc2MRrxHgdNj02SCWSTO4hD6uH0WLdXoDk 1R4Lqe+x+KSsIj67VIhmCnrzENzhzyEY00z9ZMTDOXVUkBPhQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDAXjw7+BBLgNeHaadU8v2GGQn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDFlN2RkMDctZGNkNi0z YWQzLTkxNjAtZGEyMzY4ZGI5MDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESVhfjTYWq9gWTOycQ3xqqUpuSAYwJY95ebN72DOsHYsrnfwoCNNHYo eESz1WNVLM5eQq56MTwkYwHbjqc1a110ZfcKrRwKVQJq9CDqvo9m/dN71oY8SEZd Uv7S7l84L+XiLi9przk4W2LP6AT/2JJag8sEElT2r4mmwtiudEH/OfgVluCWr8X/ V4tHhqhsDI8NebN3/MV2dtbu5+S7uLANOzbFEYPha1Qlf41zoe9Vo4yWhPUAXY20 HwDaWe0Z0icsc3EfTGxU+bbtCV6qPAHNhajpyh09QlJUZD0G2RKKjKWcdqxm5DPE CTSm3afSiP/xowv/xi28/xvpleAdZqk= -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:05 2025 by rpki-client