$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dbbde165-10b1-358a-8897-a0f4e427eda4.roa File: dbbde165-10b1-358a-8897-a0f4e427eda4.roa (raw, json) Hash identifier: NWsYbELhMpYDsCZ1mECKlYWJfFNpxLt6+5A19H7G3QY= Subject key identifier: 11:87:A5:3E:4D:9C:22:0D:79:83:94:EA:95:84:F6:4D:B5:04:FF:85 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAB00282516E029AEAD6F380 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dbbde165-10b1-358a-8897-a0f4e427eda4.roa Signing time: Sun 03 Aug 2025 02:35:45 +0000 ROA not before: Sun 03 Aug 2025 02:35:45 +0000 ROA not after: Sat 01 Nov 2025 02:35:45 +0000 asID: 62044 IP address blocks: 165.225.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:b0:02:82:51:6e:02:9a:ea:d6:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:45 2025 GMT Not After : Nov 1 02:35:45 2025 GMT Subject: CN=ce9559d4-5491-430d-a5ee-4095a604d445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:3f:78:e3:d6:8b:b3:8b:0a:b1:b6:d7:59: 95:aa:f4:a7:69:f8:94:e0:ec:5f:46:cd:04:91:22: 9d:6f:17:cf:69:cb:2e:93:b2:94:3c:28:17:70:b3: a7:46:98:5b:cf:de:3b:27:9e:5a:cb:b9:2a:35:23: ed:18:7e:a1:37:a8:4b:06:c3:b8:2c:7a:d6:bf:13: f9:df:83:89:18:8d:f2:dc:c9:a9:d2:dd:ce:49:ee: 3a:fa:1e:50:97:07:da:de:af:44:a3:0c:94:f1:a3: 2b:74:b6:18:bd:99:67:66:cc:66:b9:35:cf:bd:ea: 3c:5f:40:44:5b:7a:bb:04:36:32:78:9e:2c:9b:ac: 80:53:60:97:ca:25:8f:34:71:98:d8:bd:96:2c:ed: 81:91:96:22:b2:94:0b:da:fb:48:4b:1f:d8:20:89: 3e:b1:ff:84:f5:73:99:de:ec:d9:78:92:32:1f:36: 4c:c7:9c:eb:13:76:c7:f1:5b:af:23:56:7b:2e:d5: c7:8d:f0:f0:02:e1:92:92:64:80:f1:8f:ec:03:bd: 75:98:7b:f2:c1:9d:24:93:5e:48:27:05:e6:37:13: 79:1b:c9:53:c3:a6:27:3b:38:b4:48:2c:d0:35:76: b9:81:6d:7d:5b:07:f2:63:56:cf:b8:68:92:b2:ae: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:A5:3E:4D:9C:22:0D:79:83:94:EA:95:84:F6:4D:B5:04:FF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dbbde165-10b1-358a-8897-a0f4e427eda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c2:e2:22:e8:d2:9a:1e:a0:2c:f5:66:45:ba:4e:65:a1:13: 46:1a:4c:89:6c:28:17:53:9f:59:3c:57:cf:f0:58:32:fd:d5: f4:93:10:54:35:99:98:df:74:16:bd:95:07:71:30:7c:5a:fe: cd:d4:b1:e3:30:f4:16:a7:69:76:3b:44:38:53:e6:10:76:b3: 17:39:d2:32:1d:86:b3:f7:24:d7:a3:2b:3f:2d:09:56:fc:64: 1b:bb:db:4a:1f:37:d5:03:3a:c7:be:f3:ea:30:76:47:5d:6d: 4b:38:14:cf:a8:3b:3a:62:a5:d3:70:01:45:77:c9:59:1d:b5: ce:89:58:92:79:4f:7b:5d:40:e5:d3:01:7b:d8:87:22:f0:f3: b9:bb:54:76:3b:9d:ee:c3:8b:85:c8:7e:f9:0b:ef:9d:f6:5f: b0:e4:5a:c6:d4:bb:36:98:da:24:c0:53:e4:ad:65:23:b6:3c: 7c:94:b4:7a:77:a3:87:7f:d4:2b:c6:cb:46:1e:8e:c4:22:2a: 3a:e8:3a:3d:da:05:f8:14:7a:c1:43:38:cf:c0:ab:62:11:e5: 31:f3:11:b4:3c:49:e3:b8:f4:38:74:6b:88:59:86:b6:ed:4a: 31:38:89:ce:2e:4c:23:70:95:e0:a0:9c:20:2f:de:42:72:59: d7:cd:cd:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAKCUW4CmurW84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0NVoXDTI1MTEwMTAyMzU0NVowLzEtMCsGA1UEAxMk Y2U5NTU5ZDQtNTQ5MS00MzBkLWE1ZWUtNDA5NWE2MDRkNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUY/eOPWi7OLCrG211mVqvSnafiU4OxfRs0E kSKdbxfPacsuk7KUPCgXcLOnRphbz947J55ay7kqNSPtGH6hN6hLBsO4LHrWvxP5 34OJGI3y3Mmp0t3OSe46+h5Qlwfa3q9EowyU8aMrdLYYvZlnZsxmuTXPveo8X0BE W3q7BDYyeJ4sm6yAU2CXyiWPNHGY2L2WLO2BkZYispQL2vtISx/YIIk+sf+E9XOZ 3uzZeJIyHzZMx5zrE3bH8VuvI1Z7LtXHjfDwAuGSkmSA8Y/sA711mHvywZ0kk15I JwXmNxN5G8lTw6YnOzi0SCzQNXa5gW19WwfyY1bPuGiSsq6eewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGHpT5NnCINeYOU6pWE9k21BP+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGJiZGUxNjUtMTBiMS0z NThhLTg4OTctYTBmNGU0MjdlZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvC4iLo0poeoCz1ZkW6TmWhE0YaTIlsKBdTn1k8V8/wWDL91fSTEFQ1 mZjfdBa9lQdxMHxa/s3UseMw9BanaXY7RDhT5hB2sxc50jIdhrP3JNejKz8tCVb8 ZBu720ofN9UDOse+8+owdkddbUs4FM+oOzpipdNwAUV3yVkdtc6JWJJ5T3tdQOXT AXvYhyLw87m7VHY7ne7Di4XIfvkL7532X7DkWsbUuzaY2iTAU+StZSO2PHyUtHp3 o4d/1CvGy0YejsQiKjroOj3aBfgUesFDOM/Aq2IR5THzEbQ8SeO49Dh0a4hZhrbt SjE4ic4uTCNwleCgnCAv3kJyWdfNzR0= -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:54 2025 by rpki-client