$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f70bdc08-ca54-3aa4-a97f-5ac00518d485.roa File: f70bdc08-ca54-3aa4-a97f-5ac00518d485.roa (raw, json) Hash identifier: /2lJZagrWXENuV/9b4HaO0m1b0CpchEKGNjBFvDoi6g= Subject key identifier: 28:63:7B:12:48:78:79:57:4E:5B:00:ED:F2:7B:C7:C0:37:40:BA:91 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CFBC778A4F8A0CD0EBA60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f70bdc08-ca54-3aa4-a97f-5ac00518d485.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 165.225.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:fb:c7:78:a4:f8:a0:cd:0e:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=f61c12ba-9147-4028-b0f5-bc89ba0eb3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:94:5c:26:1a:f1:f8:16:0c:ae:31:41:a1: 38:bf:73:a4:1f:3d:42:a2:af:6c:d1:71:a8:e7:7c: 9a:30:43:e4:b7:33:49:1d:60:dd:eb:6f:63:e6:48: 77:c9:1f:eb:9e:77:b4:3b:3e:58:71:ee:2a:fb:76: 32:cf:f7:75:66:b4:8b:4b:82:4d:d1:84:d6:c9:d6: 00:88:87:f2:dc:15:9f:19:42:d5:63:29:9f:f7:dd: 88:7e:e0:cd:dd:4b:76:61:0a:54:7c:36:b6:49:23: 43:48:03:d8:a0:a4:79:00:c0:92:37:31:cb:11:7b: 31:e9:cd:6a:b2:d3:cb:56:8b:73:e3:37:42:4c:82: c5:37:20:af:f2:1e:85:b2:9b:06:96:1a:6d:b2:87: 93:b8:30:09:f8:b2:15:36:76:66:94:b2:9c:4e:98: 2a:9c:32:d6:bb:d5:9a:c7:ff:29:23:bf:1d:1f:5d: bb:c1:15:c3:71:8d:9b:16:74:fe:d7:a7:50:f0:3f: 26:d6:69:fe:dd:0d:0c:7d:c7:a6:0c:5c:0a:71:cb: e3:6b:0e:f7:2d:02:8d:34:77:9f:19:e3:04:1e:24: 36:ea:05:92:b3:3b:fd:ac:e8:e2:1f:e3:c7:13:06: f9:e7:a5:10:44:fc:01:d7:3d:10:ce:d0:7d:a4:c8: b7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:7B:12:48:78:79:57:4E:5B:00:ED:F2:7B:C7:C0:37:40:BA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f70bdc08-ca54-3aa4-a97f-5ac00518d485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f4:4e:cb:c6:c2:20:01:5a:87:b2:1a:7a:82:f5:b4:31:95: 03:86:c6:60:a4:82:f3:26:a9:21:53:ec:f5:f4:da:0f:01:79: 9b:c3:26:eb:02:6c:0d:24:32:98:1b:a2:78:78:48:f9:99:de: d8:17:4a:f9:85:f8:d8:42:c4:35:9e:20:9d:cb:c5:c8:99:49: 26:32:71:08:a3:d9:1b:eb:66:46:ed:46:30:35:56:0f:6b:fa: b9:ea:0a:5d:ac:e3:4f:ca:a3:f6:3f:5c:55:3f:67:ca:d5:5c: 2b:6f:04:9f:1b:82:2e:c6:a0:59:06:8e:f6:4c:2e:b9:cb:25: b0:53:e8:e1:0f:bc:fb:ea:c5:48:6a:6f:02:59:50:d2:16:1d: 46:e8:50:04:be:ca:d7:34:d9:5b:51:60:32:21:7d:40:c7:a9: 29:51:4c:9c:e8:54:27:ff:34:a1:21:fb:07:ec:20:eb:2c:d0: d7:a3:fe:0c:9d:a8:29:32:a0:8f:af:0a:7e:41:39:32:42:d3: d6:02:30:6f:c5:a6:03:07:3d:2f:26:8e:82:18:cb:17:7f:ac: 6d:f6:ce:f3:80:a4:b3:b6:54:eb:35:e2:23:6b:1b:95:d5:c4: ad:69:ac:35:41:7a:20:33:98:8a:ca:0b:7a:5f:b0:fd:dc:e2: 6d:55:6f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPvHeKT4oM0OumAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZjYxYzEyYmEtOTE0Ny00MDI4LWIwZjUtYmM4OWJhMGViM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyziUXCYa8fgWDK4xQaE4v3OkHz1Coq9s0XGo 53yaMEPktzNJHWDd629j5kh3yR/rnne0Oz5Yce4q+3Yyz/d1ZrSLS4JN0YTWydYA iIfy3BWfGULVYymf992IfuDN3Ut2YQpUfDa2SSNDSAPYoKR5AMCSNzHLEXsx6c1q stPLVotz4zdCTILFNyCv8h6FspsGlhptsoeTuDAJ+LIVNnZmlLKcTpgqnDLWu9Wa x/8pI78dH127wRXDcY2bFnT+16dQ8D8m1mn+3Q0MfcemDFwKccvjaw73LQKNNHef GeMEHiQ26gWSszv9rOjiH+PHEwb556UQRPwB1z0QztB9pMi3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChjexJIeHlXTlsA7fJ7x8A3QLqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjcwYmRjMDgtY2E1NC0z YWE0LWE5N2YtNWFjMDA1MThkNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ30TsvGwiABWoeyGnqC9bQxlQOGxmCkgvMmqSFT7PX02g8BeZvDJusC bA0kMpgbonh4SPmZ3tgXSvmF+NhCxDWeIJ3LxciZSSYycQij2RvrZkbtRjA1Vg9r +rnqCl2s40/Ko/Y/XFU/Z8rVXCtvBJ8bgi7GoFkGjvZMLrnLJbBT6OEPvPvqxUhq bwJZUNIWHUboUAS+ytc02VtRYDIhfUDHqSlRTJzoVCf/NKEh+wfsIOss0Nej/gyd qCkyoI+vCn5BOTJC09YCMG/FpgMHPS8mjoIYyxd/rG32zvOApLO2VOs14iNrG5XV xK1prDVBeiAzmIrKC3pfsP3c4m1Vbys= -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:49 2025 by rpki-client