$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/01c5abe8-3b70-3cc5-8085-51760d7b497b.roa File: 01c5abe8-3b70-3cc5-8085-51760d7b497b.roa (raw, json) Hash identifier: kgKZTRL14K0xN2UnFztx/p5yJt58vUvikm0lZi3Urd4= Subject key identifier: EB:E0:A4:44:F4:28:7C:01:CC:80:1D:1F:E3:02:2E:AD:23:9B:51:51 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B38218F381D19D7EAF623D700 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/01c5abe8-3b70-3cc5-8085-51760d7b497b.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 46348 IP address blocks: 65.118.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:8f:38:1d:19:d7:ea:f6:23:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=248b2f51-abdf-42ee-bcd2-238c80164ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:a7:cd:1e:ca:10:23:6c:7d:c7:f8:5b:ce: 52:9d:f5:ca:eb:45:4a:7c:14:f0:69:18:60:1a:fa: 16:33:48:fc:e4:38:75:af:ee:24:a1:a6:18:ca:fa: 41:e7:00:fb:b1:e4:41:82:4e:8e:b5:55:2c:88:c9: a7:cf:07:25:2e:f9:31:c9:2d:d5:95:af:be:f1:22: ab:74:97:e6:3e:20:c8:04:18:af:8f:82:1d:a3:1a: 12:c9:6e:19:d7:92:89:8e:d2:60:f3:51:59:67:2a: 66:f7:f8:59:a1:06:75:75:89:19:07:13:f9:a4:78: d3:2a:af:e0:a6:1a:08:b0:85:e7:dd:62:13:d5:e0: 2a:12:b8:76:ff:e7:51:b2:d3:eb:06:f3:1b:9e:94: f5:fa:39:19:7a:1f:cb:36:99:a7:66:52:6c:e9:49: b2:b1:64:91:27:b5:5a:54:16:87:ee:d3:ad:8b:ce: c2:9c:db:22:2a:e3:46:b8:37:fd:13:af:f6:1c:f2: cf:df:41:dc:1c:34:52:63:24:3d:16:98:6c:a5:c6: a7:8e:14:e1:7b:eb:79:bf:20:83:8a:53:06:7c:c4: cd:0a:0c:fe:02:2e:99:5b:d5:0d:c7:8d:bb:29:fd: a5:bd:9c:b8:d4:62:80:df:04:44:06:1e:56:b5:6a: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E0:A4:44:F4:28:7C:01:CC:80:1D:1F:E3:02:2E:AD:23:9B:51:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/01c5abe8-3b70-3cc5-8085-51760d7b497b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.118.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:7c:54:2e:33:9d:79:9b:ed:a9:3c:e2:b6:03:cd:94:b9:46: dd:f4:ec:a9:50:3c:57:b1:4b:88:59:32:0b:11:9b:74:49:85: 01:a6:ea:dd:05:7d:91:07:3e:ec:8f:ec:4e:4c:58:fc:65:df: fc:5f:b0:e3:3a:4e:65:1f:0b:06:4d:3b:95:26:f4:b0:e3:98: 83:e2:f2:25:08:57:da:2d:e8:e6:85:2e:56:ef:d8:c7:0f:67: 18:d0:fb:cd:97:21:f0:84:91:00:b1:78:2f:5f:79:58:a1:9a: 8f:30:09:74:0b:50:bd:d5:6c:22:53:55:40:a7:85:38:19:b1: 02:bc:61:a4:8e:e9:83:b0:55:1f:34:8b:b1:c8:7d:2c:c5:22: 5f:f2:fb:78:7d:07:26:17:ef:fa:94:48:d5:eb:18:08:84:ca: 7c:92:5b:8d:34:be:aa:ba:60:d5:83:c4:38:e5:f2:38:b4:be: ad:51:9d:69:56:29:85:3f:25:90:90:37:fa:46:50:09:22:ad: eb:79:f8:c4:eb:f3:4b:a9:2a:54:9f:10:a2:be:1b:43:28:15: 96:85:ac:a0:47:36:c3:b8:45:30:04:f1:57:b8:61:34:ad:04: 40:de:5c:d5:14:ef:6b:7b:8b:e2:a3:b2:b5:d9:53:7f:69:86: 69:c4:8e:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IY84HRnX6vYj1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MjQ4YjJmNTEtYWJkZi00MmVlLWJjZDItMjM4YzgwMTY0ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZqnzR7KECNsfcf4W85SnfXK60VKfBTwaRhg GvoWM0j85Dh1r+4koaYYyvpB5wD7seRBgk6OtVUsiMmnzwclLvkxyS3Vla++8SKr dJfmPiDIBBivj4IdoxoSyW4Z15KJjtJg81FZZypm9/hZoQZ1dYkZBxP5pHjTKq/g phoIsIXn3WIT1eAqErh2/+dRstPrBvMbnpT1+jkZeh/LNpmnZlJs6UmysWSRJ7Va VBaH7tOti87CnNsiKuNGuDf9E6/2HPLP30HcHDRSYyQ9FphspcanjhThe+t5vyCD ilMGfMTNCgz+Ai6ZW9UNx427Kf2lvZy41GKA3wREBh5WtWo7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvgpET0KHwBzIAdH+MCLq0jm1FRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMDFjNWFiZTgtM2I3MC0z Y2M1LTgwODUtNTE3NjBkN2I0OTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQXZ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALp8VC4znXmb7ak84rYDzZS5Rt307KlQPFexS4hZMgsRm3RJhQGm6t0F fZEHPuyP7E5MWPxl3/xfsOM6TmUfCwZNO5Um9LDjmIPi8iUIV9ot6OaFLlbv2McP ZxjQ+82XIfCEkQCxeC9feVihmo8wCXQLUL3VbCJTVUCnhTgZsQK8YaSO6YOwVR80 i7HIfSzFIl/y+3h9ByYX7/qUSNXrGAiEynySW400vqq6YNWDxDjl8ji0vq1RnWlW KYU/JZCQN/pGUAkiret5+MTr80upKlSfEKK+G0MoFZaFrKBHNsO4RTAE8Ve4YTSt BEDeXNUU72t7i+KjsrXZU39phmnEjps= -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:31 2025 by rpki-client