$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa File: 7fa946ff-2576-3c20-a017-5633e6ef2732.roa (raw, json) Hash identifier: 9rNOevkKriyM62OlWWwlIIRs/G/Y2Btw7mq4lSb4yzA= Subject key identifier: A8:70:03:4C:A4:F0:C1:8F:60:A5:E0:61:54:50:16:79:54:13:13:19 Certificate issuer: /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Certificate serial: 010D0C9F4328584BB19261DD1311EBB213F80F00 Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 165.125.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:61:dd:13:11:eb:b2:13:f8:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=41dc20e6-360c-4fbb-acd9-2b6a775c117c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:44:d0:2a:01:75:56:0c:b2:86:3e:48:29: cf:34:28:05:62:a1:52:f3:a8:1e:b9:df:6a:a6:fc: fd:6d:1f:d9:91:b6:7c:53:e2:4f:b0:2c:b0:bc:cf: 68:35:5f:7b:85:23:36:20:c8:40:30:a5:dc:25:0c: 2e:09:af:20:77:35:17:a3:e0:61:1d:a0:08:0c:08: 77:2e:50:bd:a5:2a:99:57:b6:d8:43:50:c0:6a:57: d5:ab:75:ff:b6:b2:40:3d:5b:49:f0:df:89:ad:43: 11:e7:53:31:13:1b:a2:e4:51:1c:32:ca:ae:a4:0a: 7f:40:11:47:bb:87:66:7f:08:c9:7a:ba:41:0a:a6: c3:cf:09:35:81:5d:2a:76:ec:78:11:6b:5c:e1:2d: 64:0a:bb:5e:49:8f:97:92:7c:84:54:52:b5:66:f0: 91:10:e6:5f:c5:4b:7a:b3:c3:29:a1:93:bc:b1:3c: 00:59:a6:13:18:44:9e:18:b1:20:fc:1a:44:fb:ea: 3d:db:d9:e3:ce:ac:1e:78:19:32:0e:4f:c5:06:9a: fd:b8:b6:4b:8a:f5:13:90:f1:8a:d6:49:9c:aa:ee: ee:76:3d:4c:c5:e5:fc:82:1d:53:ae:65:22:9a:1c: f4:6f:7f:76:80:1e:7e:e4:2f:54:f3:c6:59:77:47: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:70:03:4C:A4:F0:C1:8F:60:A5:E0:61:54:50:16:79:54:13:13:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl X509v3 Authority Key Identifier: keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer sbgp-ipAddrBlock: critical IPv4: 165.125.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2c:19:3e:fa:f4:69:59:1f:5f:4a:76:a8:55:4d:90:f8:f4: e3:50:46:63:ba:3f:00:a6:dc:50:9a:91:89:d8:12:a8:9a:e6: af:38:d6:d1:2f:6d:90:79:8c:b9:2b:04:db:e6:13:87:95:5b: fe:f0:c1:ed:36:5c:9c:e9:e2:59:1e:3e:5c:50:7b:ff:67:f5: ec:ed:7b:24:08:bc:c2:3b:fe:b9:76:81:1d:06:77:ab:69:ec: 25:4a:83:b7:46:4f:f1:74:24:e2:80:7b:fb:fc:cb:da:09:d1: 1c:2c:eb:f1:70:bd:f2:df:6a:6b:3b:86:f0:fd:87:7b:4b:7d: 43:d2:27:80:17:0c:aa:69:71:29:ca:2b:b0:cc:ab:54:cc:25: 8c:7d:7f:96:91:cf:43:5c:03:a3:a7:22:42:98:1e:c5:ee:ae: b6:52:09:bb:56:5c:bd:43:64:83:68:79:db:5b:e4:44:44:98: 35:61:99:70:25:fb:01:24:28:eb:ba:eb:d8:76:c7:d5:56:9a: 4c:6a:3a:c3:ae:79:b6:62:e8:f7:be:39:41:fb:99:92:de:34: 9b:71:0b:6e:0d:97:ae:05:50:ae:4a:bf:32:4b:16:f8:f8:5d: 2a:29:36:05:bc:95:77:97:7c:b3:f8:8f:c4:fa:7e:e9:61:dd: 94:4b:d0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmHdExHrshP4DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4 YjliMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NDFkYzIwZTYtMzYwYy00ZmJiLWFjZDktMmI2YTc3NWMxMTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmRE0CoBdVYMsoY+SCnPNCgFYqFS86geud9q pvz9bR/ZkbZ8U+JPsCywvM9oNV97hSM2IMhAMKXcJQwuCa8gdzUXo+BhHaAIDAh3 LlC9pSqZV7bYQ1DAalfVq3X/trJAPVtJ8N+JrUMR51MxExui5FEcMsqupAp/QBFH u4dmfwjJerpBCqbDzwk1gV0qdux4EWtc4S1kCrteSY+XknyEVFK1ZvCREOZfxUt6 s8MpoZO8sTwAWaYTGESeGLEg/BpE++o929njzqweeBkyDk/FBpr9uLZLivUTkPGK 1kmcqu7udj1MxeX8gh1TrmUimhz0b392gB5+5C9U88ZZd0dt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhwA0yk8MGPYKXgYVRQFnlUExMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4 YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvN2ZhOTQ2ZmYtMjU3Ni0z YzIwLWEwMTctNTYzM2U2ZWYyNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpX0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMsGT769GlZH19KdqhVTZD49ONQRmO6PwCm3FCakYnYEqia5q841tEv bZB5jLkrBNvmE4eVW/7wwe02XJzp4lkePlxQe/9n9ezteyQIvMI7/rl2gR0Gd6tp 7CVKg7dGT/F0JOKAe/v8y9oJ0Rws6/FwvfLfams7hvD9h3tLfUPSJ4AXDKppcSnK K7DMq1TMJYx9f5aRz0NcA6OnIkKYHsXurrZSCbtWXL1DZINoedtb5EREmDVhmXAl +wEkKOu669h2x9VWmkxqOsOuebZi6Pe+OUH7mZLeNJtxC24Nl64FUK5KvzJLFvj4 XSopNgW8lXeXfLP4j8T6fulh3ZRL0N8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:36 2025 by rpki-client