$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa File: e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa (raw, json) Hash identifier: fkpsMIURX4eoKuy+RfLtA116c50IxW9t/FAXzA5Z470= Subject key identifier: 43:B5:99:77:4A:FE:45:64:7A:98:CD:A6:28:D3:40:40:1D:F7:E1:9A Certificate issuer: /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Certificate serial: 010D0C9F4328584BB19261C7E7D17EB8A7776200 Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 165.125.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:61:c7:e7:d1:7e:b8:a7:77:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f3edc817-d8a3-4ccc-a058-082676e83787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:66:6d:7f:13:4c:c0:b9:9a:61:9f:30:71:b4: 37:da:32:1e:ec:21:35:c2:8c:b1:1e:2f:8b:5c:36: 10:4b:59:8c:cf:6e:31:2a:90:b0:65:70:7a:d2:33: 26:46:ba:9b:0b:39:6d:c7:3a:d4:c1:72:8c:15:17: f3:ee:5d:cb:72:cb:00:02:2d:b9:3a:bc:56:5a:b1: c1:a1:1a:8b:e0:7f:b3:38:5f:24:a5:60:d5:38:49: 87:87:26:d8:f8:a9:52:f9:6a:b3:8c:12:39:ea:6c: d4:b3:af:37:67:9d:a6:b4:31:81:23:24:42:79:24: 2b:3a:37:78:2f:20:5f:66:4e:4e:da:2b:64:bc:a4: ae:2d:45:63:7b:99:64:1d:0c:fc:37:2d:8e:5d:0a: 8c:93:05:c3:02:1c:c4:ad:55:ae:85:74:b7:e4:f7: d2:65:31:15:78:ec:65:aa:f1:ab:47:16:4b:2f:e5: 93:aa:cd:8b:58:7c:7d:57:44:ea:c3:f0:5b:56:b8: 3c:d7:53:5e:81:d4:ed:01:5c:e9:25:95:1d:e2:f7: 7b:f9:cc:2c:c8:9d:df:8c:49:cd:f2:9f:d0:58:9b: 00:d8:28:4c:3a:1f:45:cc:ba:2d:3d:05:e4:25:7b: f4:a3:d3:c4:1a:d9:b2:9a:57:d9:6a:d5:ef:53:3e: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B5:99:77:4A:FE:45:64:7A:98:CD:A6:28:D3:40:40:1D:F7:E1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl X509v3 Authority Key Identifier: keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer sbgp-ipAddrBlock: critical IPv4: 165.125.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:71:5a:44:b6:5d:6f:67:c1:4b:77:70:10:c0:b6:13:c0:50: d8:9f:43:1d:7c:47:a4:f9:c9:67:31:2f:5e:1c:7a:96:84:e7: f1:f0:83:cd:7b:e0:29:a1:88:ac:fc:d1:a6:e9:20:e0:7c:6e: 94:c8:c4:c8:4e:59:e5:86:eb:c3:24:bb:3d:79:fe:62:e4:59: 86:c0:e7:b5:d1:6f:85:9d:39:e1:7b:54:d2:90:d1:84:e4:3a: cc:3a:f6:45:af:4e:2d:b8:f5:22:60:9d:08:99:ea:9a:a0:ef: 0e:53:af:4e:8b:08:5e:54:89:84:ab:13:2d:89:37:62:f9:cf: 43:24:5c:c3:1e:7c:77:16:8e:54:7e:83:8a:db:5b:2b:00:45: db:c1:e6:03:aa:ff:b9:9f:5a:51:db:cc:36:a3:80:a4:c7:28: 3d:fe:22:90:8d:19:3f:de:ad:c3:f6:94:a2:72:b0:1d:3b:3d: ab:5b:cb:22:21:77:0a:18:17:c9:24:b8:8b:06:79:c9:0a:8b: 89:0d:5b:3d:45:3c:2e:92:1a:8b:28:92:9a:fa:54:5d:fb:e9: 32:76:42:d0:bf:5f:69:ed:a2:16:80:08:00:45:46:8d:a8:20: 00:98:cf:53:44:8d:b5:0a:91:71:1d:e9:55:ba:90:cd:f1:fc: 1f:48:92:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmHH59F+uKd3YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4 YjliMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZjNlZGM4MTctZDhhMy00Y2NjLWEwNTgtMDgyNjc2ZTgzNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGZtfxNMwLmaYZ8wcbQ32jIe7CE1woyxHi+L XDYQS1mMz24xKpCwZXB60jMmRrqbCzltxzrUwXKMFRfz7l3LcssAAi25OrxWWrHB oRqL4H+zOF8kpWDVOEmHhybY+KlS+WqzjBI56mzUs683Z52mtDGBIyRCeSQrOjd4 LyBfZk5O2itkvKSuLUVje5lkHQz8Ny2OXQqMkwXDAhzErVWuhXS35PfSZTEVeOxl qvGrRxZLL+WTqs2LWHx9V0Tqw/BbVrg811NegdTtAVzpJZUd4vd7+cwsyJ3fjEnN 8p/QWJsA2ChMOh9FzLotPQXkJXv0o9PEGtmymlfZatXvUz4pywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO1mXdK/kVkepjNpijTQEAd9+GaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4 YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvZTNmYmMzMjMtNDA5MS0z MjJkLWJhM2MtMGE0OGJmOTY3N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpX0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBxWkS2XW9nwUt3cBDAthPAUNifQx18R6T5yWcxL14cepaE5/Hwg817 4CmhiKz80abpIOB8bpTIxMhOWeWG68Mkuz15/mLkWYbA57XRb4WdOeF7VNKQ0YTk Osw69kWvTi249SJgnQiZ6pqg7w5Tr06LCF5UiYSrEy2JN2L5z0MkXMMefHcWjlR+ g4rbWysARdvB5gOq/7mfWlHbzDajgKTHKD3+IpCNGT/ercP2lKJysB07PatbyyIh dwoYF8kkuIsGeckKi4kNWz1FPC6SGosokpr6VF376TJ2QtC/X2ntohaACABFRo2o IACYz1NEjbUKkXEd6VW6kM3x/B9IkpI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:33:08 2025 by rpki-client