$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa File: b403408d-4926-31d4-9850-4a8d70ac0328.roa (raw, json) Hash identifier: XkO/XvTOOP8zaCyyNkA4j1fhRyAQjTSReaS8IhfFCYc= Subject key identifier: 61:87:1D:FA:D9:49:0D:A3:A8:15:B5:E4:E4:4A:D4:22:17:2A:60:5E Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F4328584BB2F7C1BA1C8D0DE37CB01380 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 398427 IP address blocks: 185.165.213.0/24 maxlen: 24 185.165.214.0/24 maxlen: 24 185.165.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c1:ba:1c:8d:0d:e3:7c:b0:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=48d3da3b-5528-466e-9a6c-7ef0eb31113c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:c1:42:05:b5:60:a4:6f:c8:b3:34:09:68: 30:ea:77:9f:9b:70:99:3e:64:47:5a:49:5a:98:89: 9a:25:59:f0:a6:c2:59:7f:35:8b:96:76:e5:8e:09: 25:94:4d:28:5d:76:ef:ff:32:f8:14:34:a4:ac:de: b4:28:0d:94:b1:44:0e:d0:91:ee:74:02:e8:7d:91: 42:53:33:74:e6:3b:36:a1:c3:73:d7:40:90:5d:26: b8:80:73:59:65:25:dd:a0:7e:77:08:45:48:7f:ea: f8:c9:2a:6c:c3:52:85:d5:33:0e:18:62:5a:9e:8a: a7:07:81:19:d2:9e:b0:5f:fa:03:38:d1:8b:9a:3e: 71:22:5f:70:13:55:31:7f:e6:ba:eb:fb:47:0c:b0: 7d:d3:18:3b:12:d1:e3:ae:28:f9:a4:c6:bf:a7:28: 4f:ff:ea:5a:e0:5d:89:34:72:68:57:de:f0:12:39: f7:af:01:da:3b:27:ca:98:10:ef:88:01:5c:42:4a: 3b:0b:c7:4e:51:c2:78:05:f6:24:39:84:d7:43:79: fd:b6:51:23:19:36:04:16:b2:9c:a7:aa:80:a6:fa: a1:24:4e:2d:18:0e:98:98:da:e3:41:f0:df:69:30: 3f:11:0e:13:66:12:38:b6:5a:66:e9:ea:25:d8:06: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:1D:FA:D9:49:0D:A3:A8:15:B5:E4:E4:4A:D4:22:17:2A:60:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.165.213.0-185.165.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6e:1b:7b:82:4b:29:5b:e2:b4:18:1f:d9:74:ce:0e:2f:40: 16:d4:35:09:c5:15:db:cd:fc:ee:b7:c5:2d:f3:1e:54:af:c0: 1f:60:91:96:2e:7e:ef:19:0e:6f:ed:c4:88:cf:11:01:91:92: a8:d6:ab:8d:74:cb:d0:ba:4e:ab:7b:ea:e5:7d:72:e7:88:ff: c6:f2:f5:d5:9f:5b:13:4b:12:9d:22:05:bb:4f:4c:54:fc:7a: 7d:fe:66:1e:a5:97:60:cc:a3:09:9a:02:03:40:af:8c:cc:fb: db:77:60:58:02:a3:fa:40:fc:45:56:bc:2c:74:08:7a:bf:a4: 7e:57:ab:8f:6e:c8:9a:2e:4e:fa:38:e2:be:b9:1a:09:84:55: 23:75:d1:21:4a:5c:ca:bc:5c:ce:13:1b:d7:b0:38:04:f8:4d: c9:53:61:01:0d:da:ce:98:a7:a1:7e:55:ce:18:e3:38:fe:36: 51:72:40:a9:9e:4a:af:96:2f:5d:7f:16:21:0a:79:15:c7:dc: 32:e8:82:65:45:50:55:a7:de:d1:a4:6d:b9:85:e5:14:ae:83: 83:7e:de:4b:3a:e5:ff:8f:0f:ae:2c:07:1b:0b:86:44:f9:f7: 11:b4:5f:7b:15:f2:91:3d:e6:04:c1:8f:95:94:4c:74:33:fc: 75:01:2a:33 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuy98G6HI0N43ywE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDhkM2RhM2ItNTUyOC00NjZlLTlhNmMtN2VmMGViMzExMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw/BQgW1YKRvyLM0CWgw6nefm3CZPmRHWkla mImaJVnwpsJZfzWLlnbljgkllE0oXXbv/zL4FDSkrN60KA2UsUQO0JHudALofZFC UzN05js2ocNz10CQXSa4gHNZZSXdoH53CEVIf+r4ySpsw1KF1TMOGGJanoqnB4EZ 0p6wX/oDONGLmj5xIl9wE1Uxf+a66/tHDLB90xg7EtHjrij5pMa/pyhP/+pa4F2J NHJoV97wEjn3rwHaOyfKmBDviAFcQko7C8dOUcJ4BfYkOYTXQ3n9tlEjGTYEFrKc p6qApvqhJE4tGA6YmNrjQfDfaTA/EQ4TZhI4tlpm6eol2AYqvQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGGHHfrZSQ2jqBW15ORK1CIXKmBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvYjQwMzQwOGQtNDkyNi0z MWQ0LTk4NTAtNGE4ZDcwYWMwMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5pdUD BAO5pdAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACG4be4JLKVvitBgf2XTODi9AFtQ1CcUV28387rfFLfMe VK/AH2CRli5+7xkOb+3EiM8RAZGSqNarjXTL0LpOq3vq5X1y54j/xvL11Z9bE0sS nSIFu09MVPx6ff5mHqWXYMyjCZoCA0CvjMz723dgWAKj+kD8RVa8LHQIer+kfler j27Imi5O+jjivrkaCYRVI3XRIUpcyrxczhMb17A4BPhNyVNhAQ3azpinoX5Vzhjj OP42UXJAqZ5Kr5YvXX8WIQp5FcfcMuiCZUVQVafe0aRtuYXlFK6Dg37eSzrl/48P riwHGwuGRPn3EbRfexXykT3mBMGPlZRMdDP8dQEqMw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:49 2025 by rpki-client