$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa File: c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa (raw, json) Hash identifier: dg4P7u+JhEUmIho5zAtOTeWBP5kR2Mu27TFZY7D5mb0= Subject key identifier: A9:FD:69:5C:F3:BE:16:03:D0:40:EB:D7:0A:B8:42:38:39:C8:1C:1B Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584B8EACE90C637FCADC9F513E80 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 165.224.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e9:0c:63:7f:ca:dc:9f:51:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=af093273-58aa-4b9d-81af-0e239b57e169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d8:80:0c:86:94:51:0e:c3:2d:ac:01:05:72: 39:13:a0:31:b4:c7:e8:b5:36:af:a9:72:fd:9c:98: 17:ec:f3:01:81:50:9e:a4:2d:2c:fe:ea:78:5f:83: 57:6e:a5:cf:db:18:5d:21:51:ec:17:5a:f7:1c:e6: c4:7e:4f:73:ca:a0:12:12:08:15:3c:07:63:26:7d: b7:23:9e:a3:49:59:47:5c:0d:e6:c1:0b:33:57:0f: 72:56:00:55:94:84:10:7b:33:40:ee:51:51:bb:d8: f6:e7:be:8b:9f:e0:0c:93:b9:22:58:50:80:ae:9d: ef:3e:68:ff:f3:5f:e1:c7:8a:45:15:8e:45:2f:90: e4:39:34:48:c4:ca:5d:6f:34:49:fe:b5:15:03:c1: 64:39:f7:2b:f7:06:f1:9a:d2:0d:01:a7:24:28:99: 29:f0:59:c3:8c:a6:88:d1:a7:75:a0:88:f4:2e:43: 61:e8:3d:08:dd:dd:e1:f6:55:44:0f:d7:9d:82:05: 47:e4:45:de:58:bb:6d:2c:e1:a1:98:02:b7:7c:cd: 80:f8:d0:26:6d:93:32:31:43:75:2b:7f:a4:38:90: 85:95:a2:f2:00:90:1f:05:de:f2:6c:06:a1:e8:6b: 35:24:ed:a4:f8:89:25:24:68:bd:f4:19:56:b8:03: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FD:69:5C:F3:BE:16:03:D0:40:EB:D7:0A:B8:42:38:39:C8:1C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cf:ce:ba:f3:58:c5:1a:48:17:82:b7:f5:82:75:76:db:0a: aa:f3:2f:9d:de:93:0a:83:c2:52:ba:cb:e8:44:c4:ec:13:03: e7:0a:83:45:9d:e5:c5:21:98:7c:45:52:e3:89:7b:58:40:33: 9f:80:ff:45:44:63:96:35:3f:8d:31:ca:04:c5:d1:a9:96:22: 64:4a:13:2a:32:a1:50:0e:f4:21:c2:fa:b6:7f:93:72:e0:51: 9f:f9:ff:58:e1:21:f8:2b:b6:36:09:90:35:36:c1:19:83:a1: a2:3e:6e:b6:fd:23:a5:6e:9b:14:ab:e9:87:52:66:43:a6:ad: 9c:05:1a:d4:e7:fc:f1:30:d4:78:6d:f3:0b:5d:6e:30:46:24: 96:a4:13:ab:84:7a:2d:25:27:83:44:22:81:c0:ac:0c:c0:9f: b7:b7:9b:16:52:3a:4f:f7:ee:73:e6:b2:f3:53:02:93:90:f7: 8d:20:12:32:d0:44:7f:0a:7d:99:68:6c:4c:11:a7:5b:1e:82: 97:9e:62:22:4a:03:bd:32:6b:9e:cb:3b:03:4c:f3:77:61:bc: f5:f1:cc:6a:1f:a5:50:5e:49:01:14:ee:db:f4:16:5e:d9:b5: a6:12:07:d2:46:90:e7:c0:a0:55:18:c9:78:63:81:fe:d0:a8: 9b:f6:32:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOkMY3/K3J9RPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YWYwOTMyNzMtNThhYS00YjlkLTgxYWYtMGUyMzliNTdlMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdiADIaUUQ7DLawBBXI5E6AxtMfotTavqXL9 nJgX7PMBgVCepC0s/up4X4NXbqXP2xhdIVHsF1r3HObEfk9zyqASEggVPAdjJn23 I56jSVlHXA3mwQszVw9yVgBVlIQQezNA7lFRu9j2576Ln+AMk7kiWFCArp3vPmj/ 81/hx4pFFY5FL5DkOTRIxMpdbzRJ/rUVA8FkOfcr9wbxmtINAackKJkp8FnDjKaI 0ad1oIj0LkNh6D0I3d3h9lVED9edggVH5EXeWLttLOGhmAK3fM2A+NAmbZMyMUN1 K3+kOJCFlaLyAJAfBd7ybAah6Gs1JO2k+IklJGi99BlWuAOX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn9aVzzvhYD0EDr1wq4Qjg5yBwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzk4NzY0OGUtNWJjNS0z YzkxLTk5NzItZWU3Yzg2ZTlhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjPzrrzWMUaSBeCt/WCdXbbCqrzL53ekwqDwlK6y+hExOwTA+cKg0Wd 5cUhmHxFUuOJe1hAM5+A/0VEY5Y1P40xygTF0amWImRKEyoyoVAO9CHC+rZ/k3Lg UZ/5/1jhIfgrtjYJkDU2wRmDoaI+brb9I6VumxSr6YdSZkOmrZwFGtTn/PEw1Hht 8wtdbjBGJJakE6uEei0lJ4NEIoHArAzAn7e3mxZSOk/37nPmsvNTApOQ940gEjLQ RH8KfZlobEwRp1segpeeYiJKA70ya57LOwNM83dhvPXxzGofpVBeSQEU7tv0Fl7Z taYSB9JGkOfAoFUYyXhjgf7QqJv2MpU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:43 2025 by rpki-client