$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa File: e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa (raw, json) Hash identifier: 7Cuc1rsQh9v8Txo7g8RD+548RIYAs5H57alnUzZMmWU= Subject key identifier: F4:76:15:6F:FF:BF:31:5B:6D:54:38:23:5B:A4:CA:D7:8A:44:03:0D Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584AADF11DFE2EDDFB0F07CB4018 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 8987 IP address blocks: 165.224.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1d:fe:2e:dd:fb:0f:07:cb:40:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=9ce5028b-9830-44cd-8aab-8e009c610696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:5b:34:93:bf:42:8b:8b:e8:d7:02:a3:c4: 75:d0:d1:6e:d6:6e:ff:48:77:26:74:79:8a:1b:8f: 2c:6f:9c:4c:01:b2:a3:54:bc:80:67:c2:45:cc:73: ce:ee:2f:46:ed:dd:ef:a3:ba:0f:54:9f:29:7b:63: 16:fb:ab:4a:b1:8f:e7:61:78:55:60:00:ad:32:ad: 2d:bc:9b:c6:af:49:16:7d:da:6a:84:9c:89:14:f5: 3b:d0:ca:8b:01:4d:0d:9e:78:1e:0b:3c:3e:91:fe: 55:a1:33:51:4d:b7:e9:56:81:74:da:d6:7f:38:c7: 33:98:c5:ec:d2:23:6b:5d:bc:f7:f9:89:6a:9f:4f: 51:1d:9e:40:0a:aa:33:9d:25:2e:73:65:2e:f5:c9: 62:bf:56:f1:b7:bd:8a:80:55:1a:ad:8f:7c:69:9c: 8a:a8:73:c4:37:dd:cf:cd:06:92:1c:ea:56:ff:50: b9:e4:e3:eb:5e:dd:e2:0c:11:ad:74:2e:91:00:3a: 34:32:14:b6:1f:26:26:0c:d0:53:c3:d4:fe:5f:48: 39:81:2a:0f:7e:cc:cb:ad:f2:02:fa:6b:f3:63:7e: dc:e4:0f:c6:72:e8:d3:2e:42:8f:8f:d0:b2:87:a8: 15:ab:66:b7:f4:0b:af:fc:9c:5d:8a:4d:f6:ad:85: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:76:15:6F:FF:BF:31:5B:6D:54:38:23:5B:A4:CA:D7:8A:44:03:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ce:71:80:99:d9:87:cb:15:d5:e5:3a:19:88:8d:24:33:e5: aa:e4:36:19:c4:96:a9:50:dc:ec:bc:fd:c5:3c:f0:ca:56:bd: 51:1e:8a:7d:41:b2:72:3d:ac:b1:76:2f:b5:c9:6f:49:06:a9: f3:16:17:14:fc:ab:1c:b8:05:31:5b:a0:cb:92:e8:fb:f6:9c: cb:a1:55:7b:4c:d8:97:43:16:26:57:5a:49:2d:76:91:37:22: e6:9c:37:b1:0d:b7:d5:e4:30:c5:c0:f6:bf:9a:b3:72:1d:2b: ba:ba:a6:6a:91:3e:05:19:87:37:09:ae:a4:da:72:aa:e1:75: 0b:cd:46:49:cc:ef:a8:bf:47:b6:d4:2f:9e:6b:04:d1:b0:11: 7c:9b:d1:8b:87:a0:f2:f8:49:85:9e:5c:52:35:1a:2b:61:2c: e6:bb:d8:bc:2e:b7:7b:a7:60:a7:1d:4d:66:f3:bb:bb:a1:65: 7f:53:46:ef:26:1c:95:53:de:99:cb:d7:b3:ac:22:3f:dc:43: 51:b7:0b:07:1d:70:54:42:2d:9d:ca:cf:ec:59:55:65:06:0f: 72:cb:4e:fd:6b:1c:fa:77:22:74:71:59:50:07:e0:b1:e5:91: e4:97:98:34:30:88:2f:0d:bf:84:53:e0:5d:96:9b:9d:48:eb: 49:1d:db:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R3+Lt37DwfLQBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk OWNlNTAyOGItOTgzMC00NGNkLThhYWItOGUwMDljNjEwNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn71bNJO/QouL6NcCo8R10NFu1m7/SHcmdHmK G48sb5xMAbKjVLyAZ8JFzHPO7i9G7d3vo7oPVJ8pe2MW+6tKsY/nYXhVYACtMq0t vJvGr0kWfdpqhJyJFPU70MqLAU0NnngeCzw+kf5VoTNRTbfpVoF02tZ/OMczmMXs 0iNrXbz3+Ylqn09RHZ5ACqoznSUuc2Uu9cliv1bxt72KgFUarY98aZyKqHPEN93P zQaSHOpW/1C55OPrXt3iDBGtdC6RADo0MhS2HyYmDNBTw9T+X0g5gSoPfszLrfIC +mvzY37c5A/GcujTLkKPj9Cyh6gVq2a39Auv/Jxdik32rYWr9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR2FW//vzFbbVQ4I1ukyteKRAMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZTBlNDQ5NzAtMmY4Ny0z NmJlLWI0YjgtNmUzZGFlOWYxMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLOcYCZ2YfLFdXlOhmIjSQz5arkNhnElqlQ3Oy8/cU88MpWvVEein1B snI9rLF2L7XJb0kGqfMWFxT8qxy4BTFboMuS6Pv2nMuhVXtM2JdDFiZXWkktdpE3 IuacN7ENt9XkMMXA9r+as3IdK7q6pmqRPgUZhzcJrqTacqrhdQvNRknM76i/R7bU L55rBNGwEXyb0YuHoPL4SYWeXFI1GithLOa72Lwut3unYKcdTWbzu7uhZX9TRu8m HJVT3pnL17OsIj/cQ1G3CwcdcFRCLZ3Kz+xZVWUGD3LLTv1rHPp3InRxWVAH4LHl keSXmDQwiC8Nv4RT4F2Wm51I60kd22U= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:23 2025 by rpki-client