$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa File: 024ca933-fa24-36cd-85e1-460a5cc4da90.roa (raw, json) Hash identifier: ES5NaYQBMn9tFMWV50eIUPY3UvTz1833GC2LtFOdVYM= Subject key identifier: 6D:24:F2:AA:03:73:FF:F6:4F:12:BF:47:11:51:EC:F9:3A:E1:D0:BE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B8EACF307D40967DCE5A04000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 165.225.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f3:07:d4:09:67:dc:e5:a0:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=fa1ae0be-0d56-416b-b736-eb41ad748917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:e4:8a:f7:e4:95:96:aa:be:9e:37:a1:63: c3:4f:b1:5f:03:5f:60:4c:d8:8a:33:36:b1:71:60: ac:b2:22:85:ec:cf:4c:71:66:67:68:8e:d7:4b:af: 93:88:b7:22:15:53:57:98:37:cc:73:49:4d:72:01: 1f:d0:cb:a1:f0:c6:88:1a:1a:de:c1:3f:d3:f7:20: cd:8e:9f:92:58:d9:63:29:80:4c:38:b5:85:3b:3b: 17:57:b8:22:33:41:46:23:c6:88:eb:13:af:d9:4c: 5a:1a:46:88:65:3d:e7:ac:cd:40:d1:b0:c9:f0:82: 0d:f0:c3:bf:8a:95:32:22:ab:91:5b:6b:09:b1:12: 37:82:d2:27:e7:e4:02:2b:5d:11:dd:58:aa:27:4a: b2:ba:1f:36:1a:8d:12:66:c4:ae:07:f9:f5:ea:c5: ba:2a:7a:49:c9:5e:95:c5:5d:76:ea:5b:36:7e:46: bf:0e:cc:4b:6c:47:d8:a2:49:ab:72:76:6a:3a:07: 2d:cc:ee:c0:0e:e8:65:16:af:72:1e:f4:35:b5:6c: 0c:36:0d:70:a9:6e:9f:d1:31:b3:10:e8:74:6d:a9: 64:aa:09:f5:e2:7f:7e:3c:25:25:e6:e0:8f:40:3c: 43:01:e2:4f:f8:a3:46:f0:e3:85:c5:2e:f8:ae:59: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:24:F2:AA:03:73:FF:F6:4F:12:BF:47:11:51:EC:F9:3A:E1:D0:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/024ca933-fa24-36cd-85e1-460a5cc4da90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a6:00:ae:9e:0d:bb:e2:17:cc:86:ea:fd:b8:34:20:09:1c: 9a:e6:e9:27:51:28:12:69:b9:ea:ab:b4:04:1d:3e:b9:9e:f9: 29:e2:99:ba:0c:d8:97:b2:9f:2e:88:bc:e0:10:c6:43:4f:9f: 0e:c7:45:f4:a6:e5:2a:63:17:ff:b4:de:f3:b5:12:2e:bf:2b: f6:66:45:78:25:b1:a2:29:dd:55:36:04:63:f0:91:4a:07:b9: 90:53:29:2e:ae:78:3c:dc:a1:76:45:4c:3d:99:b0:02:16:b5: 14:4d:ef:72:cd:cc:71:5e:b6:e9:ed:c8:9b:81:c6:b6:b7:d8: 60:46:a8:45:91:19:59:b5:e0:2e:6f:02:4b:02:5a:9a:56:cb: 17:ae:6e:82:ea:ca:d5:1d:a9:da:f1:1b:c7:5f:f9:6b:fb:03: 15:c2:4c:63:93:6c:ab:cb:ae:20:cf:8c:9b:9c:4d:65:7b:7e: cf:28:52:62:fb:8c:b7:be:82:1c:67:dd:4a:4f:66:a5:19:a3: ed:c6:25:d9:98:9b:66:96:5b:72:c5:b9:1a:38:d5:36:ff:5c: 7f:72:94:f9:c8:82:69:71:ff:64:05:7e:27:60:59:29:ee:48: 2a:8b:2e:66:d1:4a:5e:41:7a:b9:31:f2:42:89:5d:b4:cc:99: 1e:ac:99:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPMH1Aln3OWgQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmExYWUwYmUtMGQ1Ni00MTZiLWI3MzYtZWI0MWFkNzQ4OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng3kivfklZaqvp43oWPDT7FfA19gTNiKMzax cWCssiKF7M9McWZnaI7XS6+TiLciFVNXmDfMc0lNcgEf0Muh8MaIGhrewT/T9yDN jp+SWNljKYBMOLWFOzsXV7giM0FGI8aI6xOv2UxaGkaIZT3nrM1A0bDJ8IIN8MO/ ipUyIquRW2sJsRI3gtIn5+QCK10R3ViqJ0qyuh82Go0SZsSuB/n16sW6KnpJyV6V xV126ls2fka/DsxLbEfYokmrcnZqOgctzO7ADuhlFq9yHvQ1tWwMNg1wqW6f0TGz EOh0balkqgn14n9+PCUl5uCPQDxDAeJP+KNG8OOFxS74rlky3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0k8qoDc//2TxK/RxFR7Pk64dC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDI0Y2E5MzMtZmEyNC0z NmNkLTg1ZTEtNDYwYTVjYzRkYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAymAK6eDbviF8yG6v24NCAJHJrm6SdRKBJpueqrtAQdPrme+SnimboM 2Jeyny6IvOAQxkNPnw7HRfSm5SpjF/+03vO1Ei6/K/ZmRXglsaIp3VU2BGPwkUoH uZBTKS6ueDzcoXZFTD2ZsAIWtRRN73LNzHFetuntyJuBxra32GBGqEWRGVm14C5v AksCWppWyxeuboLqytUdqdrxG8df+Wv7AxXCTGOTbKvLriDPjJucTWV7fs8oUmL7 jLe+ghxn3UpPZqUZo+3GJdmYm2aWW3LFuRo41Tb/XH9ylPnIgmlx/2QFfidgWSnu SCqLLmbRSl5Berkx8kKJXbTMmR6smek= -----END CERTIFICATE-----Generated at Mon Oct 20 02:13:23 2025 by rpki-client