$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/61262c8b-4b13-37e8-847c-e4ac4a0f3bf4.roa File: 61262c8b-4b13-37e8-847c-e4ac4a0f3bf4.roa (raw, json) Hash identifier: GeGwAA1f2QCZ1MS7BcJYg1UIz2Yp2aR1I2KAWtD9No0= Subject key identifier: 20:79:92:FD:CE:89:DD:1B:3E:F7:90:E8:81:C9:DA:52:85:54:20:0A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B33F19E17C3BD9E4C37F87E00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/61262c8b-4b13-37e8-847c-e4ac4a0f3bf4.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 53813 IP address blocks: 165.225.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9e:17:c3:bd:9e:4c:37:f8:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=e004ce23-8f0d-4c20-867a-6fb868d0e3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:41:f6:11:6e:09:77:dd:2a:47:a2:72:6b:8a: f4:87:b0:5a:52:91:35:c2:ed:1d:49:5a:72:13:ef: b8:7d:98:c2:47:ec:85:de:d8:30:a5:aa:b6:fe:07: 66:48:3f:0e:a7:d3:56:a6:98:8a:63:b0:3e:b1:10: 2f:32:94:94:fe:8f:98:6f:8b:c9:93:1b:91:ec:06: 5c:0d:6f:6c:a3:4a:fc:1c:d6:cf:8e:04:e7:14:08: 1e:47:5c:e2:63:0e:0e:30:f2:f2:34:6d:92:cb:c1: 29:4e:fb:1e:1f:ff:b7:68:9f:3b:13:a5:a8:bf:3e: 58:70:ac:d8:df:87:b9:66:40:6a:b3:d6:61:bf:00: 38:92:3b:24:9c:b0:0c:e2:68:8c:21:b4:18:08:e7: 56:4e:98:9a:64:3e:af:55:7f:c1:15:20:09:13:17: d9:f0:c1:9d:d5:9e:12:fa:b9:e6:a2:ba:0f:0b:7b: 65:69:d5:f3:cd:d9:b9:94:61:5a:89:09:b1:ce:02: e9:cb:a5:4d:5e:53:6d:7a:8d:f6:3a:7f:59:75:1c: e9:3f:9b:f7:be:91:88:3c:e1:b3:5d:50:9c:48:f1: 99:13:72:f5:c6:7e:63:28:df:4c:97:1d:73:af:10: eb:12:ba:ea:5f:81:82:5d:09:88:b6:0a:6d:b3:1a: 58:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:79:92:FD:CE:89:DD:1B:3E:F7:90:E8:81:C9:DA:52:85:54:20:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/61262c8b-4b13-37e8-847c-e4ac4a0f3bf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:14:17:e9:a1:27:71:7b:76:38:b5:f0:25:9c:0e:71:c0:fc: 1e:27:c9:c6:a0:24:53:dc:8f:e6:4b:47:47:7e:be:b9:eb:f5: e2:2e:7d:a6:2d:96:ba:b4:a1:6f:84:08:65:67:8f:d5:01:ad: e8:31:ad:ba:ee:7e:bd:d8:e6:89:85:ce:e2:f3:f0:4a:ef:31: 1e:4c:dc:f5:81:6f:03:ea:2c:8f:de:4b:96:05:d6:b7:b8:c4: 86:89:08:57:8c:8d:97:be:9f:c7:5d:df:57:57:b6:1f:5f:83: 8b:d1:7e:f5:2a:d2:5b:c1:a3:96:d1:8e:a0:7c:f1:5d:6d:44: d2:55:6b:f1:a0:9d:89:14:aa:40:87:0e:94:26:7a:19:1c:77: d9:4f:a1:75:c4:16:a9:b3:7f:5e:26:78:27:5a:cb:85:e1:35: 11:d9:4d:f3:34:bc:65:b2:3d:d1:eb:6e:c7:40:f6:6e:04:cb: df:6e:8f:58:76:6c:5a:e8:9a:f4:05:e3:5b:bc:c8:11:9b:af: 3f:a3:03:5e:9a:d8:f1:93:6a:f5:43:00:44:59:cf:da:17:69: 0b:c3:53:9d:80:00:73:b0:34:e5:ab:1a:6f:38:f9:f2:c3:6c: d4:c7:71:ca:8f:43:9c:e3:13:55:0f:e8:31:d4:00:86:01:d9: 6d:24:0a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8Z4Xw72eTDf4fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ZTAwNGNlMjMtOGYwZC00YzIwLTg2N2EtNmZiODY4ZDBlM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUH2EW4Jd90qR6Jya4r0h7BaUpE1wu0dSVpy E++4fZjCR+yF3tgwpaq2/gdmSD8Op9NWppiKY7A+sRAvMpSU/o+Yb4vJkxuR7AZc DW9so0r8HNbPjgTnFAgeR1ziYw4OMPLyNG2Sy8EpTvseH/+3aJ87E6Wovz5YcKzY 34e5ZkBqs9ZhvwA4kjsknLAM4miMIbQYCOdWTpiaZD6vVX/BFSAJExfZ8MGd1Z4S +rnmoroPC3tladXzzdm5lGFaiQmxzgLpy6VNXlNteo32On9ZdRzpP5v3vpGIPOGz XVCcSPGZE3L1xn5jKN9Mlx1zrxDrErrqX4GCXQmItgptsxpYIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB5kv3Oid0bPveQ6IHJ2lKFVCAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjEyNjJjOGItNGIxMy0z N2U4LTg0N2MtZTRhYzRhMGYzYmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0UF+mhJ3F7dji18CWcDnHA/B4nycagJFPcj+ZLR0d+vrnr9eIufaYt lrq0oW+ECGVnj9UBregxrbrufr3Y5omFzuLz8ErvMR5M3PWBbwPqLI/eS5YF1re4 xIaJCFeMjZe+n8dd31dXth9fg4vRfvUq0lvBo5bRjqB88V1tRNJVa/GgnYkUqkCH DpQmehkcd9lPoXXEFqmzf14meCday4XhNRHZTfM0vGWyPdHrbsdA9m4Ey99uj1h2 bFromvQF41u8yBGbrz+jA16a2PGTavVDAERZz9oXaQvDU52AAHOwNOWrGm84+fLD bNTHccqPQ5zjE1UP6DHUAIYB2W0kCvM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:46 2025 by rpki-client