$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa File: a92ebafa-35d6-34e6-aa72-020e917be372.roa (raw, json) Hash identifier: IOlgyXd/y1pNEg8TiHxMR0ySkOvgAFfhERztU2picHw= Subject key identifier: 28:1B:73:7E:51:8E:00:2E:6B:F8:77:07:25:20:8B:8A:EE:18:6E:EC Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B609C8CF5362FBF37878EB700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 165.225.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8c:f5:36:2f:bf:37:87:8e:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=a81df1e4-2fa5-4b37-a935-60373b3b5be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:36:2a:50:f1:d2:87:b3:c8:26:c5:58:b1: 9e:4f:29:3b:22:c6:c4:f0:5b:94:96:1d:fe:89:50: 97:2e:ce:1a:66:e5:06:30:a3:01:d6:4f:86:06:5e: 50:16:d6:fc:75:35:0c:df:31:b1:15:87:39:db:e6: b2:1b:d6:75:95:40:f9:2d:21:b5:f5:1e:8b:31:7c: 87:b7:c0:3c:1c:70:74:3c:11:23:cf:07:b1:78:15: 59:82:d0:4c:62:8b:1f:2c:0c:10:6c:95:68:31:3f: 6d:e8:c1:47:94:6a:7c:73:8a:86:18:2f:d2:6b:ff: ac:d6:c7:e6:29:40:e4:91:05:c9:32:19:a8:bb:76: 30:4b:59:5f:b2:ca:56:ea:28:d0:7b:71:fe:c5:37: 0e:9e:ed:73:76:60:09:4c:82:36:9d:fb:94:af:7d: 05:ae:4c:95:05:20:65:77:d3:15:b8:dc:25:87:0f: 7a:78:96:93:56:59:02:08:de:06:98:1e:6f:00:41: 52:2a:52:8d:d6:63:5a:e9:38:34:41:2e:64:c2:a9: 99:0f:95:12:94:d1:14:c6:17:0f:ed:30:3f:12:e5: e2:79:4c:1b:7b:91:2a:ec:38:f8:ee:5e:1a:f4:f2: fb:f6:1b:d6:98:4f:6c:89:c6:f0:3e:9c:84:30:37: 8d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1B:73:7E:51:8E:00:2E:6B:F8:77:07:25:20:8B:8A:EE:18:6E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a92ebafa-35d6-34e6-aa72-020e917be372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:37:48:20:24:56:46:cc:73:4e:d9:f2:e8:dd:df:02:ec:80: ed:5b:70:d1:a0:f6:40:5b:29:fd:5b:d0:d9:f3:bc:68:c1:d7: 98:0b:9a:27:60:34:f0:3a:84:b4:03:ee:a7:32:03:1c:11:8f: 5e:31:63:d6:9f:e9:6b:43:1f:a0:34:ea:bb:29:fa:7b:2f:54: ad:c6:63:fd:19:99:6e:88:39:f4:16:41:c6:24:34:33:c4:77: e4:07:91:ef:da:29:43:03:58:30:59:21:51:42:74:dd:f7:99: 2b:fa:fd:a3:18:cf:ab:7a:09:06:e2:05:56:07:7f:5f:5b:67: 8b:c4:0d:9b:c6:34:16:4e:b7:34:1f:df:ee:20:fa:63:f7:68: d6:fb:b1:43:51:6a:55:b6:03:43:dd:7e:d1:e8:f9:dc:07:2b: da:6e:4c:5b:52:39:b6:fe:67:e1:98:9c:6c:32:da:42:a8:98: 5c:71:d6:c6:f4:d4:a2:82:81:17:b9:a7:64:57:c3:fa:89:fa: a1:48:6b:3a:8c:8c:9b:71:6d:54:6e:49:f2:0f:fd:3c:6f:11: bf:10:85:11:91:7d:9a:96:d9:92:d8:e6:ed:e1:48:52:24:e7: ff:f3:2f:ea:60:d3:e7:ac:a5:34:9c:2a:4b:8e:5f:4d:2d:da: fa:81:25:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnIz1Ni+/N4eOtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YTgxZGYxZTQtMmZhNS00YjM3LWE5MzUtNjAzNzNiM2I1YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxA2KlDx0oezyCbFWLGeTyk7IsbE8FuUlh3+ iVCXLs4aZuUGMKMB1k+GBl5QFtb8dTUM3zGxFYc52+ayG9Z1lUD5LSG19R6LMXyH t8A8HHB0PBEjzwexeBVZgtBMYosfLAwQbJVoMT9t6MFHlGp8c4qGGC/Sa/+s1sfm KUDkkQXJMhmou3YwS1lfsspW6ijQe3H+xTcOnu1zdmAJTII2nfuUr30FrkyVBSBl d9MVuNwlhw96eJaTVlkCCN4GmB5vAEFSKlKN1mNa6Tg0QS5kwqmZD5USlNEUxhcP 7TA/EuXieUwbe5Eq7Dj47l4a9PL79hvWmE9sicbwPpyEMDeNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgbc35RjgAua/h3ByUgi4ruGG7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTkyZWJhZmEtMzVkNi0z NGU2LWFhNzItMDIwZTkxN2JlMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI3SCAkVkbMc07Z8ujd3wLsgO1bcNGg9kBbKf1b0NnzvGjB15gLmidg NPA6hLQD7qcyAxwRj14xY9af6WtDH6A06rsp+nsvVK3GY/0ZmW6IOfQWQcYkNDPE d+QHke/aKUMDWDBZIVFCdN33mSv6/aMYz6t6CQbiBVYHf19bZ4vEDZvGNBZOtzQf 3+4g+mP3aNb7sUNRalW2A0PdftHo+dwHK9puTFtSObb+Z+GYnGwy2kKomFxx1sb0 1KKCgRe5p2RXw/qJ+qFIazqMjJtxbVRuSfIP/TxvEb8QhRGRfZqW2ZLY5u3hSFIk 5//zL+pg0+espTScKkuOX00t2vqBJXk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:47 2025 by rpki-client