$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa File: cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa (raw, json) Hash identifier: H0lmocKORZbQNIQcgXU/dnnn+RKLRaH9yxGEv8smSxg= Subject key identifier: 93:94:69:2C:AA:D1:02:97:02:2F:AB:6A:53:62:47:43:26:38:ED:1D Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F4328584B821CBD010366F0FCAAA22380 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 87 IP address blocks: 149.165.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:bd:01:03:66:f0:fc:aa:a2:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=5be6a9e3-8333-4a33-a697-1d85cec4b6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:5e:c1:56:9f:dd:3c:b0:da:dd:d3:ee:32: a0:56:e0:9f:57:95:9c:bb:e0:7b:84:48:88:b7:98: 62:ac:09:c4:4b:05:02:29:ea:55:c9:2d:15:70:1e: e8:88:f0:3c:e9:49:98:76:d4:c0:b8:e5:32:2a:78: 26:85:85:2a:14:ae:78:b4:1a:7b:c9:4e:7e:ea:8c: 9e:9b:90:0d:49:87:79:ef:cd:9f:6b:07:08:7c:8b: af:ac:12:d9:10:3e:b7:bc:9d:1d:4f:4e:c0:69:11: 8a:cf:6f:c8:76:69:14:dd:cb:94:91:d6:32:17:84: 2d:b9:fb:00:37:ab:0b:54:c1:92:fe:2f:c5:d5:3d: 27:c8:89:82:f3:ac:5b:8f:6b:7e:3e:da:96:2e:27: 26:ad:fc:22:c3:51:12:12:ef:de:fb:c4:a0:f2:2e: ec:4a:5d:e1:90:cb:06:e0:d1:57:3b:0a:ab:93:f0: 26:57:28:82:6a:a5:98:3c:59:fc:ea:cc:1a:5d:fa: 28:15:a3:16:2b:72:ad:14:0f:ec:8e:8e:f7:22:29: 29:47:00:c1:33:a8:82:ac:80:6b:8d:13:41:7c:c4: c0:3f:15:25:4d:0b:3d:8f:50:99:6d:b5:ba:2a:57: b5:24:4c:6e:23:04:9c:15:68:7f:95:d9:56:ee:d0: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:94:69:2C:AA:D1:02:97:02:2F:AB:6A:53:62:47:43:26:38:ED:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 149.165.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:69:b7:1a:5e:ff:40:6f:71:c1:dc:80:23:cd:9e:a5:8c:fd: b6:62:52:5a:f0:88:ea:82:ea:52:b1:e4:0d:0f:57:ee:85:8d: 76:fb:c0:0c:33:45:25:3e:d2:22:bf:f3:82:30:a3:7d:aa:2b: d6:07:91:4d:1b:89:d4:71:f6:30:20:fc:f8:0a:e3:12:79:10: 03:67:15:97:ad:12:e8:a4:31:f9:ad:2e:f0:40:c4:37:4a:7c: c7:aa:88:07:ab:88:82:1c:ca:81:4d:37:aa:fa:be:f2:1e:6a: b3:69:41:f0:f1:3f:57:95:cd:23:8a:ec:bd:e4:1e:f8:47:16: 7a:78:18:1e:52:ab:50:18:93:f8:36:70:63:58:ca:2e:f6:36: 06:2d:c7:a6:09:86:de:b5:f2:8a:c2:06:01:a5:ed:e4:71:df: 07:c4:31:0a:72:99:73:a3:a5:46:74:d5:76:4a:e4:2c:74:95: 97:f2:d3:b9:f4:05:67:07:3d:d4:ac:76:be:76:d7:91:39:71: ec:d8:af:c1:b3:d6:de:2a:00:1e:23:c4:8a:e1:8b:e9:28:19: 30:a9:b0:c5:ba:32:86:27:b8:0a:9d:0b:6e:91:74:1b:50:89: a7:b2:70:b9:dc:0d:92:68:a9:9b:b2:30:2d:25:ca:c1:a8:2e: f9:d5:1f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHL0BA2bw/KqiI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NWJlNmE5ZTMtODMzMy00YTMzLWE2OTctMWQ4NWNlYzRiNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLRewVaf3Tyw2t3T7jKgVuCfV5Wcu+B7hEiI t5hirAnESwUCKepVyS0VcB7oiPA86UmYdtTAuOUyKngmhYUqFK54tBp7yU5+6oye m5ANSYd5782fawcIfIuvrBLZED63vJ0dT07AaRGKz2/IdmkU3cuUkdYyF4QtufsA N6sLVMGS/i/F1T0nyImC86xbj2t+PtqWLicmrfwiw1ESEu/e+8Sg8i7sSl3hkMsG 4NFXOwqrk/AmVyiCaqWYPFn86swaXfooFaMWK3KtFA/sjo73IikpRwDBM6iCrIBr jRNBfMTAPxUlTQs9j1CZbbW6Kle1JExuIwScFWh/ldlW7tAR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOUaSyq0QKXAi+ralNiR0MmOO0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvY2Q4MWUyZjEtYjFlZS0z MzM5LThmZTUtZWNkYzUxZDEwODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlaUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFptxpe/0BvccHcgCPNnqWM/bZiUlrwiOqC6lKx5A0PV+6FjXb7wAwz RSU+0iK/84Iwo32qK9YHkU0bidRx9jAg/PgK4xJ5EANnFZetEuikMfmtLvBAxDdK fMeqiAeriIIcyoFNN6r6vvIearNpQfDxP1eVzSOK7L3kHvhHFnp4GB5Sq1AYk/g2 cGNYyi72NgYtx6YJht618orCBgGl7eRx3wfEMQpymXOjpUZ01XZK5Cx0lZfy07n0 BWcHPdSsdr5215E5cezYr8Gz1t4qAB4jxIrhi+koGTCpsMW6MoYnuAqdC26RdBtQ iaeycLncDZJoqZuyMC0lysGoLvnVH4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:58 2025 by rpki-client