$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa File: 7fa946ff-2576-3c20-a017-5633e6ef2732.roa (raw, json) Hash identifier: xXsDtulBzimq0X9HnYNXE4GfBEjKYBoAGGifFcSb0YI= Subject key identifier: 52:41:FD:D8:41:DA:2B:B8:3D:80:CB:8C:5D:FA:45:26:AC:95:79:65 Certificate issuer: /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Certificate serial: 010D0C9F4328584AD0D642A96C9E86CEC09EC980 Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 165.125.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:42:a9:6c:9e:86:ce:c0:9e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c633547f-e639-458b-9cb6-50c0c6411138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:50:7a:5e:16:af:bb:bd:28:49:1a:1e:b2: c9:81:6c:b5:e3:98:84:c1:a6:c4:eb:40:55:23:4b: b0:0a:d3:f6:b4:c6:56:3a:b3:2b:4f:ba:30:2e:83: d7:1b:36:a1:d3:68:e2:25:fb:bd:7c:58:79:4e:bb: 3b:79:9e:10:49:01:30:fe:42:e1:ba:77:df:c6:eb: 8e:57:56:d0:a7:1b:f2:a3:0a:5a:e5:1d:7c:ea:61: 28:4c:ed:a3:3c:f4:47:64:0d:ce:16:a0:6d:27:1f: eb:8c:b4:e3:d7:70:06:98:82:a1:5d:55:25:30:64: 4a:10:51:89:39:9f:15:c4:19:20:61:f1:c2:8b:83: 2d:3f:c5:5d:8f:74:6d:6a:fe:42:e1:d3:25:bd:c0: 90:f3:c5:e4:2f:e4:e7:db:da:d3:85:93:08:a2:90: 3d:f4:55:59:bb:4a:03:22:15:b4:46:63:b6:c0:29: 78:a9:f0:72:29:a2:d5:0c:bb:73:8a:24:bd:ac:54: f9:af:d5:cc:a5:17:43:b9:91:dc:a4:b6:9b:af:c4: 13:25:9f:ca:e0:c7:12:1d:60:b2:5e:dc:0b:e5:eb: f0:68:84:b5:4c:4f:7d:fd:b8:aa:93:fa:0d:29:26: 8f:9b:52:92:e2:77:59:47:c1:d2:f3:1c:94:83:7f: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:41:FD:D8:41:DA:2B:B8:3D:80:CB:8C:5D:FA:45:26:AC:95:79:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7fa946ff-2576-3c20-a017-5633e6ef2732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl X509v3 Authority Key Identifier: keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer sbgp-ipAddrBlock: critical IPv4: 165.125.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0b:c2:d5:47:71:81:f9:19:0e:59:15:4c:af:8c:e9:df:80: 96:0d:f0:79:6a:40:50:a8:50:12:5b:f7:22:03:ee:db:af:1a: 73:dd:70:b8:04:e4:f3:f9:5f:15:b4:a6:df:89:ad:61:23:0a: 8c:15:86:c1:06:38:04:92:80:2a:03:75:63:11:24:c1:3f:51: c3:ce:0a:a4:1b:4a:a8:52:71:a3:35:cb:77:61:81:4b:c7:df: 92:ff:67:da:0b:ae:7f:b9:7f:eb:cf:16:eb:c8:3b:0d:95:f0: 0f:23:0b:1c:3e:de:9f:c5:25:e9:42:ad:34:0d:59:ad:12:97: 44:df:03:fd:04:ef:b1:ca:33:d0:ca:7d:ed:fc:f1:db:8a:31: 1b:53:7d:7c:64:b5:4c:69:68:b7:12:09:8a:0e:b5:4a:01:fe: 1e:7c:46:0d:9c:ca:7d:a1:88:56:d6:cd:9f:43:f5:b6:64:95: 57:84:4a:d1:6b:f5:35:e5:ea:ef:e8:82:e4:2b:17:9b:59:dc: 8f:57:07:eb:ae:de:f7:f7:fa:6e:47:ff:4a:3f:49:47:16:1d: 47:dc:fc:3e:70:b2:3a:f7:0d:1a:c9:d0:85:de:3f:19:00:4a: 6d:72:ad:f0:24:b7:2a:e0:38:cb:5c:e6:4f:ae:a2:a5:c3:0c: e4:cc:6d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kKpbJ6GzsCeyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4 YjliMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YzYzMzU0N2YtZTYzOS00NThiLTljYjYtNTBjMGM2NDExMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU5Qel4Wr7u9KEkaHrLJgWy145iEwabE60BV I0uwCtP2tMZWOrMrT7owLoPXGzah02jiJfu9fFh5Trs7eZ4QSQEw/kLhunffxuuO V1bQpxvyowpa5R186mEoTO2jPPRHZA3OFqBtJx/rjLTj13AGmIKhXVUlMGRKEFGJ OZ8VxBkgYfHCi4MtP8Vdj3Rtav5C4dMlvcCQ88XkL+Tn29rThZMIopA99FVZu0oD IhW0RmO2wCl4qfByKaLVDLtziiS9rFT5r9XMpRdDuZHcpLabr8QTJZ/K4McSHWCy XtwL5evwaIS1TE99/biqk/oNKSaPm1KS4ndZR8HS8xyUg3++hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJB/dhB2iu4PYDLjF36RSaslXllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4 YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvN2ZhOTQ2ZmYtMjU3Ni0z YzIwLWEwMTctNTYzM2U2ZWYyNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpX0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0LwtVHcYH5GQ5ZFUyvjOnfgJYN8HlqQFCoUBJb9yID7tuvGnPdcLgE 5PP5XxW0pt+JrWEjCowVhsEGOASSgCoDdWMRJME/UcPOCqQbSqhScaM1y3dhgUvH 35L/Z9oLrn+5f+vPFuvIOw2V8A8jCxw+3p/FJelCrTQNWa0Sl0TfA/0E77HKM9DK fe388duKMRtTfXxktUxpaLcSCYoOtUoB/h58Rg2cyn2hiFbWzZ9D9bZklVeEStFr 9TXl6u/oguQrF5tZ3I9XB+uu3vf3+m5H/0o/SUcWHUfc/D5wsjr3DRrJ0IXePxkA Sm1yrfAktyrgOMtc5k+uoqXDDOTMbWs= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:27 2025 by rpki-client