$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa File: 11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa (raw, json) Hash identifier: nYowYa18LyHWx7dw/UATuj72s919BZ61Cim+/Y66upM= Subject key identifier: 2D:7A:97:CA:74:CD:05:65:29:8B:81:A8:D5:91:A2:86:89:C5:88:30 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BA2379605E6C78688CCA8CF60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 22616 IP address blocks: 205.220.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:96:05:e6:c7:86:88:cc:a8:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=40642c29-6777-4808-8462-5fd3b676dca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:ee:6d:40:ea:81:79:c6:e1:3f:ae:4b:f0: 5a:69:ef:44:dd:9c:c3:e7:38:ba:62:05:ea:40:41: 65:a7:3b:b6:41:e6:66:60:05:58:d3:a2:f7:a4:d0: 1f:82:ac:36:64:f3:6a:ef:d0:a7:41:b3:c8:ac:dd: 54:c8:50:42:bb:f8:4f:5a:35:37:52:1d:d4:ae:f7: 30:26:c5:82:97:ed:90:f0:7f:78:09:f9:43:86:90: ad:23:e8:d1:34:f8:2c:13:20:97:a5:84:c5:0e:69: cb:54:26:11:48:d0:b2:5d:1f:65:36:91:56:15:15: 91:3f:a8:77:81:51:e8:57:65:f7:be:da:9a:79:c5: c2:bc:90:9b:10:02:45:43:5a:6a:a1:d1:e0:d1:1b: 0d:7c:9e:58:e6:d3:15:07:10:99:8c:a1:57:32:81: a1:f5:db:8e:60:47:ac:87:ea:27:b2:e3:a9:33:07: ca:a0:ef:94:80:4b:10:43:24:71:d0:ae:99:74:e3: 56:88:cd:9b:b8:e6:41:6e:3b:0a:0a:51:6d:b3:e2: a0:67:fd:60:df:d3:25:af:86:a8:89:c8:d7:40:23: 0c:bc:19:5b:69:3c:5a:ff:61:7e:9f:e3:3b:ef:44: 56:db:06:32:4b:c1:77:86:40:af:67:ab:4a:65:77: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7A:97:CA:74:CD:05:65:29:8B:81:A8:D5:91:A2:86:89:C5:88:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:43:89:bf:ba:56:9b:2c:1e:db:b3:c1:9e:c6:f9:d5:c8:95: b6:0d:17:42:c1:ea:db:91:1e:6e:0f:5e:d8:f3:80:3f:d3:f8: 23:9a:d4:d5:a7:cd:ab:6c:0b:95:85:94:0b:6e:c9:49:a4:f9: d1:94:87:9e:93:a2:7b:22:25:9a:6f:da:ad:5a:89:37:5d:f4: b6:2a:fd:f4:dd:33:1a:4d:e1:7f:4d:11:e6:f2:1d:87:32:61: dc:61:70:87:3f:19:6d:d0:53:8f:8e:e2:14:b1:e6:42:e7:39: 71:85:eb:13:9f:57:21:3a:fb:09:4f:bc:83:a4:70:5c:5a:bc: 23:14:a9:8a:b5:56:47:b4:94:b5:bf:f2:2e:96:6f:03:f2:3d: 50:6d:e3:0a:fa:eb:f4:71:fe:99:ae:d0:66:9d:84:6c:75:d3: 28:8a:89:22:28:32:b5:34:44:91:37:f4:9a:98:29:55:2a:d5: c3:eb:e8:c6:6f:e6:4d:7f:68:64:37:ac:0f:e2:c0:7c:10:5f: dd:79:24:21:50:42:e6:30:48:68:7e:47:fb:ac:27:2d:65:bc: 45:a4:39:e6:6e:d4:13:06:d9:0d:35:bc:f1:50:55:3e:3f:1a: 48:80:27:59:cf:d9:0a:94:61:68:02:6f:63:7d:0d:e4:1a:6f: 97:49:d5:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN5YF5seGiMyoz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NDA2NDJjMjktNjc3Ny00ODA4LTg0NjItNWZkM2I2NzZkY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPubUDqgXnG4T+uS/Baae9E3ZzD5zi6YgXq QEFlpzu2QeZmYAVY06L3pNAfgqw2ZPNq79CnQbPIrN1UyFBCu/hPWjU3Uh3Urvcw JsWCl+2Q8H94CflDhpCtI+jRNPgsEyCXpYTFDmnLVCYRSNCyXR9lNpFWFRWRP6h3 gVHoV2X3vtqaecXCvJCbEAJFQ1pqodHg0RsNfJ5Y5tMVBxCZjKFXMoGh9duOYEes h+onsuOpMwfKoO+UgEsQQyRx0K6ZdONWiM2buOZBbjsKClFts+KgZ/1g39Mlr4ao icjXQCMMvBlbaTxa/2F+n+M770RW2wYyS8F3hkCvZ6tKZXenVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC16l8p0zQVlKYuBqNWRooaJxYgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTFjZWUwZWUtMTJhMS0z YTE2LWFjNzUtM2M0ZTc2YjAzMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Dib+6VpssHtuzwZ7G+dXIlbYNF0LB6tuRHm4PXtjzgD/T+COa1NWn zatsC5WFlAtuyUmk+dGUh56TonsiJZpv2q1aiTdd9LYq/fTdMxpN4X9NEebyHYcy YdxhcIc/GW3QU4+O4hSx5kLnOXGF6xOfVyE6+wlPvIOkcFxavCMUqYq1Vke0lLW/ 8i6WbwPyPVBt4wr66/Rx/pmu0GadhGx10yiKiSIoMrU0RJE39JqYKVUq1cPr6MZv 5k1/aGQ3rA/iwHwQX915JCFQQuYwSGh+R/usJy1lvEWkOeZu1BMG2Q01vPFQVT4/ GkiAJ1nP2QqUYWgCb2N9DeQab5dJ1UY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:29 2025 by rpki-client