$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/34c4673f-eaf8-36f6-a7bf-a87d01a728e4.roa File: 34c4673f-eaf8-36f6-a7bf-a87d01a728e4.roa (raw, json) Hash identifier: Fy+EuEpuWXe5lNjowrk2DRrp5orEkzyRxvEVwtLNsGI= Subject key identifier: 65:28:D8:19:DC:2C:E8:CD:97:2F:AF:96:34:1B:1F:AF:30:4C:55:A6 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BA237950F40C719CEE430AA00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/34c4673f-eaf8-36f6-a7bf-a87d01a728e4.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 53813 IP address blocks: 205.220.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:95:0f:40:c7:19:ce:e4:30:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=f2bd98d3-1c08-4436-a65f-3fe43022ff04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:9c:2f:b4:08:c3:e0:ea:b8:9f:62:57:b9: 09:a7:b3:1a:f6:73:38:5a:a8:8c:3a:bc:ff:0a:9a: f1:18:d6:f5:e3:ba:f7:5a:0a:ff:73:17:f3:6f:dd: 41:ea:4d:90:58:d6:7d:e7:4e:2c:7c:31:61:5e:30: d6:c4:c9:16:b8:4b:64:b9:9c:a0:b3:03:03:12:5b: ba:df:08:77:5d:06:ec:43:70:d7:ee:83:19:02:b0: a1:55:e0:02:fa:7b:fc:8e:ee:3b:11:84:14:df:a3: 4d:3f:b8:48:69:48:2e:14:76:38:e2:1c:02:f2:66: f4:5e:8e:76:31:3e:4b:83:29:2d:d0:0c:85:8e:03: 55:d8:76:b0:36:bb:55:ad:8e:64:9b:61:ec:60:f5: 11:83:b2:81:72:7f:67:21:28:66:0f:ab:9c:cd:82: 50:79:4d:d5:4e:fc:23:6e:48:4b:5d:27:c2:41:d8: 74:85:fc:49:21:54:4a:db:90:b9:01:72:cb:ff:4a: 86:28:e1:f1:31:ca:15:67:92:82:e4:fd:36:7a:2f: 29:ea:93:72:b6:dd:a3:d7:90:c1:65:19:7a:e3:94: 7a:3c:a3:85:e6:89:bf:7b:3f:ef:87:09:9c:12:56: dc:48:d8:cb:22:fc:ce:f5:c5:72:ee:3d:96:e7:d4: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:28:D8:19:DC:2C:E8:CD:97:2F:AF:96:34:1B:1F:AF:30:4C:55:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/34c4673f-eaf8-36f6-a7bf-a87d01a728e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a4:3f:ec:09:21:92:8d:e4:d9:91:75:b5:be:7c:cb:f2:a1: 54:6b:74:62:e1:b9:ad:e2:62:ad:e9:48:73:e0:54:24:ff:b7: c4:99:ad:c8:d8:05:fa:11:f6:3b:79:06:01:81:23:df:59:4b: 5c:37:10:26:01:e4:c4:52:b4:03:79:c2:09:90:ca:67:ae:83: d1:45:6d:f2:79:de:92:3d:c3:d9:35:42:f5:30:16:07:21:fc: ab:7a:e0:cd:38:e1:a7:73:e5:e6:8e:1c:ad:cd:48:1d:b7:75: ed:e0:22:21:22:30:c3:0c:d6:6d:f5:2c:3e:fc:f3:e8:26:2d: 08:8e:e7:28:3e:e3:59:d9:dc:24:dd:4a:8a:86:37:e6:87:b1: 65:96:c4:21:c5:b4:a3:e9:48:60:3f:3d:90:27:aa:03:8b:f0: e0:53:17:32:5a:c3:db:ff:c2:4b:87:4e:48:40:5f:1e:fb:3b: 03:2a:0d:0e:6a:1a:44:7f:44:41:a2:da:4a:70:c7:29:60:9e: ef:bf:5e:38:8a:13:02:f1:af:d5:52:b3:96:78:c7:df:8b:7a: eb:91:7c:5f:70:2b:50:a1:d9:0e:0e:be:ba:d2:30:87:6b:f3: 09:48:40:e6:a4:b7:c7:5b:d4:bd:40:1b:e1:6a:b0:54:ce:c8: b1:28:10:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN5UPQMcZzuQwqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZjJiZDk4ZDMtMWMwOC00NDM2LWE2NWYtM2ZlNDMwMjJmZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRGcL7QIw+DquJ9iV7kJp7Ma9nM4WqiMOrz/ CprxGNb147r3Wgr/cxfzb91B6k2QWNZ9504sfDFhXjDWxMkWuEtkuZygswMDElu6 3wh3XQbsQ3DX7oMZArChVeAC+nv8ju47EYQU36NNP7hIaUguFHY44hwC8mb0Xo52 MT5Lgykt0AyFjgNV2HawNrtVrY5km2HsYPURg7KBcn9nIShmD6uczYJQeU3VTvwj bkhLXSfCQdh0hfxJIVRK25C5AXLL/0qGKOHxMcoVZ5KC5P02ei8p6pNytt2j15DB ZRl645R6PKOF5om/ez/vhwmcElbcSNjLIvzO9cVy7j2W59QTlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUo2BncLOjNly+vljQbH68wTFWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzRjNDY3M2YtZWFmOC0z NmY2LWE3YmYtYTg3ZDAxYTcyOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGikP+wJIZKN5NmRdbW+fMvyoVRrdGLhua3iYq3pSHPgVCT/t8SZrcjY BfoR9jt5BgGBI99ZS1w3ECYB5MRStAN5wgmQymeug9FFbfJ53pI9w9k1QvUwFgch /Kt64M044adz5eaOHK3NSB23de3gIiEiMMMM1m31LD788+gmLQiO5yg+41nZ3CTd SoqGN+aHsWWWxCHFtKPpSGA/PZAnqgOL8OBTFzJaw9v/wkuHTkhAXx77OwMqDQ5q GkR/REGi2kpwxylgnu+/XjiKEwLxr9VSs5Z4x9+LeuuRfF9wK1Ch2Q4OvrrSMIdr 8wlIQOakt8db1L1AG+FqsFTOyLEoEHU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:47:24 2025 by rpki-client