$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa File: 36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa (raw, json) Hash identifier: BNUT2jW0rCFX/Bm/oLIrP2Wa1rojLw4c+ihiKy1NAww= Subject key identifier: 7C:17:6E:7D:CF:EC:D1:EA:F4:56:F9:45:FD:0A:E4:E2:95:5C:46:01 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BA23795F14B9866F00BF59B70 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 22616 IP address blocks: 205.220.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:95:f1:4b:98:66:f0:0b:f5:9b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=bf4c1888-40ce-4173-96c2-f4ec6824d0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:dc:43:67:75:b6:f6:e8:8e:56:b2:90:76: e2:55:82:01:54:4a:90:fc:d7:74:6d:a8:37:96:dc: 3e:ad:3c:96:12:a3:92:a2:bd:a9:c8:bf:f7:37:81: eb:ca:17:23:9b:cb:91:ca:eb:62:8d:00:28:e4:f6: ac:62:9f:57:d6:25:2a:84:54:6b:90:d7:97:a1:1a: 72:85:79:b9:0e:03:e6:9f:06:52:f5:57:b0:08:f0: 2e:c4:49:5e:55:e8:9f:90:78:a7:3e:88:59:e2:d8: 9b:d9:8d:19:34:d5:bc:8a:69:e5:68:aa:f8:63:09: 0d:61:b9:94:bf:98:54:86:28:59:68:3c:6f:53:83: 37:04:ca:54:bf:52:37:3a:08:40:69:fa:ba:9f:5f: 87:ae:95:d2:33:94:53:5b:b4:0a:40:e2:b0:a3:ab: ec:97:2b:27:3b:de:f6:28:84:ea:02:15:7f:f0:67: 84:11:4e:28:17:af:a3:d0:01:d5:fb:ec:40:3f:f8: 10:8c:7f:c8:1b:c6:23:f9:4a:8d:db:e1:45:19:62: ca:bf:d2:ed:b8:17:83:98:69:a9:73:a7:aa:c4:21: 1f:33:d1:26:61:72:d9:8f:a8:98:09:2c:4a:08:9f: 4d:28:56:2e:e9:79:13:32:5c:28:71:b2:ee:ed:9f: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:17:6E:7D:CF:EC:D1:EA:F4:56:F9:45:FD:0A:E4:E2:95:5C:46:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:ae:59:1c:3d:d5:e2:32:93:6b:04:97:42:a5:70:64:32:8d: b6:bb:f9:9e:2c:ee:25:39:4b:ef:83:e9:11:54:69:5d:5c:de: ca:37:71:4e:e8:c2:bb:06:d4:6a:da:50:19:32:10:38:4c:e8: 89:3f:12:ad:67:ea:7c:33:67:4a:26:d2:0e:1b:fd:bd:80:df: fc:87:d3:ff:3f:81:3f:dd:69:a7:f0:74:5c:eb:ad:a7:e0:c1: 7c:01:66:ea:4b:24:cf:91:23:af:79:41:e4:5f:cf:df:6b:e7: d6:c7:ae:7b:f8:3e:37:1a:3e:28:dc:19:4d:64:a8:7e:b9:d0: 09:be:37:07:a1:41:a6:6b:53:e5:21:ab:6a:48:e4:06:68:ef: c8:ec:51:75:07:c2:3c:a0:a9:73:a7:29:f9:5d:99:c8:f7:af: fa:79:ad:38:d9:3c:fc:15:cb:66:27:38:43:c4:3c:fc:33:11: fa:a5:6c:05:c3:0b:d5:e8:43:19:c8:32:2f:35:4e:1a:19:c7: db:5a:61:b3:d4:bf:3e:f3:82:3d:cd:94:51:8c:0c:51:6b:d4: 82:49:87:10:20:fd:08:98:67:17:e9:66:3f:20:47:c0:c5:a7: 3e:11:30:93:9f:72:bb:bf:32:7c:8c:af:ac:28:95:69:54:34: 7a:51:94:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN5XxS5hm8Av1m3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk YmY0YzE4ODgtNDBjZS00MTczLTk2YzItZjRlYzY4MjRkMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzncQ2d1tvbojlaykHbiVYIBVEqQ/Nd0bag3 ltw+rTyWEqOSor2pyL/3N4Hryhcjm8uRyutijQAo5PasYp9X1iUqhFRrkNeXoRpy hXm5DgPmnwZS9VewCPAuxEleVeifkHinPohZ4tib2Y0ZNNW8imnlaKr4YwkNYbmU v5hUhihZaDxvU4M3BMpUv1I3OghAafq6n1+HrpXSM5RTW7QKQOKwo6vslysnO972 KITqAhV/8GeEEU4oF6+j0AHV++xAP/gQjH/IG8Yj+UqN2+FFGWLKv9LtuBeDmGmp c6eqxCEfM9EmYXLZj6iYCSxKCJ9NKFYu6XkTMlwocbLu7Z9dPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwXbn3P7NHq9Fb5Rf0K5OKVXEYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzZmNmI0YzEtN2UwNS0z YTEwLThlMDItOTNlY2RlNjQ5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6uWRw91eIyk2sEl0KlcGQyjba7+Z4s7iU5S++D6RFUaV1c3so3cU7o wrsG1GraUBkyEDhM6Ik/Eq1n6nwzZ0om0g4b/b2A3/yH0/8/gT/daafwdFzrrafg wXwBZupLJM+RI695QeRfz99r59bHrnv4PjcaPijcGU1kqH650Am+NwehQaZrU+Uh q2pI5AZo78jsUXUHwjygqXOnKfldmcj3r/p5rTjZPPwVy2YnOEPEPPwzEfqlbAXD C9XoQxnIMi81ThoZx9taYbPUvz7zgj3NlFGMDFFr1IJJhxAg/QiYZxfpZj8gR8DF pz4RMJOfcru/MnyMr6wolWlUNHpRlBo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:14:04 2025 by rpki-client