$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bfd0442f-51f3-3efd-97b0-e24677725b0a.roa File: bfd0442f-51f3-3efd-97b0-e24677725b0a.roa (raw, json) Hash identifier: m9qX3GWLnj+j5kJklUuMiwa/WLKEkDnopERrcZ58sHc= Subject key identifier: F4:54:90:C2:0F:DC:76:24:0A:34:A3:64:67:2A:F9:10:FF:4A:9D:62 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BA237962E075927018749D740 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bfd0442f-51f3-3efd-97b0-e24677725b0a.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 22616 IP address blocks: 205.220.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:96:2e:07:59:27:01:87:49:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=3ddee3ae-5c68-4d38-8ab6-d2d88e5e5797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:03:79:df:9d:b0:39:1f:ba:07:ae:2b:b8: 1a:5f:b6:cd:ec:72:26:39:c5:14:24:c2:e2:fd:ab: c4:5d:dd:bf:07:8b:56:ad:e3:bb:00:a3:3d:cd:d6: de:c9:fc:bc:82:9f:ac:ac:18:3d:d2:e6:78:83:66: 93:b7:93:f6:ae:1c:99:4f:39:9f:d9:e1:01:f6:37: b4:04:d6:86:35:0f:3a:a9:63:48:15:59:a8:2b:55: 24:f0:31:5e:13:64:9c:6b:0b:2e:3d:cd:80:58:5e: f1:19:06:e8:fe:67:55:b1:28:ae:ae:58:6a:a9:66: d4:7f:d0:b8:e5:6c:e3:56:00:e8:8d:13:8f:b8:2c: 75:eb:8c:aa:2c:30:db:19:fc:6d:52:50:42:80:2f: 8f:9f:b9:e2:5e:ce:b4:a6:e0:21:47:25:26:89:0f: fe:d1:8f:e5:0c:e2:eb:30:dc:31:67:49:50:cc:a7: ab:62:c2:c5:fa:c1:9e:07:1d:52:92:ce:a6:46:d7: 83:0f:ae:5b:10:a7:96:7d:f7:0c:07:59:db:a7:aa: 99:ec:fa:db:00:03:bf:b8:59:0a:e0:69:24:80:5b: 40:2f:92:a1:46:d3:f3:e3:ea:a0:cc:24:c1:f4:39: 14:f8:e8:c0:33:f9:a1:da:ae:f4:ba:db:aa:98:ee: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:54:90:C2:0F:DC:76:24:0A:34:A3:64:67:2A:F9:10:FF:4A:9D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bfd0442f-51f3-3efd-97b0-e24677725b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:34:38:f1:c4:d7:c3:e8:a5:99:81:ee:f8:c7:cc:71:cc:06: 45:35:0e:08:6d:51:72:b6:83:24:25:3a:6f:8b:88:a3:7d:37: 1a:54:f9:4a:87:b6:66:02:75:ef:28:a8:ee:80:4a:5c:e8:8b: 6a:58:92:13:b5:cd:3e:3e:a6:0a:15:81:5c:8a:09:9f:cd:bb: 5e:1b:ba:a1:bb:67:41:9f:9f:f0:2c:d5:5f:d4:8c:a8:ee:f3: c6:79:47:94:3d:77:7e:4b:6f:54:25:bf:6f:17:e0:f0:ef:7a: f2:22:a4:79:71:a4:fb:cf:2e:00:97:6f:80:cb:99:f5:4b:0e: 38:63:4a:48:9a:2c:21:f2:40:5f:56:86:87:6d:1c:3f:ee:3a: b4:2a:56:c8:91:ec:9c:83:e3:8e:37:69:ec:74:b6:97:d0:7c: 61:14:09:2c:46:58:54:05:8d:bc:5b:10:65:1d:28:5e:b0:58: 0b:21:3a:33:4c:1d:14:4b:8d:d7:16:b6:3e:3b:0f:cd:ef:f2: cf:3c:26:1d:91:d0:d2:ff:e5:bd:78:28:26:9f:e5:bd:fa:de: 0d:e2:e0:da:fc:38:5e:af:27:a7:99:d3:7a:a8:6e:de:a8:69: 61:af:17:cc:27:09:e0:20:8c:17:2d:40:57:9d:31:51:33:17: 0b:4e:1c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN5YuB1knAYdJ10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk M2RkZWUzYWUtNWM2OC00ZDM4LThhYjYtZDJkODhlNWU1Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPsDed+dsDkfugeuK7gaX7bN7HImOcUUJMLi /avEXd2/B4tWreO7AKM9zdbeyfy8gp+srBg90uZ4g2aTt5P2rhyZTzmf2eEB9je0 BNaGNQ86qWNIFVmoK1Uk8DFeE2ScawsuPc2AWF7xGQbo/mdVsSiurlhqqWbUf9C4 5WzjVgDojROPuCx164yqLDDbGfxtUlBCgC+Pn7niXs60puAhRyUmiQ/+0Y/lDOLr MNwxZ0lQzKerYsLF+sGeBx1Sks6mRteDD65bEKeWffcMB1nbp6qZ7PrbAAO/uFkK 4GkkgFtAL5KhRtPz4+qgzCTB9DkU+OjAM/mh2q70utuqmO54SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRUkMIP3HYkCjSjZGcq+RD/Sp1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmZkMDQ0MmYtNTFmMy0z ZWZkLTk3YjAtZTI0Njc3NzI1YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU0OPHE18PopZmB7vjHzHHMBkU1DghtUXK2gyQlOm+LiKN9NxpU+UqH tmYCde8oqO6ASlzoi2pYkhO1zT4+pgoVgVyKCZ/Nu14buqG7Z0Gfn/As1V/UjKju 88Z5R5Q9d35Lb1Qlv28X4PDvevIipHlxpPvPLgCXb4DLmfVLDjhjSkiaLCHyQF9W hodtHD/uOrQqVsiR7JyD4443aex0tpfQfGEUCSxGWFQFjbxbEGUdKF6wWAshOjNM HRRLjdcWtj47D83v8s88Jh2R0NL/5b14KCaf5b363g3i4Nr8OF6vJ6eZ03qobt6o aWGvF8wnCeAgjBctQFedMVEzFwtOHGc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:53:50 2025 by rpki-client