$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa File: d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa (raw, json) Hash identifier: 3/9K38tYtml6wK+eqGh+sJjrHAQ3mkraXr4Pa9/Tjyc= Subject key identifier: CE:FB:5F:B7:09:5A:80:F2:59:A4:0C:14:1D:61:53:C7:23:2C:AE:D9 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BA237958D8D16F26088467010 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 22616 IP address blocks: 205.220.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:95:8d:8d:16:f2:60:88:46:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=df41f1d4-e30f-4e04-b476-ff5f1356d17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:2c:30:09:01:aa:53:94:7a:3a:8b:4f:07: 4c:97:6d:08:62:b9:4c:67:15:1c:5c:9a:c0:54:22: ef:9e:18:24:02:16:95:2b:5b:b8:a0:17:34:48:91: 97:06:9c:81:d8:21:86:8d:55:8b:09:46:14:22:56: b9:54:c8:be:b8:95:77:ed:c7:0c:03:99:65:8a:5d: 6b:d8:be:bc:c9:27:b7:60:88:d0:5c:0b:cc:fe:b7: 6b:4b:03:17:0a:35:46:58:45:c9:39:69:a4:1f:47: 7a:98:fa:1e:0e:ae:ef:fa:3e:66:c5:69:16:78:21: e4:eb:8e:eb:7b:70:3e:67:8e:51:79:18:40:78:a9: 83:d8:db:47:01:8b:73:6f:93:d0:89:b2:96:d3:5d: bc:ee:cd:dd:30:27:2f:c1:62:d2:f1:60:4a:be:06: c4:02:90:9f:0a:4d:ac:a8:1c:2d:c4:61:d9:ca:0e: 31:0c:00:c6:82:75:36:b4:de:43:4c:26:58:6a:ce: 75:4f:2c:af:bb:2e:2e:df:5e:9d:70:f8:03:dc:76: 3d:d8:86:59:dd:02:ec:be:76:34:27:83:40:35:a2: c8:b1:19:2c:99:60:b0:4b:67:cb:a8:66:2f:df:4d: 6e:75:2c:51:d4:ec:ab:75:4e:7a:5e:34:03:c7:7e: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FB:5F:B7:09:5A:80:F2:59:A4:0C:14:1D:61:53:C7:23:2C:AE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d3bdab10-6a9e-3f7d-8985-6fad0ab10872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3d:36:5d:e3:b7:f8:5f:6b:fc:4f:d6:09:58:f9:93:7e:79: 17:cf:d2:4d:aa:c9:56:13:db:94:dc:34:e1:75:ac:a1:d9:e0: ca:44:b4:b2:84:e3:40:c2:90:ca:2a:8f:40:00:83:aa:23:ad: 5a:20:20:57:a5:28:28:5d:0d:51:78:99:2f:25:ee:2c:0c:f5: d2:dc:07:a8:6e:91:15:a2:72:95:e2:fb:e6:47:c3:4a:b8:79: 1c:67:e5:1f:84:66:ba:06:71:b4:86:4e:01:e0:91:dd:1d:32: 21:33:55:54:6f:87:bd:4c:c2:f2:fe:30:5d:11:92:e7:c9:d7: 6f:82:e1:3e:39:30:02:38:92:d6:70:4a:21:1c:77:21:8f:75: 1e:82:91:35:14:e6:23:fb:6f:5f:6e:3a:fe:cc:4a:36:44:8d: 35:6c:e5:61:48:1e:95:79:c1:9c:4b:f1:3b:32:b9:db:b5:c2: 3e:7c:fc:82:b8:0f:2f:05:40:8d:d1:b4:ae:d2:63:9b:a3:89: 9a:3d:92:89:08:b6:ad:12:ce:7d:60:25:91:bc:4d:b9:8b:f2: 86:b1:24:0f:41:bd:32:e0:7c:29:94:54:18:ca:2a:54:37:0d: 07:a1:f8:21:ae:f6:80:d1:d8:cb:19:04:d0:73:a2:34:7e:39: a7:4d:08:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN5WNjRbyYIhGcBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGY0MWYxZDQtZTMwZi00ZTA0LWI0NzYtZmY1ZjEzNTZkMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFAsMAkBqlOUejqLTwdMl20IYrlMZxUcXJrA VCLvnhgkAhaVK1u4oBc0SJGXBpyB2CGGjVWLCUYUIla5VMi+uJV37ccMA5llil1r 2L68ySe3YIjQXAvM/rdrSwMXCjVGWEXJOWmkH0d6mPoeDq7v+j5mxWkWeCHk647r e3A+Z45ReRhAeKmD2NtHAYtzb5PQibKW01287s3dMCcvwWLS8WBKvgbEApCfCk2s qBwtxGHZyg4xDADGgnU2tN5DTCZYas51Tyyvuy4u316dcPgD3HY92IZZ3QLsvnY0 J4NANaLIsRksmWCwS2fLqGYv301udSxR1OyrdU56XjQDx37nswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM77X7cJWoDyWaQMFB1hU8cjLK7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDNiZGFiMTAtNmE5ZS0z ZjdkLTg5ODUtNmZhZDBhYjEwODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg9Nl3jt/hfa/xP1glY+ZN+eRfP0k2qyVYT25TcNOF1rKHZ4MpEtLKE 40DCkMoqj0AAg6ojrVogIFelKChdDVF4mS8l7iwM9dLcB6hukRWicpXi++ZHw0q4 eRxn5R+EZroGcbSGTgHgkd0dMiEzVVRvh71MwvL+MF0RkufJ12+C4T45MAI4ktZw SiEcdyGPdR6CkTUU5iP7b19uOv7MSjZEjTVs5WFIHpV5wZxL8Tsyudu1wj58/IK4 Dy8FQI3RtK7SY5ujiZo9kokItq0Szn1gJZG8TbmL8oaxJA9BvTLgfCmUVBjKKlQ3 DQeh+CGu9oDR2MsZBNBzojR+OadNCAM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:28:51 2025 by rpki-client