$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9df1dc2-9af9-3171-8577-db05424b641e.roa File: f9df1dc2-9af9-3171-8577-db05424b641e.roa (raw, json) Hash identifier: XqkUIP4XSONouOX+8gjkUge0MU5G/IHYyJFnDmUSX+Y= Subject key identifier: 07:EF:89:32:9B:16:23:5D:E0:FB:BD:7D:1A:1C:D0:B6:81:AD:F6:2F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D624A5ADED91FD087702F5200 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9df1dc2-9af9-3171-8577-db05424b641e.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 22616 IP address blocks: 205.220.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:5a:de:d9:1f:d0:87:70:2f:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=c499b986-c88b-4ef6-8253-3343149034f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:e9:f3:a2:1d:70:ea:ef:ee:d7:1d:c5:6e: d0:8a:51:03:b8:50:52:f7:0d:a1:4f:d9:a4:be:27: eb:bb:88:33:63:de:4d:0e:78:8a:28:81:c7:4a:b3: 0b:2e:8b:96:f0:02:7c:72:91:1a:7b:41:66:5b:80: b8:1f:ae:4a:6d:b6:4e:0c:3b:05:e7:86:41:df:99: 0e:fb:26:8d:82:e4:2d:42:3a:fe:b7:b1:42:a1:d0: 54:85:65:53:a3:fe:0f:6b:a3:63:13:39:2f:22:cc: 8f:0f:3c:27:27:cf:81:be:67:6a:0c:ce:a6:7b:e8: 7c:44:b6:a0:2d:8f:94:a6:3d:8f:e5:73:b7:5e:aa: db:3c:bf:ff:1b:5c:88:2a:b2:37:f9:a3:29:b6:f3: 9c:68:c6:d1:33:c9:24:d3:d4:bc:f8:6e:4e:b9:4d: 36:8b:59:62:60:96:70:a4:24:fa:de:8f:f1:5a:de: 30:b2:21:bd:35:39:b6:65:16:0f:e2:7d:e1:85:99: fa:75:79:2a:f1:a2:bb:67:14:d3:56:76:f2:6b:0b: 00:9c:6c:44:88:38:f3:93:b9:26:8b:e8:4b:75:32: 23:ae:32:9e:f1:02:ac:ec:44:b0:09:cf:23:12:e2: f9:a7:91:04:56:36:39:9e:2f:e3:83:47:bd:0c:57: 39:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EF:89:32:9B:16:23:5D:E0:FB:BD:7D:1A:1C:D0:B6:81:AD:F6:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9df1dc2-9af9-3171-8577-db05424b641e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:24:29:f7:da:31:0a:9a:1a:c4:65:d9:e2:5d:fb:1c:85:fc: 35:7b:86:71:0f:ac:ee:34:69:53:86:b3:50:3f:e5:2c:68:b1: a1:dc:ba:db:00:27:b5:d1:12:07:45:97:06:0d:eb:2b:7f:0d: c0:b7:68:23:3c:92:cd:17:d8:4c:74:91:09:c5:a8:71:89:67: 02:13:02:cb:2c:da:de:9d:c2:70:0a:f6:e6:b7:e2:da:1c:16: a1:88:38:aa:a0:09:55:e6:cd:8d:a3:52:52:d7:cc:10:f4:94: 40:4f:02:a9:ed:4e:e6:b6:95:4f:76:d0:49:cd:3f:2a:b6:da: 80:5f:8e:b0:aa:ca:03:2c:54:df:08:19:12:95:b1:94:24:2a: 18:a7:4b:b4:19:7a:22:70:c4:28:9b:29:6b:44:60:7f:fc:f1: 3f:5f:8e:12:a9:1b:35:c7:22:f3:ba:b6:18:06:9f:cb:07:e6: c9:8f:98:f0:60:9e:28:d4:6e:7b:1d:79:20:f1:dc:69:91:69: 6d:9a:d5:6e:c4:85:aa:7b:b1:2c:1c:55:ba:98:2a:9b:c0:0c: 0e:c1:d7:10:3e:64:d1:ec:ce:fd:d0:73:0a:14:61:b5:a7:77: af:1a:1a:a6:2e:5f:2f:b5:eb:00:ea:8d:a4:41:b0:e0:1c:01: 0c:f9:b0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSlre2R/Qh3AvUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk YzQ5OWI5ODYtYzg4Yi00ZWY2LTgyNTMtMzM0MzE0OTAzNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvLp86IdcOrv7tcdxW7QilEDuFBS9w2hT9mk vifru4gzY95NDniKKIHHSrMLLouW8AJ8cpEae0FmW4C4H65KbbZODDsF54ZB35kO +yaNguQtQjr+t7FCodBUhWVTo/4Pa6NjEzkvIsyPDzwnJ8+BvmdqDM6me+h8RLag LY+Upj2P5XO3XqrbPL//G1yIKrI3+aMptvOcaMbRM8kk09S8+G5OuU02i1liYJZw pCT63o/xWt4wsiG9NTm2ZRYP4n3hhZn6dXkq8aK7ZxTTVnbyawsAnGxEiDjzk7km i+hLdTIjrjKe8QKs7ESwCc8jEuL5p5EEVjY5ni/jg0e9DFc5jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfviTKbFiNd4Pu9fRoc0LaBrfYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjlkZjFkYzItOWFmOS0z MTcxLTg1NzctZGIwNTQyNGI2NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgkKffaMQqaGsRl2eJd+xyF/DV7hnEPrO40aVOGs1A/5SxosaHcutsA J7XREgdFlwYN6yt/DcC3aCM8ks0X2Ex0kQnFqHGJZwITAsss2t6dwnAK9ua34toc FqGIOKqgCVXmzY2jUlLXzBD0lEBPAqntTua2lU920EnNPyq22oBfjrCqygMsVN8I GRKVsZQkKhinS7QZeiJwxCibKWtEYH/88T9fjhKpGzXHIvO6thgGn8sH5smPmPBg nijUbnsdeSDx3GmRaW2a1W7Ehap7sSwcVbqYKpvADA7B1xA+ZNHszv3QcwoUYbWn d68aGqYuXy+16wDqjaRBsOAcAQz5sHE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:11 2026 by rpki-client