$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/a5033d08-7b38-3e92-87fd-3c7e05f2fce0.roa File: a5033d08-7b38-3e92-87fd-3c7e05f2fce0.roa (raw, json) Hash identifier: DceEcP9Pzz4Q2qd7KXpfec/vrk5ihTdWVsyrsF4SSts= Subject key identifier: B3:E2:04:C9:C7:4E:BE:A3:07:32:8A:E9:10:65:80:A6:3C:43:C1:F8 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584BC2FF0DC8D5875D975A4E74F8 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/a5033d08-7b38-3e92-87fd-3c7e05f2fce0.roa Signing time: Wed 05 Nov 2025 18:48:25 +0000 ROA not before: Wed 05 Nov 2025 18:48:25 +0000 ROA not after: Tue 03 Feb 2026 18:48:25 +0000 asID: 400400 IP address blocks: 203.20.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:ff:0d:c8:d5:87:5d:97:5a:4e:74:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Nov 5 18:48:25 2025 GMT Not After : Feb 3 18:48:25 2026 GMT Subject: CN=1b65d4d4-59c9-4589-aefe-0f9c4cb5bc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:0e:47:db:e9:64:4e:e6:a7:b7:a3:49:69: 13:b1:1a:f9:23:02:8f:aa:eb:b4:6c:ba:a9:21:6a: f8:bb:ef:62:b6:56:32:bc:42:cb:6a:46:ac:44:0c: 6d:a1:51:08:ff:75:7c:8e:90:2f:29:ea:be:0a:36: 57:2b:7c:80:41:d3:ca:97:11:12:77:57:59:bb:1b: 88:d4:19:14:9b:d9:a1:4f:64:78:50:a1:19:dc:24: 25:37:e5:77:5f:67:92:91:48:c2:eb:a0:31:fd:44: 3d:4b:fb:f6:86:04:05:25:74:14:3f:58:f3:6e:df: 14:c2:dc:5f:16:97:5b:a5:64:20:84:73:3c:35:55: e1:69:01:b4:38:42:23:60:4b:c9:03:8c:35:11:7b: 7e:d5:cd:25:13:d5:fe:f1:77:91:30:7d:ae:89:a3: b7:5d:72:62:5b:c2:d9:58:7a:0b:f0:4a:7a:40:77: c7:58:6f:27:1f:ae:8c:6b:fd:1d:50:cb:11:d1:80: 34:aa:d2:fa:48:88:cd:e5:4f:e4:db:56:bc:bf:6f: 13:d6:97:e0:f1:66:77:0a:a2:f7:29:2d:f1:1e:13: a7:5c:3e:74:a7:85:2b:db:1a:fe:fc:7f:33:05:1d: f8:a8:0d:6c:e7:b1:f0:4c:5e:1b:d0:05:da:73:f9: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E2:04:C9:C7:4E:BE:A3:07:32:8A:E9:10:65:80:A6:3C:43:C1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/a5033d08-7b38-3e92-87fd-3c7e05f2fce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 203.20.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ea:9c:d5:a9:43:8f:d8:82:c6:d9:2f:01:08:25:d3:67:ca: 48:e4:15:d5:59:6c:f7:08:de:c0:39:5f:f8:a3:49:42:69:69: b8:ab:aa:c8:68:c3:3f:fe:6d:7c:7b:d4:42:4f:cc:c2:e2:6b: 6c:5e:cf:3e:8b:9a:05:a5:e7:7f:47:58:50:9b:11:cb:69:25: 18:07:7c:85:5d:36:dc:b1:9f:8d:65:73:1e:48:94:87:45:46: 9a:e7:86:22:16:9f:84:4b:39:83:e5:05:3a:d8:57:77:e9:f1: 4a:9c:72:ea:a8:d0:c1:f1:e5:6a:ab:c4:5e:c2:ac:3d:9f:fd: d5:8a:ec:81:98:d2:bb:14:6e:bb:69:47:5c:b3:b5:f2:5e:5e: 8d:78:51:f5:f3:a0:80:6c:fd:61:34:2d:6e:66:d4:2f:9c:f7: 5e:bb:37:b8:bb:9d:59:33:21:e6:f3:eb:3e:c1:46:5e:a8:52: ed:86:9e:e9:a1:64:63:ee:21:0b:b1:3a:3a:95:c0:bd:5e:36: 12:59:62:e7:dd:b5:f7:46:ff:0f:53:d1:73:48:2c:c4:72:ea: 26:62:68:57:96:30:f5:23:83:69:1c:c9:ef:92:4b:43:52:b9: 13:16:8f:d0:07:5f:71:17:5e:d7:fe:02:98:2e:30:dd:38:29: b9:65:0c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvC/w3I1Yddl1pOdPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MTEwNTE4NDgyNVoXDTI2MDIwMzE4NDgyNVowLzEtMCsGA1UEAxMk MWI2NWQ0ZDQtNTljOS00NTg5LWFlZmUtMGY5YzRjYjViYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoAOR9vpZE7mp7ejSWkTsRr5IwKPquu0bLqp IWr4u+9itlYyvELLakasRAxtoVEI/3V8jpAvKeq+CjZXK3yAQdPKlxESd1dZuxuI 1BkUm9mhT2R4UKEZ3CQlN+V3X2eSkUjC66Ax/UQ9S/v2hgQFJXQUP1jzbt8Uwtxf FpdbpWQghHM8NVXhaQG0OEIjYEvJA4w1EXt+1c0lE9X+8XeRMH2uiaO3XXJiW8LZ WHoL8Ep6QHfHWG8nH66Ma/0dUMsR0YA0qtL6SIjN5U/k21a8v28T1pfg8WZ3CqL3 KS3xHhOnXD50p4Ur2xr+/H8zBR34qA1s57HwTF4b0AXac/lzzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPiBMnHTr6jBzKK6RBlgKY8Q8H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvYTUwMzNkMDgtN2IzOC0z ZTkyLTg3ZmQtM2M3ZTA1ZjJmY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyxTzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTqnNWpQ4/YgsbZLwEIJdNnykjkFdVZbPcI3sA5X/ijSUJpabirqsho wz/+bXx71EJPzMLia2xezz6LmgWl539HWFCbEctpJRgHfIVdNtyxn41lcx5IlIdF RprnhiIWn4RLOYPlBTrYV3fp8Uqccuqo0MHx5WqrxF7CrD2f/dWK7IGY0rsUbrtp R1yztfJeXo14UfXzoIBs/WE0LW5m1C+c9167N7i7nVkzIebz6z7BRl6oUu2Gnumh ZGPuIQuxOjqVwL1eNhJZYufdtfdG/w9T0XNILMRy6iZiaFeWMPUjg2kcye+SS0NS uRMWj9AHX3EXXtf+ApguMN04KbllDE0= -----END CERTIFICATE-----Generated at Thu Nov 6 07:27:15 2025 by rpki-client