$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa File: b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa (raw, json) Hash identifier: NoqvSn6KLnB5KfRpdG0TCH4s2w9OcoPRSGThRs+f7bk= Subject key identifier: F5:E8:75:68:A9:A9:25:CF:27:5D:14:4B:31:D9:C8:85:0F:DC:9B:04 Certificate issuer: /CN=8acb4eb7-b033-4163-a995-eb1cfc8903b9 Certificate serial: 010D0C9F4328584BB88D0633AC846B7E10D98E80 Authority key identifier: 71:EE:CF:06:4C:D4:0C:E4:A2:2D:8C:3F:B3:41:5D:72:20:C8:2B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 25697 IP address blocks: 203.30.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/8acb4eb7-b033-4163-a995-eb1cfc8903b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/8acb4eb7-b033-4163-a995-eb1cfc8903b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:06:33:ac:84:6b:7e:10:d9:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8acb4eb7-b033-4163-a995-eb1cfc8903b9 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=6d62f8d7-25f9-4481-b924-74471c2fa124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:40:79:fe:04:60:7b:01:7f:75:be:dd:0f:31: 53:58:5f:97:cc:85:ea:dd:16:6a:ef:5a:5d:f0:9b: 35:a8:70:04:a4:d6:4a:25:e6:4b:56:f2:79:c7:2c: ef:a5:61:a0:79:5c:5f:f9:9b:a4:6e:8e:19:44:0f: 8d:ca:5b:a1:d8:5d:c4:9a:c7:30:4a:39:e9:de:fc: 7b:76:44:d1:4f:cd:ba:07:15:4a:a6:0f:03:db:f8: 0c:4c:93:9d:1e:8b:be:6c:47:7d:1a:8a:e4:93:b2: ba:c1:38:89:d0:d9:83:eb:b1:0b:a1:a4:a3:c6:0d: f3:44:38:47:32:f2:3d:cd:35:c8:d9:45:87:93:f8: 1b:77:c1:f8:4c:fd:ef:69:1f:b0:6b:cc:10:50:a8: 66:8b:23:67:05:49:61:6d:6e:66:f4:0c:84:fa:f8: 62:67:96:31:49:5a:5a:2b:6e:1a:3e:09:bd:0d:3d: bb:fa:c0:c6:cd:af:36:4f:c8:1f:dd:65:60:2a:7b: 7b:62:d3:6e:7f:c6:ee:43:f3:4c:f6:ff:b4:db:1c: d3:a7:43:39:56:28:5f:60:b1:87:6a:56:1d:b6:ee: 44:8e:7b:bb:90:d2:fe:6d:c9:73:ae:e5:53:67:93: c2:26:d6:2d:dc:0a:2e:83:62:d2:0d:ab:de:37:c9: f9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:75:68:A9:A9:25:CF:27:5D:14:4B:31:D9:C8:85:0F:DC:9B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/b4eaf9ec-528c-3c35-8bf3-e432144774c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9/8acb4eb7-b033-4163-a995-eb1cfc8903b9.crl X509v3 Authority Key Identifier: keyid:71:EE:CF:06:4C:D4:0C:E4:A2:2D:8C:3F:B3:41:5D:72:20:C8:2B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8acb4eb7-b033-4163-a995-eb1cfc8903b9.cer sbgp-ipAddrBlock: critical IPv4: 203.30.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:64:4b:86:ff:d1:b2:e5:e6:f4:8f:76:d8:f2:46:ea:e6:55: 66:71:00:82:ae:55:0b:04:fe:87:35:5c:50:ad:19:6f:d8:40: 4c:f1:93:fe:4d:dc:3b:da:14:29:fc:57:6c:6c:10:48:b8:df: 0f:a4:ae:8f:b9:26:2a:fc:8c:d1:5a:62:6d:71:14:6c:fd:0e: 27:1d:62:fb:9f:94:7b:1f:60:25:72:ea:1b:d4:49:6c:17:0c: aa:91:ee:c3:7a:4f:5d:f1:f9:c7:30:4c:b0:db:5c:8e:5e:e7: 34:df:4b:c6:5f:f4:62:fa:56:75:bb:91:27:d3:d4:ea:65:4e: 8f:b7:ec:d9:2a:24:71:b3:85:0f:1e:c7:63:5b:92:ab:f4:3f: 86:bb:19:cf:a1:84:ca:d1:45:2c:5c:0d:34:77:9c:98:76:d9: 8d:d1:f9:b6:49:ea:ff:66:5c:d6:aa:4c:7b:9d:47:3e:8a:aa: 44:0d:37:2b:32:d2:49:09:db:99:99:74:68:c9:6e:5d:71:d9: d3:75:2f:b5:ba:9b:28:27:fd:b1:de:b3:1f:f9:c1:d2:09:e3: 27:e1:7a:99:4e:25:b6:89:46:f6:8f:d6:f0:0a:8c:2c:c2:89: 12:da:ea:2e:36:e9:b7:d2:a9:11:d8:99:60:43:bb:33:0f:86: 3a:3f:a1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQYzrIRrfhDZjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjYjRlYjctYjAzMy00MTYzLWE5OTUtZWIxY2ZjODkw M2I5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmQ2MmY4ZDctMjVmOS00NDgxLWI5MjQtNzQ0NzFjMmZhMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkB5/gRgewF/db7dDzFTWF+XzIXq3RZq71pd 8Js1qHAEpNZKJeZLVvJ5xyzvpWGgeVxf+Zukbo4ZRA+Nyluh2F3EmscwSjnp3vx7 dkTRT826BxVKpg8D2/gMTJOdHou+bEd9Gorkk7K6wTiJ0NmD67ELoaSjxg3zRDhH MvI9zTXI2UWHk/gbd8H4TP3vaR+wa8wQUKhmiyNnBUlhbW5m9AyE+vhiZ5YxSVpa K24aPgm9DT27+sDGza82T8gf3WVgKnt7YtNuf8buQ/NM9v+02xzTp0M5VihfYLGH alYdtu5Ejnu7kNL+bclzruVTZ5PCJtYt3Aoug2LSDaveN8n5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXodWipqSXPJ10USzHZyIUP3JsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YWNi NGViNy1iMDMzLTQxNjMtYTk5NS1lYjFjZmM4OTAzYjkvYjRlYWY5ZWMtNTI4Yy0z YzM1LThiZjMtZTQzMjE0NDc3NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGFjYjRlYjctYjAzMy00MTYzLWE5 OTUtZWIxY2ZjODkwM2I5LzhhY2I0ZWI3LWIwMzMtNDE2My1hOTk1LWViMWNmYzg5 MDNiOS5jcmwwHwYDVR0jBBgwFoAUce7PBkzUDOSiLYw/s0FdciDIK2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YWNiNGViNy1iMDMzLTQxNjMtYTk5NS1lYjFj ZmM4OTAzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByx7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRkS4b/0bLl5vSPdtjyRurmVWZxAIKuVQsE/oc1XFCtGW/YQEzxk/5N 3DvaFCn8V2xsEEi43w+kro+5Jir8jNFaYm1xFGz9DicdYvuflHsfYCVy6hvUSWwX DKqR7sN6T13x+ccwTLDbXI5e5zTfS8Zf9GL6VnW7kSfT1OplTo+37NkqJHGzhQ8e x2Nbkqv0P4a7Gc+hhMrRRSxcDTR3nJh22Y3R+bZJ6v9mXNaqTHudRz6KqkQNNysy 0kkJ25mZdGjJbl1x2dN1L7W6mygn/bHesx/5wdIJ4yfheplOJbaJRvaP1vAKjCzC iRLa6i426bfSqRHYmWBDuzMPhjo/oZs= -----END CERTIFICATE-----Generated at Wed Nov 5 14:32:59 2025 by rpki-client