$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa File: cf946ccd-298e-3852-a04f-6a34b0aec559.roa (raw, json) Hash identifier: DXcwdpx8WV2mxlPVb7UE3GkORl0MlQFoUUzBMPP4Z90= Subject key identifier: 5B:51:BF:A2:0D:59:F8:EA:2C:C6:13:9E:57:04:A1:0A:34:1C:89:25 Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F4328584B99D7868ED412A7FB823DCB00 Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395823 IP address blocks: 205.201.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:86:8e:d4:12:a7:fb:82:3d:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=3582b2a9-bb86-418e-88e7-8f0abe2593b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:8d:44:67:67:74:37:95:af:a5:8d:a9:67: 02:7a:24:e3:cd:d9:87:9e:0c:78:dc:50:c9:7a:cf: 6c:ad:d6:c0:84:3c:48:71:7a:b1:81:d5:f0:76:69: f3:54:ec:63:37:22:06:0f:24:15:1a:6f:41:18:5b: 77:ff:63:af:c0:5d:fc:87:47:b4:e8:7c:60:59:6c: e2:2a:da:80:46:93:c8:cd:0d:03:62:3e:6c:3c:50: 1d:99:8e:4a:89:4b:aa:6a:de:5b:86:91:f4:19:93: e9:cf:8b:3b:57:1a:a3:67:e4:97:87:0a:89:4b:99: da:80:86:74:13:5c:23:e6:be:bd:be:50:f6:5b:78: d0:15:fb:5e:ed:d8:e5:81:40:c7:b1:d9:75:5a:fa: 05:db:c8:be:61:27:06:91:ce:a7:bc:fd:d3:72:77: 12:a7:6c:ba:92:54:a3:10:b0:8d:9a:1d:69:0f:d5: 44:94:de:2a:95:fa:17:ef:4a:a4:e8:77:ad:31:5b: 9a:f7:ad:22:6e:37:ef:15:9c:6c:e1:0e:21:9a:7e: c2:d1:29:28:05:e0:37:9e:58:cf:3c:6e:06:ee:4a: b8:56:df:33:0c:dd:c9:69:c8:a3:fc:5c:6b:0f:2d: 59:bc:93:e2:08:80:82:27:69:3a:6b:11:df:2b:b5: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:51:BF:A2:0D:59:F8:EA:2C:C6:13:9E:57:04:A1:0A:34:1C:89:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/cf946ccd-298e-3852-a04f-6a34b0aec559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv4: 205.201.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:01:83:2e:2f:7d:03:73:54:40:da:c8:e9:5e:52:37:42:14: 0a:da:a5:bb:a0:1b:56:8c:f6:4f:76:25:32:80:f5:c0:64:04: 04:60:60:f9:71:55:c5:17:6d:d8:e5:fe:4b:a3:21:94:70:39: 7e:b8:25:2f:4c:70:27:0f:d4:df:86:be:bb:87:67:77:59:24: 9c:2f:8f:cd:02:e5:47:1f:ce:8c:0c:0c:c7:56:08:fb:51:a2: f1:6a:06:6e:62:ee:86:1a:db:f0:a2:50:77:c4:e2:0d:f3:34: e8:34:f9:f1:a7:29:3b:f8:29:ea:c5:d3:87:d6:76:60:48:c9: e1:37:c9:ea:43:94:53:a8:69:fe:67:63:02:e8:18:92:30:44: 0f:ce:6f:e8:da:2a:6a:2e:82:93:aa:98:97:8a:1b:5d:3e:f1: a1:c5:f0:58:c4:a0:75:71:fb:32:21:44:a9:3b:29:50:24:97: 73:11:44:37:48:f4:16:19:bc:92:01:94:66:f6:47:68:f4:9e: c1:48:3c:0a:22:ff:1f:f4:c3:2c:75:06:0f:78:2d:49:9d:1a: 6b:77:48:e5:a9:8c:94:23:8b:e4:77:ef:fd:53:51:02:b2:34: 64:a6:93:52:74:37:20:88:e2:c7:e2:63:94:3f:33:2a:25:69: ce:8a:d4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14aO1BKn+4I9ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MzU4MmIyYTktYmI4Ni00MThlLTg4ZTctOGYwYWJlMjU5M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPWNRGdndDeVr6WNqWcCeiTjzdmHngx43FDJ es9srdbAhDxIcXqxgdXwdmnzVOxjNyIGDyQVGm9BGFt3/2OvwF38h0e06HxgWWzi KtqARpPIzQ0DYj5sPFAdmY5KiUuqat5bhpH0GZPpz4s7VxqjZ+SXhwqJS5nagIZ0 E1wj5r69vlD2W3jQFfte7djlgUDHsdl1WvoF28i+YScGkc6nvP3TcncSp2y6klSj ELCNmh1pD9VElN4qlfoX70qk6HetMVua960ibjfvFZxs4Q4hmn7C0SkoBeA3nljP PG4G7kq4Vt8zDN3Jacij/FxrDy1ZvJPiCICCJ2k6axHfK7VD+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtRv6INWfjqLMYTnlcEoQo0HIklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvY2Y5NDZjY2QtMjk4ZS0z ODUyLWEwNGYtNmEzNGIwYWVjNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzck/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4Bgy4vfQNzVEDayOleUjdCFArapbugG1aM9k92JTKA9cBkBARgYPlx VcUXbdjl/kujIZRwOX64JS9McCcP1N+GvruHZ3dZJJwvj80C5UcfzowMDMdWCPtR ovFqBm5i7oYa2/CiUHfE4g3zNOg0+fGnKTv4KerF04fWdmBIyeE3yepDlFOoaf5n YwLoGJIwRA/Ob+jaKmougpOqmJeKG10+8aHF8FjEoHVx+zIhRKk7KVAkl3MRRDdI 9BYZvJIBlGb2R2j0nsFIPAoi/x/0wyx1Bg94LUmdGmt3SOWpjJQji+R37/1TUQKy NGSmk1J0NyCI4sfiY5Q/Myolac6K1FY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:20 2025 by rpki-client