$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa File: a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa (raw, json) Hash identifier: 5XIzDXAhqyPpJ/SaOrOMZOum71afwEZbqpAC+6+1XAI= Subject key identifier: 7D:C8:96:16:C4:76:0B:00:73:E7:1E:12:A8:23:DB:46:5B:DE:F5:78 Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F4328584B2A2C314BF0F770054626A600 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 36103 IP address blocks: 202.69.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:31:4b:f0:f7:70:05:46:26:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=49563d0a-c9f2-4a8e-8932-721c84558fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:69:7c:0b:fe:3c:40:fc:06:1a:6c:5c:47: 70:1c:68:f6:3c:b5:04:45:d9:0c:11:86:4b:6e:89: c2:26:1b:e7:c4:29:2f:ec:57:6d:5f:54:d5:62:5a: 8a:65:3a:c1:61:df:69:07:94:e7:4c:36:43:df:60: 44:64:c3:76:9a:12:df:3d:17:93:fb:ea:7f:ca:e9: 1d:61:e9:8a:21:45:57:f9:bc:d9:32:e5:dd:63:3e: 54:7f:20:69:87:c1:83:93:52:a4:1f:1a:e4:28:5c: 40:56:26:9d:ab:d4:98:3d:11:cd:87:9e:0b:74:ff: e9:0d:6d:bc:a4:a6:ac:58:8c:60:fb:a1:dd:7a:57: 25:16:97:45:ea:ed:74:1e:14:96:e8:40:01:e2:c7: 90:54:f5:06:24:b1:b4:ed:cb:f2:e7:18:6b:66:58: 5b:77:4f:cd:0f:47:a4:12:98:1c:f4:a0:41:3b:28: 2c:38:d5:3d:19:47:dc:3b:8c:af:35:dc:1a:66:ed: cc:cd:04:ac:71:85:5b:8d:b9:9e:bf:62:07:f3:5f: b1:97:15:77:c9:4c:fb:a1:06:68:db:08:9f:69:0d: fa:4b:97:a4:27:41:e9:56:56:61:b9:4d:ce:9c:e3: 5e:22:27:9d:7d:67:b3:c4:8a:8d:7e:1c:fc:ab:98: a4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C8:96:16:C4:76:0B:00:73:E7:1E:12:A8:23:DB:46:5B:DE:F5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/a2dc8fd2-557c-3388-a06d-bb08d27e494b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 202.69.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:be:4a:45:42:f6:1f:15:5e:0f:c4:7e:13:fc:02:b4:09:30: 5e:c8:59:d6:f6:a6:9f:26:89:30:da:b6:0e:fa:6b:3f:27:ee: ed:a2:2a:c7:2f:a4:11:4c:14:01:e0:ad:5c:2e:92:e6:79:84: 35:c7:5e:b4:6d:62:df:14:26:1c:3c:6d:40:24:7f:9c:77:f3: 10:d7:3f:4d:dc:4e:00:da:a2:7c:62:bf:d1:25:69:4d:14:86: 82:70:7d:b2:c7:8d:b5:39:8b:c8:6d:6c:c0:dd:2e:6b:0a:86: ff:34:dc:e4:56:c4:96:2b:6c:e1:91:66:e0:df:88:df:3a:96: 6c:ae:ae:f4:b4:de:0e:6b:8e:30:62:0a:91:fb:ad:8c:55:46: b0:32:e3:16:2b:9b:e3:b4:09:a4:bc:07:24:1c:62:e3:7c:78: 94:c4:d6:26:0a:14:5c:e3:9b:4e:80:8e:68:7e:7e:dc:0e:6a: 9e:32:ee:34:b5:d2:13:93:f9:e1:9e:78:e9:20:ae:f9:90:6f: 0c:e7:7b:ae:73:ab:f3:ff:df:d0:39:33:5c:75:11:5b:71:41: d3:10:73:15:99:4d:c8:f6:09:ca:78:29:4c:5a:a4:09:ce:15: 1c:c4:1a:00:a6:cf:12:50:ea:fe:e1:2a:34:0e:f7:2c:70:8f: c9:0a:59:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDFL8PdwBUYmpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NDk1NjNkMGEtYzlmMi00YThlLTg5MzItNzIxYzg0NTU4ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncVpfAv+PED8BhpsXEdwHGj2PLUERdkMEYZL bonCJhvnxCkv7FdtX1TVYlqKZTrBYd9pB5TnTDZD32BEZMN2mhLfPReT++p/yukd YemKIUVX+bzZMuXdYz5UfyBph8GDk1KkHxrkKFxAViadq9SYPRHNh54LdP/pDW28 pKasWIxg+6HdelclFpdF6u10HhSW6EAB4seQVPUGJLG07cvy5xhrZlhbd0/ND0ek Epgc9KBBOygsONU9GUfcO4yvNdwaZu3MzQSscYVbjbmev2IH81+xlxV3yUz7oQZo 2wifaQ36S5ekJ0HpVlZhuU3OnONeIiedfWezxIqNfhz8q5ikYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3IlhbEdgsAc+ceEqgj20Zb3vV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvYTJkYzhmZDItNTU3Yy0z Mzg4LWEwNmQtYmIwOGQyN2U0OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEykWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq+SkVC9h8VXg/EfhP8ArQJMF7IWdb2pp8miTDatg76az8n7u2iKscv pBFMFAHgrVwukuZ5hDXHXrRtYt8UJhw8bUAkf5x38xDXP03cTgDaonxiv9ElaU0U hoJwfbLHjbU5i8htbMDdLmsKhv803ORWxJYrbOGRZuDfiN86lmyurvS03g5rjjBi CpH7rYxVRrAy4xYrm+O0CaS8ByQcYuN8eJTE1iYKFFzjm06Ajmh+ftwOap4y7jS1 0hOT+eGeeOkgrvmQbwzne65zq/P/39A5M1x1EVtxQdMQcxWZTcj2Ccp4KUxapAnO FRzEGgCmzxJQ6v7hKjQO9yxwj8kKWec= -----END CERTIFICATE-----Generated at Sat Oct 11 07:27:50 2025 by rpki-client