$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa File: 11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa (raw, json) Hash identifier: N2mpkz7X33f6+ks/ciphiWWRc/HBxZG8y7GZQN70aXM= Subject key identifier: 4D:D0:EE:D4:61:7E:0D:35:84:CB:62:51:6F:31:F3:FD:52:CF:C2:E7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC2C1FD47AEEE345C2D5C38C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa Signing time: Tue 05 Aug 2025 23:58:27 +0000 ROA not before: Tue 05 Aug 2025 23:58:27 +0000 ROA not after: Tue 04 Nov 2025 00:58:27 +0000 asID: 22616 IP address blocks: 205.220.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:c1:fd:47:ae:ee:34:5c:2d:5c:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 5 23:58:27 2025 GMT Not After : Nov 4 00:58:27 2025 GMT Subject: CN=7052e7b1-f370-4d6e-bd97-e749bed4ff94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:8c:80:62:8b:07:84:95:1d:3d:9e:bf:f7: aa:5b:41:53:71:6d:00:4c:54:f7:c8:29:da:a7:c6: 38:13:64:ae:95:c1:03:63:21:7d:ac:8f:d1:b8:b6: 87:76:21:d2:9d:58:79:b0:1c:a9:b0:2e:dd:ef:16: 8e:7e:f3:d7:b0:2d:8f:2c:57:04:12:44:f4:0c:19: 77:9b:0e:13:8b:6e:32:af:09:e1:69:a6:de:d6:b1: c6:08:ff:4c:9a:c8:8e:c0:da:32:b7:9c:36:f9:8c: ff:a8:95:cb:bd:6d:b3:61:04:20:88:3e:df:c0:f0: ec:3e:de:3d:ad:25:98:d8:59:19:ab:41:b1:aa:2e: 5f:97:42:00:34:83:43:cc:1c:36:4d:1b:d7:2c:93: e7:10:7a:03:15:d6:88:12:9b:51:53:3e:d4:f0:51: 41:a8:49:1a:f9:d4:30:1d:cd:a3:6d:ac:b0:3c:ac: 6c:d5:d8:26:a1:86:cb:65:b1:91:e1:33:8c:1e:fd: b7:96:ca:b2:9b:f8:54:15:0f:e8:41:b2:e4:35:a9: 79:79:db:7d:37:18:bc:fc:3f:f8:31:da:ca:a5:85: b5:3b:b5:2c:19:8b:f1:1f:05:77:42:7f:cd:66:28: 16:93:86:d4:5f:ed:13:c0:93:4e:51:36:1a:6a:3b: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:EE:D4:61:7E:0D:35:84:CB:62:51:6F:31:F3:FD:52:CF:C2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11cee0ee-12a1-3a16-ac75-3c4e76b031f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8f:23:b6:69:78:5c:f4:af:50:cf:83:67:e3:f8:ca:e1:cd: 82:62:67:76:74:99:6e:95:85:bc:37:c8:23:97:4f:04:6e:aa: b1:55:a5:f2:35:a1:ca:a1:2f:63:97:fc:a7:b3:72:9a:68:c5: 33:96:a3:52:1d:7b:19:1d:90:a9:2f:27:ff:e4:24:16:5e:2b: 65:1a:92:16:56:ea:f2:54:e2:a7:ce:4e:a5:de:39:84:43:1e: 47:75:62:3e:7a:cc:8b:89:a8:8e:b6:ba:e5:04:a5:a1:46:21: 34:6c:64:20:cb:9c:28:ed:b6:fe:7f:47:fb:4e:c8:78:51:09: c6:5f:b7:28:55:a6:75:17:b4:5c:48:15:3c:13:95:60:c7:29: d6:68:2f:2d:f1:c3:49:93:d2:bc:27:4a:06:dc:b9:15:b6:7e: 76:4f:fb:6c:56:2d:e5:c9:97:57:88:ea:6f:38:ad:8a:67:6a: 7b:02:7e:8b:7f:53:b1:c3:52:6a:f6:3f:a9:85:c2:fe:11:12: 98:98:27:f8:30:e8:94:57:2a:32:8c:a8:5a:f9:df:71:52:e4: c3:5a:4b:38:3e:3c:54:7e:c2:ce:96:c6:f5:60:1b:b1:3f:83: 8a:16:8d:e1:d0:53:87:7e:67:f0:4f:fd:94:8b:f9:a2:3b:1d: cf:9c:88:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErCwf1Hru40XC1cOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwNTIzNTgyN1oXDTI1MTEwNDAwNTgyN1owLzEtMCsGA1UEAxMk NzA1MmU3YjEtZjM3MC00ZDZlLWJkOTctZTc0OWJlZDRmZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6SMgGKLB4SVHT2ev/eqW0FTcW0ATFT3yCna p8Y4E2SulcEDYyF9rI/RuLaHdiHSnVh5sBypsC7d7xaOfvPXsC2PLFcEEkT0DBl3 mw4Ti24yrwnhaabe1rHGCP9MmsiOwNoyt5w2+Yz/qJXLvW2zYQQgiD7fwPDsPt49 rSWY2FkZq0Gxqi5fl0IANINDzBw2TRvXLJPnEHoDFdaIEptRUz7U8FFBqEka+dQw Hc2jbaywPKxs1dgmoYbLZbGR4TOMHv23lsqym/hUFQ/oQbLkNal5edt9Nxi8/D/4 MdrKpYW1O7UsGYvxHwV3Qn/NZigWk4bUX+0TwJNOUTYaajuVAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3Q7tRhfg01hMtiUW8x8/1Sz8LnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTFjZWUwZWUtMTJhMS0z YTE2LWFjNzUtM2M0ZTc2YjAzMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqPI7ZpeFz0r1DPg2fj+MrhzYJiZ3Z0mW6Vhbw3yCOXTwRuqrFVpfI1 ocqhL2OX/KezcppoxTOWo1IdexkdkKkvJ//kJBZeK2UakhZW6vJU4qfOTqXeOYRD Hkd1Yj56zIuJqI62uuUEpaFGITRsZCDLnCjttv5/R/tOyHhRCcZftyhVpnUXtFxI FTwTlWDHKdZoLy3xw0mT0rwnSgbcuRW2fnZP+2xWLeXJl1eI6m84rYpnansCfot/ U7HDUmr2P6mFwv4REpiYJ/gw6JRXKjKMqFr533FS5MNaSzg+PFR+ws6WxvVgG7E/ g4oWjeHQU4d+Z/BP/ZSL+aI7Hc+ciMk= -----END CERTIFICATE-----Generated at Wed Aug 20 12:04:28 2025 by rpki-client