$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5bd9491d-0a40-3755-a995-24dfe3643e35.roa File: 5bd9491d-0a40-3755-a995-24dfe3643e35.roa (raw, json) Hash identifier: abhmvYOKQ9IldY5qxjZnsQX5HlNwkgaNPbo9YuHiEbc= Subject key identifier: 62:9F:E0:27:C3:84:3C:B2:EE:5F:BB:BE:3B:64:FC:23:C8:CB:DC:D9 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2EB17D28B893BD6883F40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5bd9491d-0a40-3755-a995-24dfe3643e35.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 205.220.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:eb:17:d2:8b:89:3b:d6:88:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=92d707d0-e4f4-4e05-a9c8-844615c9dfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:9e:7f:93:ab:50:f0:1e:31:16:d2:18:71: 46:f4:c8:e6:40:2f:b0:97:89:92:df:17:1b:5c:b9: 2b:6e:30:42:1f:17:ac:1b:0f:89:26:9e:3a:e2:ef: 4b:45:8f:03:dc:34:2c:5c:20:24:2e:a2:cc:5c:d4: d0:fc:4e:03:da:dd:78:5a:bd:d9:03:aa:6b:08:86: 33:28:58:d7:a0:c3:bf:62:cd:09:c3:21:41:20:d5: b1:b1:1e:86:e4:72:6a:4e:25:af:9c:60:f5:ae:2d: e1:51:9b:e4:ed:a5:c7:03:77:a2:9e:35:ae:4e:8b: 59:e8:bd:7b:75:62:73:63:51:4e:70:1a:33:27:9f: de:28:9c:d3:f8:6e:80:0a:dd:fa:60:b0:be:0d:45: a4:7f:3e:2c:85:22:81:77:b8:da:83:1d:1b:43:27: 69:1f:27:68:4c:d7:93:33:81:44:ca:84:b8:67:77: 01:5c:11:7f:52:68:9c:70:1f:29:77:7c:a0:c6:92: 66:c0:c5:97:51:ed:29:3a:04:6b:e9:14:49:1b:15: 74:14:6b:3d:ea:3a:ad:1f:49:fc:54:a4:ab:ed:f5: 87:cf:20:a2:26:59:e3:19:55:e7:5b:05:fc:b6:2b: 33:33:ed:55:34:41:d2:94:26:d9:78:ea:80:15:7e: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9F:E0:27:C3:84:3C:B2:EE:5F:BB:BE:3B:64:FC:23:C8:CB:DC:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5bd9491d-0a40-3755-a995-24dfe3643e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:fa:47:39:47:29:59:84:d9:63:1f:71:e1:5c:09:dc:ff:0a: 13:d3:e5:af:b8:13:bd:ce:3f:0c:c9:ec:28:9e:e8:57:33:45: 98:8e:1f:94:22:ba:2c:57:95:1c:13:1f:f6:04:84:97:7b:8d: 52:fa:1a:f9:2d:1e:8a:c2:35:86:ac:b6:e2:f3:0e:1f:ab:e6: cc:8d:19:d8:1b:25:f0:9f:93:a6:aa:7e:b6:d6:8a:10:5f:52: bc:d8:c9:15:82:05:27:39:6c:74:4e:14:c5:b0:ba:2a:27:21: 2b:6e:c7:1b:c6:ad:de:e2:79:3b:64:51:dc:38:49:67:c3:00: 15:89:ed:ff:21:31:c4:ff:7b:76:c7:e5:ab:b2:f9:c5:9b:7d: f3:9e:87:3b:ff:12:5e:30:cd:a3:bc:83:a9:7a:2f:e2:d5:13: 26:9f:a2:ef:d2:94:82:bf:0b:78:0a:9f:99:c6:45:7b:2e:1f: f6:3c:57:12:10:93:d7:fb:f3:65:77:85:b2:d6:2b:2d:30:8b: 83:6a:3d:a1:1a:2f:d9:c4:39:47:14:93:ab:8b:ea:bd:65:36: e0:51:af:5d:9d:5a:32:b5:5a:84:02:84:10:73:68:d9:f0:b7: 53:ee:7e:5d:7a:96:c0:ba:bc:43:a9:cd:f7:15:c4:d1:e6:47: 54:11:4c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4usX0ouJO9aIP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk OTJkNzA3ZDAtZTRmNC00ZTA1LWE5YzgtODQ0NjE1YzlkZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ief5OrUPAeMRbSGHFG9MjmQC+wl4mS3xcb XLkrbjBCHxesGw+JJp464u9LRY8D3DQsXCAkLqLMXNTQ/E4D2t14Wr3ZA6prCIYz KFjXoMO/Ys0JwyFBINWxsR6G5HJqTiWvnGD1ri3hUZvk7aXHA3einjWuTotZ6L17 dWJzY1FOcBozJ5/eKJzT+G6ACt36YLC+DUWkfz4shSKBd7jagx0bQydpHydoTNeT M4FEyoS4Z3cBXBF/UmiccB8pd3ygxpJmwMWXUe0pOgRr6RRJGxV0FGs96jqtH0n8 VKSr7fWHzyCiJlnjGVXnWwX8tiszM+1VNEHSlCbZeOqAFX6RIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKf4CfDhDyy7l+7vjtk/CPIy9zZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNWJkOTQ5MWQtMGE0MC0z NzU1LWE5OTUtMjRkZmUzNjQzZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr6RzlHKVmE2WMfceFcCdz/ChPT5a+4E73OPwzJ7Cie6FczRZiOH5Qi uixXlRwTH/YEhJd7jVL6GvktHorCNYastuLzDh+r5syNGdgbJfCfk6aqfrbWihBf UrzYyRWCBSc5bHROFMWwuionIStuxxvGrd7ieTtkUdw4SWfDABWJ7f8hMcT/e3bH 5auy+cWbffOehzv/El4wzaO8g6l6L+LVEyafou/SlIK/C3gKn5nGRXsuH/Y8VxIQ k9f782V3hbLWKy0wi4NqPaEaL9nEOUcUk6uL6r1lNuBRr12dWjK1WoQChBBzaNnw t1Pufl16lsC6vEOpzfcVxNHmR1QRTDM= -----END CERTIFICATE-----Generated at Fri Oct 30 22:31:00 2026 by rpki-client