$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bfd0442f-51f3-3efd-97b0-e24677725b0a.roa File: bfd0442f-51f3-3efd-97b0-e24677725b0a.roa (raw, json) Hash identifier: WQwE1Bm30fcBkVwTT0sim9TmyTp/048/6nExV6pOC10= Subject key identifier: 23:23:AA:DB:56:2C:82:BB:43:2F:A6:63:09:37:D5:DF:6D:52:50:72 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC2C1FD61B19186367F099680 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bfd0442f-51f3-3efd-97b0-e24677725b0a.roa Signing time: Tue 05 Aug 2025 23:58:27 +0000 ROA not before: Tue 05 Aug 2025 23:58:27 +0000 ROA not after: Tue 04 Nov 2025 00:58:27 +0000 asID: 22616 IP address blocks: 205.220.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:c1:fd:61:b1:91:86:36:7f:09:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 5 23:58:27 2025 GMT Not After : Nov 4 00:58:27 2025 GMT Subject: CN=4a84da41-bb32-4316-a6c1-08057bf98e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:18:2d:aa:4d:3b:b0:11:ef:cf:9d:61:a4: 97:57:ff:70:0f:4d:0b:42:7e:fb:3a:f6:73:49:5f: ff:34:38:8a:ff:b0:18:7a:78:4b:72:b2:f7:1f:ed: d9:e0:9d:27:bf:24:5f:29:93:31:94:29:f4:47:75: 1f:4e:18:c2:b6:02:f0:4b:92:a8:d8:b6:c9:5b:0b: 20:a6:5a:22:49:ce:2c:02:27:d4:b7:cb:7a:2d:27: f6:f8:66:ec:33:26:9f:ae:ad:67:df:23:11:2d:85: 6c:4a:72:cb:a2:83:d5:3a:54:2b:03:78:9d:08:c8: 8c:20:1e:9e:a8:4d:bd:5d:e0:e2:a0:c1:0e:0d:5c: d2:47:5c:72:82:b0:d3:ca:cf:4d:b4:2f:07:20:ee: 3f:28:14:a2:e7:1e:3b:d9:2b:07:52:9b:93:33:81: 37:3f:03:3d:13:74:4f:72:fe:5c:cc:00:54:14:d7: ee:71:8d:42:bf:2c:e4:35:bb:4d:e5:4e:c1:42:7b: 2a:9e:05:b9:9d:82:aa:22:f4:a7:44:bc:e9:a2:10: 36:24:65:fc:05:9c:ca:c2:e8:ad:7e:34:88:33:bb: 09:b1:44:26:8a:24:62:f4:a0:11:1d:fc:11:43:c1: 1b:03:f7:f1:5c:4a:05:72:02:2e:8e:46:88:d8:ae: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:AA:DB:56:2C:82:BB:43:2F:A6:63:09:37:D5:DF:6D:52:50:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bfd0442f-51f3-3efd-97b0-e24677725b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ae:61:10:b9:9c:d5:27:59:50:a9:c9:77:d8:98:c6:2b:4a: dc:eb:e0:fd:22:df:98:9b:d3:da:22:f9:ce:c5:2b:bd:31:13: c6:82:a8:ab:1c:b1:ca:03:44:3a:6d:ef:1b:85:7d:82:63:57: d8:c1:ca:f3:7f:6b:ca:97:f0:a9:b6:7b:5c:3f:a5:39:1f:5a: bd:4a:e9:ac:1d:42:00:0c:24:1f:16:f0:3c:35:52:25:4f:0a: ed:56:0d:e9:90:3e:b5:f3:ee:0d:97:e5:81:d8:23:fd:c1:65: 94:f7:f2:83:76:d7:38:c4:e8:4d:29:52:71:ce:bd:93:23:00: a3:a8:6a:a5:e7:52:f0:93:69:0b:c9:de:5b:bc:34:46:ad:e1: b9:69:db:6d:d1:49:d9:6f:9c:07:f2:d7:d3:84:82:44:76:88: 77:b0:67:f5:d4:fa:78:44:16:25:16:0b:a0:17:25:23:b5:e0: 20:c6:3d:ee:e2:cc:17:62:0d:6b:b2:52:15:ef:8b:9f:78:38: 95:04:a7:81:70:bc:43:2e:5e:f2:aa:98:fd:3d:13:b8:50:c9: 5e:8f:9f:ba:bd:b4:52:2e:eb:18:33:1d:59:01:ef:84:b9:03: c7:0c:20:5f:c7:2a:93:f1:26:bd:08:14:87:06:d9:bf:e9:ad: ee:bd:89:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErCwf1hsZGGNn8JloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwNTIzNTgyN1oXDTI1MTEwNDAwNTgyN1owLzEtMCsGA1UEAxMk NGE4NGRhNDEtYmIzMi00MzE2LWE2YzEtMDgwNTdiZjk4ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv4YLapNO7AR78+dYaSXV/9wD00LQn77OvZz SV//NDiK/7AYenhLcrL3H+3Z4J0nvyRfKZMxlCn0R3UfThjCtgLwS5Ko2LbJWwsg ploiSc4sAifUt8t6LSf2+GbsMyafrq1n3yMRLYVsSnLLooPVOlQrA3idCMiMIB6e qE29XeDioMEODVzSR1xygrDTys9NtC8HIO4/KBSi5x472SsHUpuTM4E3PwM9E3RP cv5czABUFNfucY1CvyzkNbtN5U7BQnsqngW5nYKqIvSnRLzpohA2JGX8BZzKwuit fjSIM7sJsUQmiiRi9KARHfwRQ8EbA/fxXEoFcgIujkaI2K4nSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMjqttWLIK7Qy+mYwk31d9tUlByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmZkMDQ0MmYtNTFmMy0z ZWZkLTk3YjAtZTI0Njc3NzI1YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWuYRC5nNUnWVCpyXfYmMYrStzr4P0i35ib09oi+c7FK70xE8aCqKsc scoDRDpt7xuFfYJjV9jByvN/a8qX8Km2e1w/pTkfWr1K6awdQgAMJB8W8Dw1UiVP Cu1WDemQPrXz7g2X5YHYI/3BZZT38oN21zjE6E0pUnHOvZMjAKOoaqXnUvCTaQvJ 3lu8NEat4blp223RSdlvnAfy19OEgkR2iHewZ/XU+nhEFiUWC6AXJSO14CDGPe7i zBdiDWuyUhXvi594OJUEp4FwvEMuXvKqmP09E7hQyV6Pn7q9tFIu6xgzHVkB74S5 A8cMIF/HKpPxJr0IFIcG2b/pre69ib8= -----END CERTIFICATE-----Generated at Wed Aug 20 11:55:34 2025 by rpki-client