$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9df1dc2-9af9-3171-8577-db05424b641e.roa File: f9df1dc2-9af9-3171-8577-db05424b641e.roa (raw, json) Hash identifier: /7QEbS329+jJM6L6ObyCCqg+r3FmmXYp/KG9BGAlrpw= Subject key identifier: 8A:86:E0:D2:A9:E5:50:DF:F1:C0:6C:B0:19:56:5E:48:68:1F:BB:73 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EE4F1F225D7A5AC4ABDCC6000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9df1dc2-9af9-3171-8577-db05424b641e.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 22616 IP address blocks: 205.220.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:f2:25:d7:a5:ac:4a:bd:cc:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=85bdb5d0-41bf-4072-a872-292764c56f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:cf:3b:c9:90:7d:9e:42:6a:86:80:b7:82: 65:84:de:7c:9f:95:82:2b:dd:b0:39:61:38:00:5c: 9a:34:44:82:1f:21:dd:f7:ef:7c:05:6c:a2:ee:0e: 24:fb:62:46:12:0e:aa:ab:ee:6f:a3:87:a3:d9:58: f1:d1:91:82:a7:cc:d3:4b:2b:e1:d1:73:d1:3b:c4: db:97:de:1f:be:72:3e:af:44:61:67:bf:98:34:50: 83:23:7f:35:01:c1:f6:c5:17:16:3c:d5:5f:8a:c2: 25:4b:3c:1b:7c:21:79:db:55:21:b8:74:b0:a0:16: 8a:fc:2e:d0:0b:2d:87:c1:01:31:69:77:fa:25:4e: 00:69:5a:ec:0f:fc:d8:18:84:1e:83:4e:29:66:a0: 04:56:29:51:bf:6c:24:c8:26:e5:60:d9:35:18:35: 3f:f4:a7:d7:41:62:43:c8:2b:1b:3e:64:44:cc:d1: 1e:26:f8:1e:2f:04:68:d3:6a:1c:65:bc:ac:38:d3: 5c:99:e4:5e:e2:e0:f4:db:bb:b3:6c:49:a5:cc:96: de:a8:c1:09:86:61:d5:0f:2c:65:cb:c3:c4:7b:a4: bd:b2:32:df:0c:28:a5:1a:32:e9:33:d3:0a:67:29: 48:3f:43:05:62:d1:64:e2:1f:bc:32:33:f3:25:3e: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:86:E0:D2:A9:E5:50:DF:F1:C0:6C:B0:19:56:5E:48:68:1F:BB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9df1dc2-9af9-3171-8577-db05424b641e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:28:4e:fb:08:4e:fe:65:44:d0:92:89:80:80:b0:3f:bc:fa: 66:b6:e7:04:38:0f:64:dd:26:d1:74:17:8a:26:b8:f8:e3:9b: 50:86:ba:86:30:a4:ab:7f:87:cc:15:38:40:75:e3:cb:43:7a: c3:60:dc:1d:06:04:7e:b1:f3:36:c2:b9:b3:af:b6:78:c0:67: 6c:0b:a2:75:10:ac:89:d3:da:a3:5a:c7:61:7d:45:1b:03:28: 91:e0:dc:d7:08:3a:67:a4:4d:17:b7:04:5d:5b:b8:08:7b:f0: a6:f6:72:7a:e1:e8:a9:c9:d7:bb:9c:89:78:d0:4f:84:93:2a: 0a:a5:8b:15:8d:17:9e:db:b0:30:25:d8:2e:19:c7:f5:15:16: 21:33:3b:e9:ee:4d:38:c0:ec:c3:36:1d:3f:3b:c2:a9:07:f8: f8:96:60:31:b3:16:8c:ed:f4:97:c1:90:ee:0c:73:26:b4:47: 8b:16:47:2c:8c:35:09:3d:a3:75:38:fc:07:da:6a:18:f0:8a: 57:90:cc:1a:b0:dc:ca:f6:4c:a8:70:e8:ce:a9:89:10:3b:72: d5:8b:fe:fd:96:04:72:b8:a7:9b:12:f7:50:17:c3:7d:82:67: 77:53:41:e4:e0:da:65:7e:e6:cf:8e:9a:22:8c:b8:40:7d:8b: 65:b8:e3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8fIl16WsSr3MYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ODViZGI1ZDAtNDFiZi00MDcyLWE4NzItMjkyNzY0YzU2ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqrPO8mQfZ5CaoaAt4JlhN58n5WCK92wOWE4 AFyaNESCHyHd9+98BWyi7g4k+2JGEg6qq+5vo4ej2Vjx0ZGCp8zTSyvh0XPRO8Tb l94fvnI+r0RhZ7+YNFCDI381AcH2xRcWPNVfisIlSzwbfCF521UhuHSwoBaK/C7Q Cy2HwQExaXf6JU4AaVrsD/zYGIQeg04pZqAEVilRv2wkyCblYNk1GDU/9KfXQWJD yCsbPmREzNEeJvgeLwRo02ocZbysONNcmeRe4uD027uzbEmlzJbeqMEJhmHVDyxl y8PEe6S9sjLfDCilGjLpM9MKZylIP0MFYtFk4h+8MjPzJT6Z7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqG4NKp5VDf8cBssBlWXkhoH7tzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjlkZjFkYzItOWFmOS0z MTcxLTg1NzctZGIwNTQyNGI2NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAoTvsITv5lRNCSiYCAsD+8+ma25wQ4D2TdJtF0F4omuPjjm1CGuoYw pKt/h8wVOEB148tDesNg3B0GBH6x8zbCubOvtnjAZ2wLonUQrInT2qNax2F9RRsD KJHg3NcIOmekTRe3BF1buAh78Kb2cnrh6KnJ17uciXjQT4STKgqlixWNF57bsDAl 2C4Zx/UVFiEzO+nuTTjA7MM2HT87wqkH+PiWYDGzFozt9JfBkO4Mcya0R4sWRyyM NQk9o3U4/AfaahjwileQzBqw3Mr2TKhw6M6piRA7ctWL/v2WBHK4p5sS91AXw32C Z3dTQeTg2mV+5s+OmiKMuEB9i2W441E= -----END CERTIFICATE-----Generated at Sun Sep 13 18:07:57 2026 by rpki-client