$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa File: 844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa (raw, json) Hash identifier: 4B96ULeGiJ4gthpnXsvuqctlMgYv+t2UPozCPx/cg+4= Subject key identifier: 85:A5:0A:A7:C9:AB:4B:51:CD:BC:D9:08:1F:26:3D:22:21:13:49:37 Certificate issuer: /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719 Certificate serial: 010D0C9F4328584BB88D0E8C1532EE72FDA4BB20 Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 10453 IP address blocks: 205.149.128.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0e:8c:15:32:ee:72:fd:a4:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a02f2ed6-40b6-498a-9313-92943596b1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:e2:1a:ce:5a:59:0f:fc:4c:e1:c1:0c:ff: bc:12:2c:9b:d7:6a:4d:4c:b7:5f:a2:ed:b0:72:87: e9:e2:a5:2d:d3:e9:1c:a4:02:18:d7:fa:08:61:ca: de:09:d0:35:9d:a1:bd:a2:64:a1:b2:94:6f:c2:17: 1e:98:01:9a:46:55:a0:aa:03:9b:57:25:6d:c4:ba: 85:2d:42:67:ce:0b:e2:c4:20:eb:f8:26:e5:33:12: 6e:07:48:50:76:d1:17:aa:95:f9:50:68:22:78:c0: d8:ba:91:48:c9:70:42:6a:57:9c:1c:4d:5f:bc:3a: a5:94:fd:76:7d:02:8f:03:c5:39:44:94:70:d1:4e: e6:32:1e:ae:fa:b9:27:1b:11:0b:9a:2c:ee:1b:f7: bb:0c:d8:19:09:90:fd:f6:f3:e2:48:cc:b7:89:b5: 36:48:11:72:b7:3d:42:50:39:c6:43:62:f8:f6:e2: 9e:71:77:f2:6c:7e:27:70:b2:11:7b:24:0f:72:17: 5d:4b:b9:7b:7b:d4:f9:c1:ec:db:e5:ff:50:d1:7f: 18:b9:80:db:4f:25:13:e8:59:53:97:06:94:9b:3c: dd:d8:87:5f:37:dc:f5:4f:8c:8b:4d:c4:8c:a6:cc: b5:6a:d9:37:dd:69:e5:c8:e7:8e:73:d5:d5:ba:b4: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A5:0A:A7:C9:AB:4B:51:CD:BC:D9:08:1F:26:3D:22:21:13:49:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl X509v3 Authority Key Identifier: keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer sbgp-ipAddrBlock: critical IPv4: 205.149.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2f:33:dd:87:66:b4:bd:d2:49:2f:b3:fc:b2:dd:b1:87:cd: 38:c8:42:9a:f5:1d:d5:62:63:9f:67:d7:69:17:40:fd:3d:b8: 3b:81:e9:3d:6a:e9:a0:d8:a1:0d:66:15:64:bb:eb:2b:d7:8b: e3:3f:08:47:87:81:57:80:64:3e:8b:16:52:a1:27:af:88:33: 6c:43:25:e0:09:0e:72:0f:74:20:be:a3:58:6c:2e:95:fb:bd: 63:b7:33:0d:eb:f8:ec:88:3d:6f:ee:73:e2:57:fa:03:ad:09: 22:5e:f3:8f:18:41:36:7d:b1:ca:05:a8:ca:0b:b6:5b:44:36: 2e:ad:61:81:c2:be:ce:81:5a:5f:4c:0f:06:9c:d3:eb:2a:5e: 6f:62:55:f9:d0:3e:b3:61:d8:38:99:4c:e0:d4:4b:6d:cc:de: e3:e3:ca:31:03:a9:6b:e7:d9:17:ad:26:c0:0d:a5:55:21:b9: d3:aa:53:01:ce:25:8f:46:47:25:d9:d8:7a:71:e3:4a:7d:b6: a8:d2:70:75:04:57:3e:05:66:9c:a4:1b:6a:be:a3:b4:ba:01: 09:76:31:5e:32:c8:46:04:51:ce:fd:31:be:06:65:67:db:89: ca:d3:22:9e:82:e4:70:d0:46:5a:83:5e:47:cb:d2:5e:1a:0d: 80:7b:bb:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQ6MFTLucv2kuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M0OGQ1ZmItMDU5Yi00ZmQyLTkyYTgtMzFmMTQzZjVm NzE5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTAyZjJlZDYtNDBiNi00OThhLTkzMTMtOTI5NDM1OTZiMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigLiGs5aWQ/8TOHBDP+8Eiyb12pNTLdfou2w cofp4qUt0+kcpAIY1/oIYcreCdA1naG9omShspRvwhcemAGaRlWgqgObVyVtxLqF LUJnzgvixCDr+CblMxJuB0hQdtEXqpX5UGgieMDYupFIyXBCalecHE1fvDqllP12 fQKPA8U5RJRw0U7mMh6u+rknGxELmizuG/e7DNgZCZD99vPiSMy3ibU2SBFytz1C UDnGQ2L49uKecXfybH4ncLIReyQPchddS7l7e9T5wezb5f9Q0X8YuYDbTyUT6FlT lwaUmzzd2IdfN9z1T4yLTcSMpsy1atk33WnlyOeOc9XVurSjuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWlCqfJq0tRzbzZCB8mPSIhE0k3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4 ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYxNDNmNWY3MTkvODQ0YTc5YWItMzI5MS0z NTk2LWEzZmEtMGIyYjFmZGM3ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M0OGQ1ZmItMDU5Yi00ZmQyLTky YTgtMzFmMTQzZjVmNzE5LzdjNDhkNWZiLTA1OWItNGZkMi05MmE4LTMxZjE0M2Y1 ZjcxOS5jcmwwHwYDVR0jBBgwFoAUsNZ6EZWdK+SlsteNAwZ2bkyD94IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYx NDNmNWY3MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzZWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8vM92HZrS90kkvs/yy3bGHzTjIQpr1HdViY59n12kXQP09uDuB6T1q 6aDYoQ1mFWS76yvXi+M/CEeHgVeAZD6LFlKhJ6+IM2xDJeAJDnIPdCC+o1hsLpX7 vWO3Mw3r+OyIPW/uc+JX+gOtCSJe848YQTZ9scoFqMoLtltENi6tYYHCvs6BWl9M Dwac0+sqXm9iVfnQPrNh2DiZTODUS23M3uPjyjEDqWvn2RetJsANpVUhudOqUwHO JY9GRyXZ2Hpx40p9tqjScHUEVz4FZpykG2q+o7S6AQl2MV4yyEYEUc79Mb4GZWfb icrTIp6C5HDQRlqDXkfL0l4aDYB7u/M= -----END CERTIFICATE-----Generated at Mon Nov 3 04:32:28 2025 by rpki-client