$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa File: 36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa (raw, json) Hash identifier: tZarzmnTZPsON8ZCCCCBdZyzSiZBa3qiGotspzPiyMw= Subject key identifier: D1:53:77:BD:7E:B6:A8:2C:21:F2:10:67:75:6C:9E:97:1B:6A:00:E2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC2C1FD3AAAD49F8145FA9D80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa Signing time: Tue 05 Aug 2025 23:58:27 +0000 ROA not before: Tue 05 Aug 2025 23:58:27 +0000 ROA not after: Tue 04 Nov 2025 00:58:27 +0000 asID: 22616 IP address blocks: 205.220.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:c1:fd:3a:aa:d4:9f:81:45:fa:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 5 23:58:27 2025 GMT Not After : Nov 4 00:58:27 2025 GMT Subject: CN=b38f7c44-56d1-4836-80e1-60babb0642c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:70:4c:c4:81:9d:6d:07:c1:1f:25:ac:e9: 78:84:65:4b:84:31:fb:70:1c:87:11:f6:c3:71:dd: f6:8c:81:d9:8e:48:6a:93:58:6d:ea:28:a3:ce:83: 0a:fb:3c:ac:4c:75:57:05:a3:36:cf:19:56:39:16: 38:0e:04:b1:fd:50:65:c0:3f:8b:69:6f:9f:6e:59: 52:9c:46:7a:ba:2c:00:b0:af:aa:07:a9:28:29:16: 78:a9:e9:d2:40:5a:00:7d:10:da:d4:6d:1f:26:57: 4a:02:46:16:fb:99:0d:b8:0f:91:b2:6f:45:9f:e1: 20:77:bc:14:2c:6c:e0:56:37:ae:69:93:de:2a:ca: 2b:58:2a:63:79:f9:c5:c2:c2:1a:8e:94:fb:01:04: e8:e1:45:1f:80:ab:00:8f:6c:70:ee:e8:e9:95:df: 0e:66:ab:14:84:02:58:c3:0f:7d:fc:38:00:92:eb: 7d:fd:ae:d9:37:32:b0:b6:b1:61:2e:0d:db:33:54: 55:8b:4b:18:49:57:a6:94:b9:e1:af:00:72:67:08: fe:df:c0:c0:86:1e:71:03:35:0a:f9:0c:05:7c:58: e9:b9:05:8d:a4:a1:97:21:e4:01:ed:55:33:3c:2f: a8:b5:df:02:46:66:31:d4:63:15:ec:ec:84:a4:9a: 6d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:53:77:BD:7E:B6:A8:2C:21:F2:10:67:75:6C:9E:97:1B:6A:00:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/36f6b4c1-7e05-3a10-8e02-93ecde649b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c8:03:fa:e4:0e:09:72:c5:f6:13:e0:5a:f5:6d:4d:18:1f: 0b:00:9a:6d:06:62:bd:85:35:8d:24:b2:a0:41:eb:41:e5:e4: df:02:9c:fe:b1:b4:37:eb:59:a0:d8:1e:0f:0b:9d:d8:55:7c: d7:e4:10:bc:7e:fa:f0:ee:4c:5d:86:8a:8e:8c:9a:79:18:24: 7d:b5:6b:4b:5e:31:67:cf:f3:f0:30:a2:87:aa:9d:4e:a3:49: b3:f1:32:ea:c0:75:60:c8:42:e9:2c:57:09:74:5e:11:0e:c6: 01:1f:49:65:ed:2b:68:27:91:21:24:9e:7f:a0:ef:80:e2:fe: ec:51:72:0f:b3:99:7a:a1:2a:b7:c7:a8:6f:ca:61:f6:b6:f8: 12:c3:bc:7c:29:b1:6c:5e:d3:db:11:dd:8e:83:1e:d5:de:8f: 58:8e:a4:08:45:86:74:2e:f7:cc:04:c6:f5:0d:52:82:6b:ea: 19:63:aa:4b:c3:8c:0c:de:99:89:bd:03:9b:36:77:59:c3:64: 8a:77:4c:6a:2c:d5:53:31:6a:40:d9:a3:63:94:e5:06:b7:a1: c1:19:fb:21:47:54:51:65:1e:78:30:bf:23:3b:0c:fa:a4:0c: 50:f6:e0:f4:0f:26:13:2e:9f:cf:de:78:14:4a:b3:1c:77:4e: d8:45:99:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErCwf06qtSfgUX6nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwNTIzNTgyN1oXDTI1MTEwNDAwNTgyN1owLzEtMCsGA1UEAxMk YjM4ZjdjNDQtNTZkMS00ODM2LTgwZTEtNjBiYWJiMDY0MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqElwTMSBnW0HwR8lrOl4hGVLhDH7cByHEfbD cd32jIHZjkhqk1ht6iijzoMK+zysTHVXBaM2zxlWORY4DgSx/VBlwD+LaW+fbllS nEZ6uiwAsK+qB6koKRZ4qenSQFoAfRDa1G0fJldKAkYW+5kNuA+Rsm9Fn+Egd7wU LGzgVjeuaZPeKsorWCpjefnFwsIajpT7AQTo4UUfgKsAj2xw7ujpld8OZqsUhAJY ww99/DgAkut9/a7ZNzKwtrFhLg3bM1RVi0sYSVemlLnhrwByZwj+38DAhh5xAzUK +QwFfFjpuQWNpKGXIeQB7VUzPC+otd8CRmYx1GMV7OyEpJptfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFTd71+tqgsIfIQZ3VsnpcbagDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzZmNmI0YzEtN2UwNS0z YTEwLThlMDItOTNlY2RlNjQ5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHIA/rkDglyxfYT4Fr1bU0YHwsAmm0GYr2FNY0ksqBB60Hl5N8CnP6x tDfrWaDYHg8LndhVfNfkELx++vDuTF2Gio6MmnkYJH21a0teMWfP8/AwooeqnU6j SbPxMurAdWDIQuksVwl0XhEOxgEfSWXtK2gnkSEknn+g74Di/uxRcg+zmXqhKrfH qG/KYfa2+BLDvHwpsWxe09sR3Y6DHtXej1iOpAhFhnQu98wExvUNUoJr6hljqkvD jAzemYm9A5s2d1nDZIp3TGos1VMxakDZo2OU5Qa3ocEZ+yFHVFFlHngwvyM7DPqk DFD24PQPJhMun8/eeBRKsxx3TthFmbE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:45:16 2025 by rpki-client