$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/87d0a71a-8f0b-3ecb-8b80-1e94e89d96da.roa File: 87d0a71a-8f0b-3ecb-8b80-1e94e89d96da.roa (raw, json) Hash identifier: gK5a42PsKXz+omh9x9A9eZdbZlMZSCiyZLLA3tMSkh0= Subject key identifier: DC:CB:A6:AF:F6:BF:24:C5:EB:7E:F8:63:CA:C1:6E:52:9F:CF:91:0D Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584AC2B65E01C2A7142E5DBAE4C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/87d0a71a-8f0b-3ecb-8b80-1e94e89d96da.roa Signing time: Tue 05 Aug 2025 23:35:02 +0000 ROA not before: Tue 05 Aug 2025 23:35:02 +0000 ROA not after: Tue 04 Nov 2025 00:35:02 +0000 asID: 53813 IP address blocks: 205.220.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:b6:5e:01:c2:a7:14:2e:5d:ba:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 5 23:35:02 2025 GMT Not After : Nov 4 00:35:02 2025 GMT Subject: CN=24322fec-d5ec-4b24-a1f8-8e46388c8ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:b8:69:12:d4:82:63:e0:e6:87:86:3b:47: 02:08:54:d6:05:0f:9d:17:c3:18:fa:7c:23:b8:07: 7c:9f:22:10:60:0b:63:66:46:19:cf:6f:14:f8:0a: 50:e6:01:7a:8e:a7:3b:60:f7:9c:a7:69:f2:b0:49: 33:94:2a:86:31:ec:c6:f7:ae:5a:d1:97:57:6d:c8: 77:42:ce:2a:b2:d1:61:7a:4c:62:2a:18:15:35:26: 4c:2c:ee:38:e2:c2:58:9c:fa:82:cc:1f:be:0f:7d: fc:94:2b:cc:18:8a:b2:2c:2a:52:d6:d8:47:bc:28: 6a:ab:af:12:d2:cc:1c:43:b6:83:29:cd:fa:29:cd: 8a:02:64:6d:5d:40:be:ae:2c:d5:f5:06:a0:e4:2d: b3:9a:78:da:3e:63:d8:7b:1d:2d:29:57:39:15:cd: 66:ef:1d:c4:1f:31:0e:70:d0:49:39:a7:b5:a8:c6: 77:4e:db:5b:cf:43:16:a9:42:2a:c7:02:c3:97:bd: 28:33:d8:78:40:e5:25:65:5e:af:20:b0:90:eb:27: 3c:13:98:d4:10:b0:92:32:7e:9c:cf:1e:58:36:ca: 9b:bb:45:8a:e0:6e:53:96:bd:1a:ad:8f:a7:da:bd: f4:bf:06:69:f0:45:ae:7b:84:ac:f9:91:03:3f:23: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CB:A6:AF:F6:BF:24:C5:EB:7E:F8:63:CA:C1:6E:52:9F:CF:91:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/87d0a71a-8f0b-3ecb-8b80-1e94e89d96da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 205.220.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:a2:21:f3:6e:13:99:29:5b:b2:7a:83:d6:b8:60:a4:f7:9f: 8b:8e:87:36:88:d3:5d:4e:b4:89:2b:1b:22:64:26:79:a6:bb: 19:d2:a5:f1:3c:ec:16:05:2f:bf:09:f7:ee:3d:5e:f9:97:ef: 87:e4:2c:1f:23:7f:c8:16:18:54:bf:ac:f7:56:32:3b:ff:1d: 0c:0e:f1:77:c0:6b:be:c0:84:b7:31:f9:92:89:28:c6:a6:11: 77:1d:75:96:56:65:3d:bf:19:96:f5:59:89:c5:10:d9:5f:2a: cb:f4:cc:fb:c3:1f:f9:44:8e:87:28:4f:bd:5b:d5:ef:96:9b: 7c:fb:9a:ad:38:01:4c:fe:68:76:fe:96:ea:c2:e4:6b:40:2d: 74:49:9c:04:ad:8c:42:87:ec:6a:9b:99:28:d0:6e:f9:01:d1: 26:7b:85:50:eb:28:97:19:9e:9b:30:7c:86:fd:2d:6f:ec:26: b3:9a:9a:35:c3:7c:18:b1:dd:6a:b5:5b:a6:44:16:52:47:96: 80:a3:f4:e9:e4:11:9b:e0:0a:f1:35:21:d3:fc:10:12:9d:a7: 01:14:69:65:0b:14:d9:ec:01:25:a5:73:64:09:54:b2:95:75: 7d:ae:cd:9c:8a:24:a4:8f:3c:1c:bd:87:c9:2f:5e:58:01:f2: c0:7f:ff:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErCtl4BwqcULl265MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwNTIzMzUwMloXDTI1MTEwNDAwMzUwMlowLzEtMCsGA1UEAxMk MjQzMjJmZWMtZDVlYy00YjI0LWExZjgtOGU0NjM4OGM4ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LO4aRLUgmPg5oeGO0cCCFTWBQ+dF8MY+nwj uAd8nyIQYAtjZkYZz28U+ApQ5gF6jqc7YPecp2nysEkzlCqGMezG965a0ZdXbch3 Qs4qstFhekxiKhgVNSZMLO444sJYnPqCzB++D338lCvMGIqyLCpS1thHvChqq68S 0swcQ7aDKc36Kc2KAmRtXUC+rizV9Qag5C2zmnjaPmPYex0tKVc5Fc1m7x3EHzEO cNBJOae1qMZ3Tttbz0MWqUIqxwLDl70oM9h4QOUlZV6vILCQ6yc8E5jUELCSMn6c zx5YNsqbu0WK4G5Tlr0arY+n2r30vwZp8EWue4Ss+ZEDPyOTjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzLpq/2vyTF6374Y8rBblKfz5ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODdkMGE3MWEtOGYwYi0z ZWNiLThiODAtMWU5NGU4OWQ5NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWiIfNuE5kpW7J6g9a4YKT3n4uOhzaI011OtIkrGyJkJnmmuxnSpfE8 7BYFL78J9+49XvmX74fkLB8jf8gWGFS/rPdWMjv/HQwO8XfAa77AhLcx+ZKJKMam EXcddZZWZT2/GZb1WYnFENlfKsv0zPvDH/lEjocoT71b1e+Wm3z7mq04AUz+aHb+ lurC5GtALXRJnAStjEKH7GqbmSjQbvkB0SZ7hVDrKJcZnpswfIb9LW/sJrOamjXD fBix3Wq1W6ZEFlJHloCj9OnkEZvgCvE1IdP8EBKdpwEUaWULFNnsASWlc2QJVLKV dX2uzZyKJKSPPBy9h8kvXlgB8sB//2A= -----END CERTIFICATE-----Generated at Sat Aug 23 18:46:56 2025 by rpki-client