$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0aaaf1ce-6bf3-30ca-ad13-961888898b67.roa File: 0aaaf1ce-6bf3-30ca-ad13-961888898b67.roa (raw, json) Hash identifier: m0dAB7niN1Ey83i9UCKFcLpS1gECGzFJi7RBf9TxdXc= Subject key identifier: E5:F3:63:6E:2E:97:E4:E6:98:C4:BF:E0:D0:40:B5:F8:B5:F8:02:82 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEE3C3A8C32B0B6E71E80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0aaaf1ce-6bf3-30ca-ad13-961888898b67.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ee:3c:3a:8c:32:b0:b6:e7:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=94fb317e-1195-4c30-ba7a-b6748e891244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:49:3f:75:b3:35:a7:c7:53:42:73:00:13: 06:de:43:da:58:bc:d7:23:3b:d0:d9:75:df:72:dd: c7:7e:0c:a5:4e:1c:f4:fa:20:3d:e9:06:bc:e7:99: ee:91:66:ae:ef:96:0f:fb:ee:54:c7:de:ce:9e:dc: a8:88:66:b6:12:22:d0:fe:9a:2f:09:65:6a:06:e1: 7f:ee:62:5e:e9:18:2b:5e:b4:05:cf:97:07:69:af: 79:c9:6d:0f:62:69:19:8f:e9:e4:a7:19:b5:e0:6d: 42:2a:ec:bd:96:b1:e7:d7:56:f5:b9:8d:54:ed:1f: e7:4c:63:5c:c1:e2:bf:4e:9b:42:fd:51:0a:42:bf: d0:ca:f5:a0:96:96:55:dd:c9:5a:54:34:c5:96:34: 79:75:40:58:2b:dc:30:41:94:16:ad:f6:b1:f4:59: c0:0b:03:16:49:cb:10:e4:2a:7b:fc:45:f6:5a:0c: 49:08:24:95:9d:16:9c:f8:45:8f:ee:b5:61:8a:ee: 98:c1:06:c5:d0:12:78:3d:a7:7d:95:23:0f:e6:d4: 80:de:0e:8d:9c:1e:c7:71:d8:38:9c:56:25:a8:72: 6e:e4:7c:0e:02:f8:6e:08:62:34:c0:91:32:ff:9b: e3:90:9a:f2:67:4f:c7:a6:42:ed:3d:b1:04:e6:34: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F3:63:6E:2E:97:E4:E6:98:C4:BF:E0:D0:40:B5:F8:B5:F8:02:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0aaaf1ce-6bf3-30ca-ad13-961888898b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ac:3d:9d:3a:d3:81:40:d1:3b:c7:c9:38:00:c8:18:77:fa: 02:bf:b9:35:14:1e:a6:29:13:1b:ad:51:d7:89:f6:16:e2:c2: 9d:55:bc:85:a2:ca:cc:c9:8a:66:0d:a3:66:fa:60:d6:69:10: ad:34:3e:58:93:54:19:b6:f9:cd:36:c2:b4:69:f4:45:4b:e6: 0d:58:fd:58:fa:16:36:34:58:04:d0:95:e4:31:4e:6f:a8:ac: f8:c8:b6:83:f2:16:b4:71:29:5b:25:b2:b4:0f:1d:e0:33:86: 74:ce:ea:9b:a3:39:97:3c:a3:c0:fb:e8:2d:b4:a1:76:f6:74: dd:cd:89:be:32:13:e1:d7:d0:5d:65:c2:98:9a:db:85:57:6d: 37:e7:f0:a6:b1:e8:a8:ec:b0:4c:a6:be:4f:34:c6:f6:5d:7e: 80:01:24:df:d1:c1:b9:89:55:34:62:ed:87:17:84:a1:d5:72: 38:b5:b9:97:05:e2:b9:50:bf:53:a0:d8:09:37:dc:2a:5a:3a: 44:da:6d:26:66:28:30:a1:c4:e5:42:9a:0b:58:a1:a6:d0:36: a3:68:6e:00:81:8e:ad:4d:3c:ab:c2:cd:a7:2a:16:4c:22:c3: 60:86:76:b1:f1:8f:e0:9c:71:09:3a:2d:f4:93:70:62:3c:0b: 13:ce:6d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPO48OowysLbnHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OTRmYjMxN2UtMTE5NS00YzMwLWJhN2EtYjY3NDhlODkxMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAlJP3WzNafHU0JzABMG3kPaWLzXIzvQ2XXf ct3HfgylThz0+iA96Qa855nukWau75YP++5Ux97OntyoiGa2EiLQ/povCWVqBuF/ 7mJe6RgrXrQFz5cHaa95yW0PYmkZj+nkpxm14G1CKuy9lrHn11b1uY1U7R/nTGNc weK/TptC/VEKQr/QyvWglpZV3claVDTFljR5dUBYK9wwQZQWrfax9FnACwMWScsQ 5Cp7/EX2WgxJCCSVnRac+EWP7rVhiu6YwQbF0BJ4Pad9lSMP5tSA3g6NnB7Hcdg4 nFYlqHJu5HwOAvhuCGI0wJEy/5vjkJryZ0/HpkLtPbEE5jS9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXzY24ul+TmmMS/4NBAtfi1+AKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGFhYWYxY2UtNmJmMy0z MGNhLWFkMTMtOTYxODg4ODk4YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6sPZ0604FA0TvHyTgAyBh3+gK/uTUUHqYpExutUdeJ9hbiwp1VvIWi yszJimYNo2b6YNZpEK00PliTVBm2+c02wrRp9EVL5g1Y/Vj6FjY0WATQleQxTm+o rPjItoPyFrRxKVslsrQPHeAzhnTO6pujOZc8o8D76C20oXb2dN3Nib4yE+HX0F1l wpia24VXbTfn8Kax6KjssEymvk80xvZdfoABJN/RwbmJVTRi7YcXhKHVcji1uZcF 4rlQv1Og2Ak33CpaOkTabSZmKDChxOVCmgtYoabQNqNobgCBjq1NPKvCzacqFkwi w2CGdrHxj+CccQk6LfSTcGI8CxPObVE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:01 2025 by rpki-client