$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b8608ac-5a94-38c3-9658-27b753637bf7.roa File: 0b8608ac-5a94-38c3-9658-27b753637bf7.roa (raw, json) Hash identifier: 9aWUamBfxTad6BwgxWIx5HXC8hizqw7Xce7ZmkvWVeE= Subject key identifier: AD:64:10:0A:D0:CA:1F:9A:04:8B:70:0D:59:B4:C9:64:3F:D5:6E:72 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEBB4ED500ACC8A0CEF40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b8608ac-5a94-38c3-9658-27b753637bf7.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:eb:b4:ed:50:0a:cc:8a:0c:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=b75ef816-53f5-4de3-ad7a-4f9b40427eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:ae:93:4d:3d:b0:6a:4d:d5:34:f8:00:51: cd:9c:bd:91:f0:78:aa:bb:8f:d3:4e:9c:51:8a:13: 93:b9:3a:c2:67:76:97:4b:b4:1a:ac:4c:16:2b:7a: 0b:87:98:f9:97:9f:c9:d0:6a:2a:69:29:18:8e:03: d9:5b:a5:ef:69:63:3f:4f:56:44:5e:9d:59:5e:30: 0b:e0:95:89:46:34:cd:d9:be:0d:c1:2e:8a:4c:11: 47:d1:ab:22:2c:89:15:78:7c:92:3b:54:63:a1:f4: fe:31:96:fb:99:78:6e:51:da:a3:a2:08:e5:ac:49: 54:b9:98:1c:0c:1f:ae:72:85:5e:b8:98:a1:a9:64: 52:6a:98:93:1c:93:dd:83:ea:81:34:d1:d4:4d:a7: f5:63:72:90:1c:93:e8:f5:31:b8:42:4e:20:2d:29: 72:b5:3b:ad:31:0e:41:94:d9:b3:e7:25:d1:3f:9c: 90:1a:96:52:da:9b:d6:ce:ea:f6:c3:40:c5:d8:c7: 5c:67:27:e9:36:a5:47:e6:16:77:00:f3:65:ef:b8: 5f:54:ec:57:db:34:9f:ff:f1:fa:df:7e:8b:13:e6: a5:48:47:0c:b3:8b:28:81:da:21:8c:2c:ff:21:5b: 70:72:18:2a:b2:04:5c:a4:7e:e3:36:1b:d6:e3:b6: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:64:10:0A:D0:CA:1F:9A:04:8B:70:0D:59:B4:C9:64:3F:D5:6E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0b8608ac-5a94-38c3-9658-27b753637bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e0:6b:03:da:25:31:94:5b:77:29:cc:63:ae:87:2a:43:ef: 3e:d7:04:02:e5:f1:5f:c1:93:b5:78:a0:0e:cb:7d:77:33:18: 2b:04:6d:c6:1a:10:a9:77:67:59:2c:01:24:19:78:e2:e2:e2: c5:c3:88:81:f6:e0:fd:cc:b5:f8:19:a3:eb:0f:29:06:4e:1c: 4f:21:35:00:fc:1f:74:25:9b:7c:ea:9c:f5:f8:f4:c7:59:4b: 11:d0:ab:bf:90:6c:2a:1a:42:fb:87:1f:13:e0:31:fd:89:51: 0f:d1:fb:19:71:d8:c7:e3:f6:af:bc:49:f7:b6:d9:0a:b3:74: 29:db:89:71:69:08:4c:3b:d4:d7:01:b0:6d:d8:3e:f2:9c:47: a3:00:33:15:27:18:7e:aa:7e:46:2d:ae:8f:c8:93:68:c4:5b: ef:46:f3:c0:b8:9d:6e:09:81:aa:e1:fe:d6:f7:bf:80:44:19: 22:fc:82:6c:78:8b:00:d8:8c:39:e0:41:15:45:32:e6:39:97: 2b:64:ca:10:25:fc:4a:05:65:0c:15:52:cf:0c:35:6d:dc:ca: 73:e2:4e:44:64:5b:37:55:31:f5:43:a9:45:83:92:80:90:4f: 19:92:f4:93:27:1b:a7:47:23:57:f0:bb:5c:db:f7:c3:bf:88: 44:7a:ed:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOu07VAKzIoM70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk Yjc1ZWY4MTYtNTNmNS00ZGUzLWFkN2EtNGY5YjQwNDI3ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPquk009sGpN1TT4AFHNnL2R8Hiqu4/TTpxR ihOTuTrCZ3aXS7QarEwWK3oLh5j5l5/J0GoqaSkYjgPZW6XvaWM/T1ZEXp1ZXjAL 4JWJRjTN2b4NwS6KTBFH0asiLIkVeHySO1RjofT+MZb7mXhuUdqjogjlrElUuZgc DB+ucoVeuJihqWRSapiTHJPdg+qBNNHUTaf1Y3KQHJPo9TG4Qk4gLSlytTutMQ5B lNmz5yXRP5yQGpZS2pvWzur2w0DF2MdcZyfpNqVH5hZ3APNl77hfVOxX2zSf//H6 336LE+alSEcMs4sogdohjCz/IVtwchgqsgRcpH7jNhvW47YM0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1kEArQyh+aBItwDVm0yWQ/1W5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGI4NjA4YWMtNWE5NC0z OGMzLTk2NTgtMjdiNzUzNjM3YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHgawPaJTGUW3cpzGOuhypD7z7XBALl8V/Bk7V4oA7LfXczGCsEbcYa EKl3Z1ksASQZeOLi4sXDiIH24P3MtfgZo+sPKQZOHE8hNQD8H3Qlm3zqnPX49MdZ SxHQq7+QbCoaQvuHHxPgMf2JUQ/R+xlx2Mfj9q+8Sfe22QqzdCnbiXFpCEw71NcB sG3YPvKcR6MAMxUnGH6qfkYtro/Ik2jEW+9G88C4nW4Jgarh/tb3v4BEGSL8gmx4 iwDYjDngQRVFMuY5lytkyhAl/EoFZQwVUs8MNW3cynPiTkRkWzdVMfVDqUWDkoCQ TxmS9JMnG6dHI1fwu1zb98O/iER67QI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:46 2025 by rpki-client