$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0db2ea7e-2754-3637-a784-911563222e0e.roa File: 0db2ea7e-2754-3637-a784-911563222e0e.roa (raw, json) Hash identifier: K1GuubMFPSEpJrynoH+/yNLwWL2uIuXZ0qRJTygaLJg= Subject key identifier: 77:DF:8E:3D:2F:12:94:26:4C:CC:22:AD:0D:40:58:97:8F:91:69:3E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEE0A54ED4C8A746D8300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0db2ea7e-2754-3637-a784-911563222e0e.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ee:0a:54:ed:4c:8a:74:6d:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=a173c93d-a165-4910-8085-bd021e136656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:9d:f7:c6:86:bf:1c:0a:3a:24:e5:ab:a4: bb:b2:cd:0b:f9:56:a2:77:5b:31:12:de:ec:da:3c: df:ce:31:f7:6d:81:78:fa:b0:76:85:e4:fb:d5:7f: 78:a8:72:c0:78:f3:8f:0b:c9:ce:14:0b:19:4c:7a: bc:00:69:dc:43:ae:6b:9e:7e:61:2c:c4:65:17:4e: b1:61:9b:f6:f2:fe:d4:06:2b:d6:d7:79:24:8d:6b: ea:89:5b:e6:e2:b0:c0:83:77:52:64:77:9e:25:1d: d1:9a:17:2d:c8:1e:b6:04:15:ee:c5:b9:12:19:7e: 7a:6c:09:86:d6:9f:eb:b0:e9:be:db:83:8d:a8:2e: 75:bb:b4:a8:92:7d:d5:a3:ac:8e:16:6d:0b:58:63: a1:8c:b4:6c:25:67:c0:67:5d:ea:a7:e3:65:2a:e3: d9:3c:ba:75:d6:da:3e:3d:74:89:5f:90:4d:ed:89: fd:89:e4:33:38:3f:0e:11:62:1b:fa:80:36:7e:5b: 23:29:0f:96:3e:ca:43:90:d3:55:d9:28:4b:e2:54: e8:be:10:1b:e8:a9:24:37:b6:ef:29:fb:e8:d0:52: 0f:df:bd:ef:66:42:a0:de:73:21:c8:7b:cb:d4:2c: 48:d4:3c:6e:8e:64:0c:84:cb:63:74:13:4b:e8:55: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DF:8E:3D:2F:12:94:26:4C:CC:22:AD:0D:40:58:97:8F:91:69:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0db2ea7e-2754-3637-a784-911563222e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d7:3f:74:2d:4a:60:25:55:03:5a:87:69:b2:16:e9:2c:cc: c8:49:d0:ae:d0:c9:2c:36:23:21:f8:90:a5:ed:0a:13:33:22: 99:17:ec:11:0d:cf:60:17:db:31:47:7a:d0:68:93:c6:ce:01: 3e:9d:8d:4e:fd:1e:b6:3f:06:97:d3:46:1c:05:4e:6a:d9:9b: 86:c2:64:af:8a:08:8b:18:8e:c4:e0:de:37:f8:c6:e7:95:c3: 5d:72:be:89:0e:a0:39:e9:f4:7c:94:2c:c9:e4:48:d6:e1:ab: 3e:3b:2c:9d:c6:c0:32:91:b1:1a:b1:1c:38:9a:57:12:4d:25: e5:3d:77:09:19:af:5e:92:fd:2b:fc:e0:eb:f3:47:32:57:94: 63:ea:52:80:31:6e:f8:4b:68:15:2f:94:1e:58:9a:1c:1a:6f: 86:0c:f4:de:11:9e:ac:03:ce:ff:60:3a:87:df:66:19:d4:6c: 76:d2:19:ac:67:da:ff:ef:f2:6c:ee:10:60:47:07:2c:1a:70: 1f:9b:43:49:4d:5b:d0:b7:9c:8a:34:8c:52:19:6a:7c:e9:1f: a7:51:05:79:c6:c5:73:7a:b7:95:6d:bf:f4:69:b6:e6:a9:1f: 40:60:5a:a5:9a:03:0f:70:29:8c:50:c2:e8:16:02:ce:9e:6e: dc:b0:49:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPO4KVO1MinRtgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YTE3M2M5M2QtYTE2NS00OTEwLTgwODUtYmQwMjFlMTM2NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8ed98aGvxwKOiTlq6S7ss0L+Vaid1sxEt7s 2jzfzjH3bYF4+rB2heT71X94qHLAePOPC8nOFAsZTHq8AGncQ65rnn5hLMRlF06x YZv28v7UBivW13kkjWvqiVvm4rDAg3dSZHeeJR3RmhctyB62BBXuxbkSGX56bAmG 1p/rsOm+24ONqC51u7Sokn3Vo6yOFm0LWGOhjLRsJWfAZ13qp+NlKuPZPLp11to+ PXSJX5BN7Yn9ieQzOD8OEWIb+oA2flsjKQ+WPspDkNNV2ShL4lTovhAb6KkkN7bv Kfvo0FIP373vZkKg3nMhyHvL1CxI1DxujmQMhMtjdBNL6FUMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHffjj0vEpQmTMwirQ1AWJePkWk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGRiMmVhN2UtMjc1NC0z NjM3LWE3ODQtOTExNTYzMjIyZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnXP3QtSmAlVQNah2myFukszMhJ0K7QySw2IyH4kKXtChMzIpkX7BEN z2AX2zFHetBok8bOAT6djU79HrY/BpfTRhwFTmrZm4bCZK+KCIsYjsTg3jf4xueV w11yvokOoDnp9HyULMnkSNbhqz47LJ3GwDKRsRqxHDiaVxJNJeU9dwkZr16S/Sv8 4OvzRzJXlGPqUoAxbvhLaBUvlB5Ymhwab4YM9N4RnqwDzv9gOoffZhnUbHbSGaxn 2v/v8mzuEGBHBywacB+bQ0lNW9C3nIo0jFIZanzpH6dRBXnGxXN6t5Vtv/Rptuap H0BgWqWaAw9wKYxQwugWAs6ebtywSTs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:08 2025 by rpki-client