$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/140fe2b2-f3b0-3ed0-9866-252297746080.roa File: 140fe2b2-f3b0-3ed0-9866-252297746080.roa (raw, json) Hash identifier: pApQT1gZDV3TCeT6IdSu80AAIfCdVzacMRuKU3aivk4= Subject key identifier: CA:21:31:96:F2:D4:D8:BE:AB:6A:9D:58:11:BE:34:BD:C1:B2:41:A2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF1977383DDA7B605B880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/140fe2b2-f3b0-3ed0-9866-252297746080.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 136.226.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f1:97:73:83:dd:a7:b6:05:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=b3dec738-2730-415b-bc98-8c2ecf899c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:3b:34:41:71:62:ab:e0:e3:5a:6d:db:83: d5:74:7c:d4:96:b8:25:4a:0d:2b:55:54:6f:38:c7: 77:e3:de:b4:ce:34:7f:e5:d1:79:ac:38:ca:fd:f3: 36:85:32:37:18:50:f3:30:ed:9b:98:dc:58:15:db: fb:de:f1:20:1c:cb:3e:01:d9:58:d4:81:56:18:f0: f3:f8:5f:0a:b2:de:7a:a8:07:71:ab:c2:26:7a:fe: b9:3d:af:b9:08:11:78:4b:7c:a8:60:0b:cd:1a:f0: 93:22:99:ae:98:a7:b0:d1:12:2b:89:89:25:87:af: 15:f3:b8:54:1f:2e:fa:0a:d7:48:f1:af:5f:e0:e3: 4d:69:4c:1d:40:4a:0a:15:77:0d:1f:e7:5c:91:0f: 3c:22:82:3e:e5:9a:6b:a2:ab:5f:ef:07:02:4c:7f: 1e:b7:5a:08:e6:0a:b9:24:ec:26:b1:ff:32:9d:47: 09:89:f4:f8:b4:ef:e9:c6:67:31:4a:90:aa:dc:48: 69:a1:5c:75:ec:3a:e4:87:20:87:72:aa:6d:f7:30: 25:85:14:14:d2:68:64:1f:64:be:d8:f8:6e:de:7d: 45:ac:d7:66:1f:4b:22:30:36:08:61:3a:28:af:5a: d3:d9:92:d1:07:a0:ce:6e:13:54:f0:21:6a:90:82: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:21:31:96:F2:D4:D8:BE:AB:6A:9D:58:11:BE:34:BD:C1:B2:41:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/140fe2b2-f3b0-3ed0-9866-252297746080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:00:ee:b2:b1:07:bb:e9:27:56:b7:d3:56:f9:e7:14:0f:4f: 18:ef:30:ec:50:3e:8d:49:bf:57:88:94:d5:92:48:7b:b3:a7: 6f:98:03:e7:d4:bd:ff:43:d2:8a:bc:12:27:5d:49:4c:8d:04: 11:b4:00:e4:5f:c5:19:60:0f:a4:16:64:1b:6a:26:3b:3f:c4: ec:7b:af:d9:bc:bf:ea:c9:76:a1:cc:ff:f7:b4:d0:8e:07:fd: da:54:b7:de:c8:f0:27:5d:05:b1:53:21:bb:08:75:7d:12:7a: 6c:22:db:b1:1c:8d:4d:12:2f:4e:94:84:4b:40:2d:ff:3b:94: 67:67:49:8f:71:0d:e7:6a:21:ba:22:b5:bd:7d:87:8d:2a:30: eb:50:0c:3c:7c:f8:e3:f1:4f:7e:56:3d:71:1c:5e:42:b0:a7: 6a:65:b8:e9:03:50:88:8f:67:0c:81:f6:43:13:b5:a6:44:3f: 32:25:bd:b1:09:f2:5e:a7:90:78:47:fa:e4:f0:e5:74:c7:84: 45:8c:29:e9:97:ee:9b:3d:02:a3:c6:76:d0:7f:89:9b:ca:04: 2a:ae:91:96:55:72:38:32:a4:28:71:3b:ea:17:95:0c:54:41: 0f:f1:34:8e:c0:b3:84:e5:c0:2f:29:4d:eb:a4:b7:32:2a:b8: 01:d2:05:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPGXc4Pdp7YFuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YjNkZWM3MzgtMjczMC00MTViLWJjOTgtOGMyZWNmODk5YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdE7NEFxYqvg41pt24PVdHzUlrglSg0rVVRv OMd34960zjR/5dF5rDjK/fM2hTI3GFDzMO2bmNxYFdv73vEgHMs+AdlY1IFWGPDz +F8Kst56qAdxq8Imev65Pa+5CBF4S3yoYAvNGvCTIpmumKew0RIriYklh68V87hU Hy76CtdI8a9f4ONNaUwdQEoKFXcNH+dckQ88IoI+5Zproqtf7wcCTH8et1oI5gq5 JOwmsf8ynUcJifT4tO/pxmcxSpCq3EhpoVx17DrkhyCHcqpt9zAlhRQU0mhkH2S+ 2Phu3n1FrNdmH0siMDYIYToor1rT2ZLRB6DObhNU8CFqkIJ5pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMohMZby1Ni+q2qdWBG+NL3BskGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTQwZmUyYjItZjNiMC0z ZWQwLTk4NjYtMjUyMjk3NzQ2MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOL2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQA7rKxB7vpJ1a301b55xQPTxjvMOxQPo1Jv1eIlNWSSHuzp2+YA+fU vf9D0oq8EiddSUyNBBG0AORfxRlgD6QWZBtqJjs/xOx7r9m8v+rJdqHM//e00I4H /dpUt97I8CddBbFTIbsIdX0Semwi27EcjU0SL06UhEtALf87lGdnSY9xDedqIboi tb19h40qMOtQDDx8+OPxT35WPXEcXkKwp2pluOkDUIiPZwyB9kMTtaZEPzIlvbEJ 8l6nkHhH+uTw5XTHhEWMKemX7ps9AqPGdtB/iZvKBCqukZZVcjgypChxO+oXlQxU QQ/xNI7As4TlwC8pTeuktzIquAHSBZA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:35:46 2025 by rpki-client