$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa File: 24d72aa4-d799-3e57-a378-ee35680b2c9c.roa (raw, json) Hash identifier: 53kyMrd6Id2QIx72q/YN4kmZR5DKhB0mhDBeyj3sevQ= Subject key identifier: 3D:23:16:A9:E3:4D:15:FB:9C:7B:D2:D7:08:9E:34:21:03:25:1F:37 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B1F016BBC2E6EFCB8E75D2838 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 53813 IP address blocks: 136.226.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:6b:bc:2e:6e:fc:b8:e7:5d:28:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=edb22fb5-760a-46d8-81c4-5f0ad9cc22f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:08:6d:1a:d8:3b:62:c5:aa:90:2c:dd:29: a8:ed:4e:4c:e3:09:2b:ab:de:0c:45:76:fc:98:5e: fd:82:34:7b:3e:1a:63:a1:70:5c:02:18:4f:b4:65: 69:0f:f9:1b:9f:69:3d:3d:73:48:34:e7:5e:42:0e: 85:28:2a:a3:ef:cf:67:32:f1:87:19:18:30:1c:cf: 78:8c:84:be:c2:23:29:51:f0:30:d5:1d:b1:63:5f: 23:49:93:80:15:1b:5f:e4:75:8f:cb:88:ea:e2:14: c7:ba:b6:30:90:e8:e7:cc:c7:30:3c:41:6d:55:ed: 95:4a:93:93:31:b0:b2:14:68:e0:ff:38:d4:87:af: cb:d3:bf:6f:b6:6b:3a:ab:f8:ee:22:c1:4d:83:71: 9a:a3:7b:cb:9c:63:1b:e2:00:80:16:6b:2f:e0:5c: d9:4f:eb:2f:f1:ab:d5:52:0e:0d:e9:72:05:84:24: 07:26:65:d5:64:f0:3b:31:ca:67:f0:65:8e:e6:86: 49:bc:b2:df:90:e1:ee:01:db:f9:dc:52:a8:6b:bf: 89:33:48:59:a0:e5:c4:eb:99:bb:3c:f2:76:5f:63: 93:41:72:f6:0f:5e:71:4a:69:b1:ba:3e:d3:7f:ad: 9c:71:57:c6:b5:8e:72:47:e8:ef:65:95:5c:aa:cb: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:23:16:A9:E3:4D:15:FB:9C:7B:D2:D7:08:9E:34:21:03:25:1F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f7:29:92:88:57:cc:96:ba:7f:6a:89:65:d2:c4:c0:cd:89: 35:a1:c1:8e:67:cc:b3:96:fb:a8:a4:dd:69:ff:88:e7:83:f1: 21:69:07:d3:a1:25:05:5c:ea:2f:99:0b:30:28:be:f4:6b:02: cc:22:c5:bf:cc:4f:14:f9:a3:c7:31:af:c2:0c:41:76:fd:5f: 24:6d:99:42:f6:a5:9f:22:6b:7b:9c:e7:57:67:ef:5d:8c:f6: 70:fc:c4:75:22:81:8e:32:59:ea:4c:22:bf:37:c1:f4:25:4c: df:1f:e8:77:38:c4:d8:07:f3:4c:df:07:15:0d:dd:3d:c8:17: 35:05:71:17:6d:66:e9:0c:12:20:89:ba:b5:ef:d9:83:9d:9e: 8e:e3:71:fa:b3:b8:79:11:b3:bc:d8:d4:b1:23:3d:57:08:de: d7:d7:1f:ba:4d:21:ca:56:7a:19:0d:94:ab:58:6d:11:8a:c4: 6b:a0:17:9c:7d:d9:42:92:30:a6:8f:d5:42:39:19:5e:9f:0f: b3:33:e1:ef:29:af:0b:69:2d:d1:03:d7:89:f7:46:0c:b5:49: f6:8d:d8:54:91:23:41:e4:c9:c6:96:f3:01:c1:bc:c0:45:13: c0:52:6a:9d:1d:ab:b0:50:0c:d7:72:58:58:6e:2d:c7:5f:07: 9b:a0:3b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWu8Lm78uOddKDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWRiMjJmYjUtNzYwYS00NmQ4LTgxYzQtNWYwYWQ5Y2MyMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdIIbRrYO2LFqpAs3Smo7U5M4wkrq94MRXb8 mF79gjR7PhpjoXBcAhhPtGVpD/kbn2k9PXNINOdeQg6FKCqj789nMvGHGRgwHM94 jIS+wiMpUfAw1R2xY18jSZOAFRtf5HWPy4jq4hTHurYwkOjnzMcwPEFtVe2VSpOT MbCyFGjg/zjUh6/L079vtms6q/juIsFNg3Gao3vLnGMb4gCAFmsv4FzZT+sv8avV Ug4N6XIFhCQHJmXVZPA7Mcpn8GWO5oZJvLLfkOHuAdv53FKoa7+JM0hZoOXE65m7 PPJ2X2OTQXL2D15xSmmxuj7Tf62ccVfGtY5yR+jvZZVcqsu51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0jFqnjTRX7nHvS1wieNCEDJR83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjRkNzJhYTQtZDc5OS0z ZTU3LWEzNzgtZWUzNTY4MGIyYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP3KZKIV8yWun9qiWXSxMDNiTWhwY5nzLOW+6ik3Wn/iOeD8SFpB9Oh JQVc6i+ZCzAovvRrAswixb/MTxT5o8cxr8IMQXb9XyRtmUL2pZ8ia3uc51dn712M 9nD8xHUigY4yWepMIr83wfQlTN8f6Hc4xNgH80zfBxUN3T3IFzUFcRdtZukMEiCJ urXv2YOdno7jcfqzuHkRs7zY1LEjPVcI3tfXH7pNIcpWehkNlKtYbRGKxGugF5x9 2UKSMKaP1UI5GV6fD7Mz4e8prwtpLdED14n3Rgy1SfaN2FSRI0HkycaW8wHBvMBF E8BSap0dq7BQDNdyWFhuLcdfB5ugO1c= -----END CERTIFICATE-----Generated at Wed Nov 5 04:56:37 2025 by rpki-client