$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa File: 28e81f54-5d7c-388d-ac20-88cc5971c632.roa (raw, json) Hash identifier: 7d+5RKrBDoQvbkvU+W56u1LPVoIzcvGL/Oy7tdDrEd4= Subject key identifier: 69:F5:50:6D:3D:0C:F7:65:7B:51:C6:AF:00:A0:74:29:0D:AF:88:DD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CED1809D82C66FB373800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ed:18:09:d8:2c:66:fb:37:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=0d9f6f5b-fc20-49a0-b9cd-733fc1653163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:55:a6:46:dc:f3:9c:a2:5c:23:63:a0:7d: 95:30:2f:a8:b7:41:a3:47:ba:f9:b7:55:7b:86:e0: 59:6a:3f:8a:af:6c:ce:0f:4d:bb:c9:3c:a8:dc:e1: d3:e2:ee:58:40:c5:f2:01:5f:10:32:2d:e7:76:e9: ca:6a:80:6c:a8:f4:2b:f9:5a:4e:c1:10:f9:e1:6d: d2:d3:3b:79:e1:a1:6c:dd:77:66:59:d9:97:59:d9: c2:b4:17:ee:a2:a7:b8:3e:ad:a9:98:8a:7d:f8:c6: 58:79:91:a6:c9:f9:fe:51:fc:7b:97:f6:69:af:9d: 21:ee:67:15:89:3a:72:68:82:39:ca:c6:98:ba:40: 83:b9:88:e2:45:6a:69:34:97:33:20:31:45:ac:87: 59:3c:62:c0:4d:a4:dc:25:7d:02:37:a2:ff:d8:df: 6f:58:7a:16:a8:8b:24:06:6f:0c:ba:55:4a:4a:9c: 00:03:61:ac:4a:ec:2e:aa:35:07:cc:af:e3:ff:fd: 47:12:76:48:ca:dc:10:4e:0a:e4:a0:8f:94:d3:27: c6:f0:e8:46:15:90:20:6c:96:6d:5a:70:13:67:12: 5b:b3:6c:30:7e:0a:d6:51:18:99:4d:95:56:e3:50: d4:3b:b7:d0:d0:a4:78:59:51:be:b4:1b:31:ae:d6: 5b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F5:50:6D:3D:0C:F7:65:7B:51:C6:AF:00:A0:74:29:0D:AF:88:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:88:2f:31:d7:0b:5c:2b:c1:9c:34:57:0b:6e:90:86:3a:02: c9:ef:08:c2:21:80:7b:87:3e:ca:1a:76:a1:e4:9d:10:e8:02: e8:e9:c0:23:7a:c0:b4:4d:bd:7a:60:04:e2:93:bb:1c:fe:b0: 74:77:1e:3b:ac:b7:be:93:e8:ac:aa:ed:2b:ff:f1:26:dc:27: 75:ec:ed:ff:6d:64:d9:53:10:61:f5:7a:cf:a8:32:67:10:78: eb:d3:cf:dc:ca:d1:2c:e7:29:3e:08:df:10:b0:2b:07:a4:3f: b3:fe:27:48:0c:84:d4:c2:f5:ca:16:ac:89:3a:ef:65:58:d9: 75:5a:68:93:d7:1f:0f:ee:75:02:41:e1:7a:85:46:c3:8b:c2: 43:93:4c:92:8b:f5:71:b3:4e:7e:14:53:2a:17:d7:66:b1:40: 09:02:34:50:a9:5d:eb:e2:bc:45:60:92:a2:bc:55:40:b2:62: 08:38:e4:e3:4a:7d:f6:99:1c:95:b7:c9:6c:8c:2e:89:b5:03: 75:ca:3a:38:3c:87:ad:eb:cc:a5:05:29:a9:9f:35:c7:fa:da: 43:f0:ec:2f:33:d7:42:bb:d6:ae:61:21:a1:d1:81:29:5d:2f: 11:3a:1e:62:5b:2c:07:ce:24:ee:4e:2c:96:e1:4d:a2:e1:34: 58:b5:4a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPO0YCdgsZvs3OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MGQ5ZjZmNWItZmMyMC00OWEwLWI5Y2QtNzMzZmMxNjUzMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwtVpkbc85yiXCNjoH2VMC+ot0GjR7r5t1V7 huBZaj+Kr2zOD027yTyo3OHT4u5YQMXyAV8QMi3ndunKaoBsqPQr+VpOwRD54W3S 0zt54aFs3XdmWdmXWdnCtBfuoqe4Pq2pmIp9+MZYeZGmyfn+Ufx7l/Zpr50h7mcV iTpyaII5ysaYukCDuYjiRWppNJczIDFFrIdZPGLATaTcJX0CN6L/2N9vWHoWqIsk Bm8MulVKSpwAA2GsSuwuqjUHzK/j//1HEnZIytwQTgrkoI+U0yfG8OhGFZAgbJZt WnATZxJbs2wwfgrWURiZTZVW41DUO7fQ0KR4WVG+tBsxrtZbqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn1UG09DPdle1HGrwCgdCkNr4jdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjhlODFmNTQtNWQ3Yy0z ODhkLWFjMjAtODhjYzU5NzFjNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSILzHXC1wrwZw0VwtukIY6AsnvCMIhgHuHPsoadqHknRDoAujpwCN6 wLRNvXpgBOKTuxz+sHR3Hjust76T6Kyq7Sv/8SbcJ3Xs7f9tZNlTEGH1es+oMmcQ eOvTz9zK0SznKT4I3xCwKwekP7P+J0gMhNTC9coWrIk672VY2XVaaJPXHw/udQJB 4XqFRsOLwkOTTJKL9XGzTn4UUyoX12axQAkCNFCpXevivEVgkqK8VUCyYgg45ONK ffaZHJW3yWyMLom1A3XKOjg8h63rzKUFKamfNcf62kPw7C8z10K71q5hIaHRgSld LxE6HmJbLAfOJO5OLJbhTaLhNFi1SvQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:36 2025 by rpki-client