$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/325ee397-8a89-3981-9480-c62954abe747.roa File: 325ee397-8a89-3981-9480-c62954abe747.roa (raw, json) Hash identifier: puQW8PFEwwzvMMz4HJhMWbY+Bb/5FyNDVzt6uoN1RnQ= Subject key identifier: 33:53:B7:FE:14:B9:43:77:A3:7C:9A:F4:2D:88:D5:C8:42:9C:A9:74 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEC72A779300863A2FEA0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/325ee397-8a89-3981-9480-c62954abe747.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ec:72:a7:79:30:08:63:a2:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=edfec42b-ad70-4c8e-a8e9-bd7c5e7d8004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:04:ec:b8:15:01:2d:a4:64:b4:30:b7:55: 01:a5:b2:b3:57:17:05:65:12:f7:8d:28:c4:0f:2a: 5b:f3:0d:ba:bf:8f:13:4b:3d:c1:5c:c5:2d:c5:59: da:47:09:01:d4:23:06:ae:be:52:43:24:51:07:4b: a7:0c:3b:ff:af:56:69:81:6e:80:7f:5b:e9:ff:39: 48:f5:1f:9b:a4:0b:30:48:c8:e5:43:fd:ac:ec:dc: 14:a1:ea:83:ed:f3:cf:01:fd:5e:a0:5c:71:d8:cf: 65:1f:c8:84:c2:f6:b9:35:ce:b7:52:4a:37:04:69: 70:26:6d:22:2d:31:9c:da:f7:45:74:91:a7:f5:a2: 92:a2:88:33:56:a6:d6:5d:f9:2e:e9:be:59:a1:f9: d9:95:41:30:a2:86:c7:91:7f:1f:ee:99:9b:dd:1c: 36:29:7e:f0:3a:b2:e6:52:81:a9:72:e1:c2:62:f8: 99:4a:be:6e:46:48:ca:ea:ea:7e:f3:49:b2:45:e0: 92:7f:43:cb:4e:17:14:78:4d:20:85:88:de:37:e7: 14:17:fa:0c:84:5b:46:ce:63:9a:ca:52:76:fe:b4: 11:dc:93:f9:79:ce:33:70:b1:de:42:8c:18:73:f8: e2:ba:3a:41:d3:e8:84:f8:a5:5f:1a:b5:a6:62:b5: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:53:B7:FE:14:B9:43:77:A3:7C:9A:F4:2D:88:D5:C8:42:9C:A9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/325ee397-8a89-3981-9480-c62954abe747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f0:88:a5:f0:56:5f:94:4b:67:b1:61:a5:f6:56:6d:5a:48: e2:2c:b4:73:db:66:c4:92:f6:f9:15:a4:24:d4:3b:1a:57:79: ea:22:7e:a2:f2:ab:33:a9:11:20:fb:8c:bb:89:9c:1e:f8:57: 63:64:ca:8b:44:d8:8d:55:59:4d:7b:43:9c:8f:40:30:92:cb: d1:44:23:77:30:7c:45:6a:34:74:c6:c9:e2:0b:ec:c3:1c:f6: 23:cf:96:96:d8:c3:ec:e3:7f:21:d0:20:7e:2c:39:6b:0d:bf: c9:91:8f:d8:08:0a:ac:8e:bf:87:21:50:38:7d:70:ef:44:9c: f6:8d:af:c1:a1:33:e9:9c:4c:31:ba:2a:7d:f6:16:8b:22:69: e3:6d:5f:bc:71:74:2e:2b:c1:9f:73:eb:97:b8:0c:52:e7:e6: 1c:1c:d6:87:1f:a9:83:40:4b:ac:a8:d0:f0:cb:e4:7a:d9:bb: 1e:44:54:87:d6:c7:85:72:69:11:9c:a6:07:38:68:f0:3c:22: 0b:73:30:7c:88:09:c3:40:d5:26:45:0a:58:3e:1c:63:b7:83: 5f:97:49:0d:2f:fb:53:64:28:6c:01:5e:4f:29:76:7f:fe:8c: c2:59:36:0d:69:88:b0:77:22:43:17:96:a6:d4:f6:76:c5:e3: 32:fd:5a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOxyp3kwCGOi/qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZWRmZWM0MmItYWQ3MC00YzhlLWE4ZTktYmQ3YzVlN2Q4MDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH0E7LgVAS2kZLQwt1UBpbKzVxcFZRL3jSjE Dypb8w26v48TSz3BXMUtxVnaRwkB1CMGrr5SQyRRB0unDDv/r1ZpgW6Af1vp/zlI 9R+bpAswSMjlQ/2s7NwUoeqD7fPPAf1eoFxx2M9lH8iEwva5Nc63Uko3BGlwJm0i LTGc2vdFdJGn9aKSoogzVqbWXfku6b5ZofnZlUEwoobHkX8f7pmb3Rw2KX7wOrLm UoGpcuHCYviZSr5uRkjK6up+80myReCSf0PLThcUeE0ghYjeN+cUF/oMhFtGzmOa ylJ2/rQR3JP5ec4zcLHeQowYc/jiujpB0+iE+KVfGrWmYrXOYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNTt/4UuUN3o3ya9C2I1chCnKl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzI1ZWUzOTctOGE4OS0z OTgxLTk0ODAtYzYyOTU0YWJlNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPwiKXwVl+US2exYaX2Vm1aSOIstHPbZsSS9vkVpCTUOxpXeeoifqLy qzOpESD7jLuJnB74V2NkyotE2I1VWU17Q5yPQDCSy9FEI3cwfEVqNHTGyeIL7MMc 9iPPlpbYw+zjfyHQIH4sOWsNv8mRj9gICqyOv4chUDh9cO9EnPaNr8GhM+mcTDG6 Kn32FosiaeNtX7xxdC4rwZ9z65e4DFLn5hwc1ocfqYNAS6yo0PDL5HrZux5EVIfW x4VyaRGcpgc4aPA8IgtzMHyICcNA1SZFClg+HGO3g1+XSQ0v+1NkKGwBXk8pdn/+ jMJZNg1piLB3IkMXlqbU9nbF4zL9Wpw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:04:28 2025 by rpki-client