$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a389c98-6f91-328e-bef7-ec0f59beb825.roa File: 3a389c98-6f91-328e-bef7-ec0f59beb825.roa (raw, json) Hash identifier: aaxAQWVbk1HskphSEtS2Tit9L9QcloV2uBC9Dku8AP4= Subject key identifier: A1:D7:B9:A5:53:F2:2F:FB:14:92:34:A5:F1:AD:3F:65:DF:F3:46:7A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEAB6AC6A5EA06BCBF000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a389c98-6f91-328e-bef7-ec0f59beb825.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ea:b6:ac:6a:5e:a0:6b:cb:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3807f7e4-8d9d-4be5-80c2-fa09628311ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:81:d6:2c:50:20:99:e4:db:79:09:0b:0c:ff: 2b:a1:d9:49:fb:d9:36:c0:9e:f6:3e:2a:40:ad:c5: df:43:33:26:fd:6f:1c:3e:9a:61:dc:f7:30:44:8a: b7:c8:b2:98:32:99:04:43:f8:ba:0a:2e:8b:42:f9: 76:59:f0:6d:25:81:61:07:6c:10:ad:6c:21:78:87: f8:d2:6c:52:6b:eb:9f:07:3e:4e:a1:5b:37:f0:33: f3:5c:c2:1f:92:f3:45:b0:01:9a:9a:ca:86:ed:0e: b5:a5:ab:b0:d9:d9:99:0b:d2:82:a4:29:31:7b:a7: 21:e4:fa:1a:31:5d:95:36:72:cb:0d:d2:63:bf:ce: 79:3d:e9:6e:00:15:a2:c8:7e:e7:7c:2b:7c:08:29: b9:35:73:f8:88:7c:da:f4:4c:04:54:c9:9d:fa:0a: 04:03:28:40:0c:ef:26:78:33:31:82:e9:6e:0d:fe: 98:a7:0d:ff:20:06:34:e5:dc:98:43:ba:c9:a4:0a: 75:db:f3:34:84:ab:1f:60:eb:4d:1b:b7:48:66:aa: 4c:62:d8:08:22:6c:10:0e:f5:58:ef:cf:ca:72:fd: 87:ad:60:46:98:4c:20:eb:32:c0:00:bb:e2:b8:2b: 29:f6:9c:5f:ab:b1:15:da:b7:c3:0d:84:30:fb:61: dd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D7:B9:A5:53:F2:2F:FB:14:92:34:A5:F1:AD:3F:65:DF:F3:46:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a389c98-6f91-328e-bef7-ec0f59beb825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:97:93:ec:28:e0:53:8c:46:d4:6c:2f:16:8e:84:d3:7e:48: 7c:9d:e7:13:ed:15:d5:a1:93:7e:26:f8:b2:6e:5f:05:78:f1: 65:96:9d:c4:7b:33:0a:5c:86:e6:dd:fb:e1:49:6d:d6:d1:20: 07:a5:0f:38:98:38:59:1b:be:91:4c:2c:a4:2b:f6:1f:6c:6a: 84:da:ff:66:c3:46:c4:8a:52:f7:f4:d3:6d:17:eb:e1:0c:aa: b0:19:a0:b7:f6:0a:b8:12:60:0f:7c:ae:ce:e2:45:5e:10:3f: 12:75:55:21:5e:84:89:93:31:e2:36:32:cb:63:0d:53:d3:79: 35:90:9f:06:f4:39:2d:0a:8e:64:8c:cc:6b:b6:1d:47:1f:df: fb:3f:e6:f9:d1:c3:b1:79:40:6d:9d:47:03:6b:a9:38:b1:ee: 20:eb:28:19:3c:61:4a:07:e2:8d:49:8e:d1:f9:3e:3f:9a:aa: 74:f7:31:5b:62:74:08:a2:eb:b2:df:2a:df:d5:4f:74:bd:63: 6f:d2:81:44:ab:46:49:a3:d3:6a:12:b5:64:4e:b7:ed:c9:d2: 20:c1:3d:48:8f:ea:35:53:25:23:5c:a3:dd:71:48:59:a6:5e: c2:0f:a5:da:3c:d0:aa:fb:28:d9:6d:fc:2f:aa:cc:1e:ee:29: e1:4c:31:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOq2rGpeoGvL8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MzgwN2Y3ZTQtOGQ5ZC00YmU1LTgwYzItZmEwOTYyODMxMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYHWLFAgmeTbeQkLDP8rodlJ+9k2wJ72PipA rcXfQzMm/W8cPpph3PcwRIq3yLKYMpkEQ/i6Ci6LQvl2WfBtJYFhB2wQrWwheIf4 0mxSa+ufBz5OoVs38DPzXMIfkvNFsAGamsqG7Q61pauw2dmZC9KCpCkxe6ch5Poa MV2VNnLLDdJjv855PeluABWiyH7nfCt8CCm5NXP4iHza9EwEVMmd+goEAyhADO8m eDMxguluDf6Ypw3/IAY05dyYQ7rJpAp12/M0hKsfYOtNG7dIZqpMYtgIImwQDvVY 78/Kcv2HrWBGmEwg6zLAALviuCsp9pxfq7EV2rfDDYQw+2HdNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHXuaVT8i/7FJI0pfGtP2Xf80Z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2EzODljOTgtNmY5MS0z MjhlLWJlZjctZWMwZjU5YmViODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKXk+wo4FOMRtRsLxaOhNN+SHyd5xPtFdWhk34m+LJuXwV48WWWncR7 Mwpchubd++FJbdbRIAelDziYOFkbvpFMLKQr9h9saoTa/2bDRsSKUvf0020X6+EM qrAZoLf2CrgSYA98rs7iRV4QPxJ1VSFehImTMeI2MstjDVPTeTWQnwb0OS0KjmSM zGu2HUcf3/s/5vnRw7F5QG2dRwNrqTix7iDrKBk8YUoH4o1JjtH5Pj+aqnT3MVti dAii67LfKt/VT3S9Y2/SgUSrRkmj02oStWROt+3J0iDBPUiP6jVTJSNco91xSFmm XsIPpdo80Kr7KNlt/C+qzB7uKeFMMYI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:03:30 2025 by rpki-client