$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3fc44cc1-96ec-307b-812a-1a3bd15a24eb.roa File: 3fc44cc1-96ec-307b-812a-1a3bd15a24eb.roa (raw, json) Hash identifier: MCJTLzNIAYcB1KgcBVKVdEFJy1zQsFJYHeQfDczVYRc= Subject key identifier: D0:D6:BA:32:90:B6:BD:62:02:45:DC:C8:3E:9B:6B:59:3A:FB:89:29 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CE9D642D29A1C09105D40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3fc44cc1-96ec-307b-812a-1a3bd15a24eb.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e9:d6:42:d2:9a:1c:09:10:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=6170b1b9-edaa-41b2-a831-a7fb761fc787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:09:cf:a1:c0:4a:fa:6b:d9:00:3d:ff:34:8c: 49:6f:ed:2a:ba:fd:a9:cf:ac:55:b0:1a:d6:cc:ba: 4c:96:9b:8d:6d:eb:65:5d:94:d8:08:9b:15:62:a0: cb:62:19:f6:30:14:dc:fc:fb:58:bf:db:92:5e:39: 94:e0:c8:cb:cc:28:d1:2e:2c:75:4b:2b:e8:cc:f3: dd:67:9f:3b:56:84:f3:82:1f:06:d6:ab:15:f6:73: 03:1b:04:66:c3:b2:04:6f:30:e1:68:2c:94:8a:75: 9f:07:91:67:2f:87:c9:8e:5e:87:73:6f:89:24:6e: 53:7f:7c:d1:62:12:b0:16:a8:7d:c7:90:6c:07:5f: 82:a2:2e:ca:5e:28:c9:08:1c:23:7d:9e:eb:28:6a: 21:68:8b:fc:25:7a:74:ff:8c:c4:90:26:23:f8:09: 0e:10:e8:b3:b7:73:98:9a:6b:be:96:a6:72:16:5d: 3b:dc:e7:99:ba:9c:f3:d6:58:95:d5:db:4c:35:3f: 08:22:c2:71:a3:e3:4a:0c:94:6d:60:3e:08:a9:3b: 8e:02:ff:52:5a:12:84:55:73:27:75:49:39:6c:ee: ca:54:8e:16:b7:26:86:e0:d2:12:f2:87:74:1f:74: fe:64:e9:93:8d:ec:c8:58:2a:19:3f:9b:ef:9a:79: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D6:BA:32:90:B6:BD:62:02:45:DC:C8:3E:9B:6B:59:3A:FB:89:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3fc44cc1-96ec-307b-812a-1a3bd15a24eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:bf:21:51:38:56:43:d8:ff:63:a2:6f:ab:97:00:19:59:15: 0c:29:6c:04:e8:9c:80:d4:34:49:32:c6:21:ef:06:e4:44:76: 73:3e:ad:8d:8e:b8:fe:29:e9:d9:84:58:47:d6:4e:31:a3:5a: 72:55:e1:34:91:b1:a5:f3:a3:db:fa:4e:7a:e4:63:c3:48:c9: 00:96:d8:ae:13:12:51:84:29:5f:fc:39:2c:dc:26:d9:c1:fa: 15:d2:90:0e:c5:af:a6:eb:99:51:9d:40:8d:29:1b:77:c6:e1: 08:2f:93:a9:ef:fc:26:a9:a4:af:51:47:0e:4d:d5:7f:e6:ef: b9:5d:66:dd:9c:ff:1c:37:f9:51:49:0e:c9:c1:a3:5a:1b:cf: e5:14:52:85:b6:db:03:be:ba:33:28:8b:25:b5:38:ed:e2:40: f3:0b:b1:ff:c1:b9:89:4e:78:32:46:73:5d:8a:3e:0d:78:3f: 0e:a0:bf:6e:33:5f:1c:5f:56:cc:a7:8b:da:fc:70:4c:ab:85: 88:c4:9a:84:40:2b:bf:d9:f6:03:4a:a4:8e:d7:09:b8:62:fb: 37:6b:93:92:4a:93:71:8c:bf:03:79:f3:86:61:7b:56:2b:c2: 50:08:25:60:69:38:29:81:3c:52:20:1b:30:f2:4c:4d:2e:32: 78:7e:32:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOnWQtKaHAkQXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NjE3MGIxYjktZWRhYS00MWIyLWE4MzEtYTdmYjc2MWZjNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wnPocBK+mvZAD3/NIxJb+0quv2pz6xVsBrW zLpMlpuNbetlXZTYCJsVYqDLYhn2MBTc/PtYv9uSXjmU4MjLzCjRLix1SyvozPPd Z587VoTzgh8G1qsV9nMDGwRmw7IEbzDhaCyUinWfB5FnL4fJjl6Hc2+JJG5Tf3zR YhKwFqh9x5BsB1+Coi7KXijJCBwjfZ7rKGohaIv8JXp0/4zEkCYj+AkOEOizt3OY mmu+lqZyFl073OeZupzz1liV1dtMNT8IIsJxo+NKDJRtYD4IqTuOAv9SWhKEVXMn dUk5bO7KVI4WtyaG4NIS8od0H3T+ZOmTjezIWCoZP5vvmnkh4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDWujKQtr1iAkXcyD6ba1k6+4kpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2ZjNDRjYzEtOTZlYy0z MDdiLTgxMmEtMWEzYmQxNWEyNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS/IVE4VkPY/2Oib6uXABlZFQwpbATonIDUNEkyxiHvBuREdnM+rY2O uP4p6dmEWEfWTjGjWnJV4TSRsaXzo9v6TnrkY8NIyQCW2K4TElGEKV/8OSzcJtnB +hXSkA7Fr6brmVGdQI0pG3fG4Qgvk6nv/CappK9RRw5N1X/m77ldZt2c/xw3+VFJ DsnBo1obz+UUUoW22wO+ujMoiyW1OO3iQPMLsf/BuYlOeDJGc12KPg14Pw6gv24z XxxfVsyni9r8cEyrhYjEmoRAK7/Z9gNKpI7XCbhi+zdrk5JKk3GMvwN584Zhe1Yr wlAIJWBpOCmBPFIgGzDyTE0uMnh+Mkc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:42:08 2025 by rpki-client