$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa File: 490ce204-77bd-331a-8935-0cd50cc85c8c.roa (raw, json) Hash identifier: vIO4kxJ+XUA8Et+QD3LaGVdX1OGL7brXRzcCu25oc3o= Subject key identifier: 81:9F:76:76:19:29:27:B6:F6:C9:40:4A:5E:98:DF:87:F5:FE:B1:39 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CECEE3FA3C3DC6BCCEC50 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ec:ee:3f:a3:c3:dc:6b:cc:ec:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=65001653-42e7-4594-bfda-2847c9a5e878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:b9:45:d1:01:9b:8b:31:4a:99:a9:6e:29: 6d:75:08:e8:bf:46:69:8b:61:f9:53:45:17:61:da: d9:19:82:00:ff:a1:e6:3b:af:bb:a2:04:1c:f3:8b: 83:cf:f1:64:03:ba:d7:74:18:61:ee:44:e6:97:3f: 29:84:1f:aa:0b:6a:c8:bd:94:25:98:3c:af:f0:6f: 77:f9:62:17:cf:6e:3f:23:4e:13:18:86:12:20:16: 1b:39:1a:25:b4:19:a0:7c:38:8b:8b:76:5a:7f:0f: 5d:a4:6e:50:61:f7:f4:a0:14:f4:63:0d:c7:fb:65: 6b:18:48:39:c2:c0:9a:89:dc:3c:f0:80:7e:57:75: b5:e3:95:e9:fd:66:d0:6f:a9:33:b1:7d:20:0e:1f: 99:d1:5d:b5:13:05:54:a4:ea:e5:30:93:af:b2:c3: 4c:c1:39:38:24:0f:a3:d4:c0:13:13:3b:6a:99:96: e4:ef:db:8b:39:3c:10:b9:6a:65:65:af:35:d3:20: 6d:a3:94:4f:3a:0f:25:2a:59:07:97:31:3e:8e:61: cd:22:fa:5f:ff:81:79:61:33:17:bf:ee:02:07:74: 82:fa:e4:17:79:50:10:21:b8:94:c5:77:37:fd:ae: 43:3a:e9:1a:4f:e0:63:f0:fd:3d:b4:1e:45:3d:9f: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9F:76:76:19:29:27:B6:F6:C9:40:4A:5E:98:DF:87:F5:FE:B1:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:57:f5:8e:06:9f:36:f3:7e:8c:53:53:4e:bf:01:71:3d:0e: ef:8b:e8:54:b2:43:8d:ea:08:7f:86:42:1b:65:e8:1b:35:2c: 8c:33:bf:a1:4a:47:06:f5:11:34:01:02:57:60:2b:30:f9:e0: 01:e3:02:6a:f6:57:4f:12:21:8a:b2:5d:5f:a8:ee:6c:6b:e0: de:4e:c2:24:40:9c:ff:94:0c:e4:cc:80:cb:8a:75:59:93:0d: 74:5d:aa:7c:2a:48:93:5c:1d:2c:42:d3:71:08:1c:50:49:c0: 3d:10:01:15:84:dc:f8:fc:d8:bd:ff:8c:4b:a0:05:6a:c1:48: 84:05:80:31:d0:6d:4b:04:56:33:a9:5a:47:55:c4:60:41:25: 00:5a:37:68:9d:ac:28:c0:cf:27:b5:84:43:44:c1:fe:0e:07: 9e:f4:6e:97:5c:74:cf:1c:99:d2:11:78:16:df:99:ab:42:86: bd:3b:ee:18:7d:3e:a7:42:62:0f:47:3e:d5:16:0b:f8:b5:de: 34:2c:b3:f8:7c:3c:ed:2e:ec:16:51:be:79:9b:6c:67:80:d4: 6e:0b:2a:38:b9:c6:29:a0:49:60:b8:80:aa:18:e4:b2:ce:f6: da:27:0a:3a:0f:df:76:84:d1:a7:4e:74:57:d7:4b:7e:c8:a7: f3:55:44:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOzuP6PD3GvM7FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NjUwMDE2NTMtNDJlNy00NTk0LWJmZGEtMjg0N2M5YTVlODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEy5RdEBm4sxSpmpbiltdQjov0Zpi2H5U0UX YdrZGYIA/6HmO6+7ogQc84uDz/FkA7rXdBhh7kTmlz8phB+qC2rIvZQlmDyv8G93 +WIXz24/I04TGIYSIBYbORoltBmgfDiLi3Zafw9dpG5QYff0oBT0Yw3H+2VrGEg5 wsCaidw88IB+V3W145Xp/WbQb6kzsX0gDh+Z0V21EwVUpOrlMJOvssNMwTk4JA+j 1MATEztqmZbk79uLOTwQuWplZa810yBto5RPOg8lKlkHlzE+jmHNIvpf/4F5YTMX v+4CB3SC+uQXeVAQIbiUxXc3/a5DOukaT+Bj8P09tB5FPZ9ffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGfdnYZKSe29slASl6Y34f1/rE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDkwY2UyMDQtNzdiZC0z MzFhLTg5MzUtMGNkNTBjYzg1YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJX9Y4GnzbzfoxTU06/AXE9Du+L6FSyQ43qCH+GQhtl6Bs1LIwzv6FK Rwb1ETQBAldgKzD54AHjAmr2V08SIYqyXV+o7mxr4N5OwiRAnP+UDOTMgMuKdVmT DXRdqnwqSJNcHSxC03EIHFBJwD0QARWE3Pj82L3/jEugBWrBSIQFgDHQbUsEVjOp WkdVxGBBJQBaN2idrCjAzye1hENEwf4OB570bpdcdM8cmdIReBbfmatChr077hh9 PqdCYg9HPtUWC/i13jQss/h8PO0u7BZRvnmbbGeA1G4LKji5ximgSWC4gKoY5LLO 9tonCjoP33aE0adOdFfXS37Ip/NVRH0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:37 2025 by rpki-client