$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/57af86c6-993b-3861-935a-12754cd9e134.roa File: 57af86c6-993b-3861-935a-12754cd9e134.roa (raw, json) Hash identifier: dX5stPh3w3qx4Qhm6woHkiVmqFeSay6NF7T0z6gcZzo= Subject key identifier: 12:8B:6B:4B:49:16:6E:B1:C2:23:6E:78:03:0F:40:C2:79:96:72:92 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CE9C4E4E0CF9182509D20 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/57af86c6-993b-3861-935a-12754cd9e134.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e9:c4:e4:e0:cf:91:82:50:9d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3b5cdf85-1499-4a32-b075-2b6c1fbc189b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7b:81:1a:af:2f:0d:e5:d1:03:17:13:94:3b: 3c:13:f3:32:f2:66:9b:d4:44:38:aa:5d:be:dc:81: f1:bf:cb:76:33:e9:51:61:ad:33:82:59:f2:a4:b0: d4:0a:d9:d8:1b:c6:f1:74:0d:5c:b7:f9:fc:13:fc: 90:d2:d7:14:97:b2:49:7f:0d:ed:ac:a6:d5:57:e3: b6:ab:35:e9:4f:6c:e0:26:24:ee:9d:2a:d0:25:00: d0:0b:7f:c2:b7:7e:c4:88:d1:b7:59:f3:6f:4e:5a: df:9d:48:e3:c8:23:a3:06:9c:d5:d8:53:69:eb:d8: ce:30:b5:e9:66:61:0e:d9:a2:91:1d:a9:55:fd:d2: e3:98:a3:e5:9c:36:63:a2:e0:25:d4:98:0b:54:1f: a1:e2:74:56:b1:dd:bd:8d:f1:2a:96:bc:85:c7:23: 1e:f5:be:8b:fe:f6:29:b5:c2:07:cd:bb:32:07:8f: ae:30:c8:dc:0d:a1:76:a8:12:73:24:56:63:a1:2b: 33:9e:e9:da:c0:99:49:83:07:4b:bb:5a:77:71:f0: fd:9f:c9:c9:5a:2e:46:47:a5:eb:5e:d1:cf:34:7f: 38:a3:65:a6:5d:17:69:9a:3b:2e:52:1e:10:af:46: 0a:a4:30:fe:1b:c8:83:df:35:46:b2:ee:55:24:66: f1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8B:6B:4B:49:16:6E:B1:C2:23:6E:78:03:0F:40:C2:79:96:72:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/57af86c6-993b-3861-935a-12754cd9e134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d1:63:cc:e7:94:42:c9:a9:90:36:4f:22:6a:87:b3:a1:b2: bd:bf:14:62:91:53:02:79:a2:6f:8b:55:7d:8d:0f:45:67:be: 66:c0:46:36:88:0b:c0:23:57:ab:6d:23:c9:ce:13:67:44:ba: 9d:40:2a:b4:e6:96:8c:a6:45:7c:da:fb:f9:de:ec:cf:b5:32: ef:f4:fc:23:fb:e0:d8:1c:1f:50:05:57:7f:be:27:a9:a9:1b: 47:41:95:2f:d5:c2:86:c4:21:65:07:40:50:af:ca:0d:95:e3: a4:51:16:68:30:bf:80:6e:79:a7:f3:bf:61:4d:30:1e:ac:bc: f2:d3:6c:19:c0:e9:77:ec:4d:a7:61:d4:c3:0e:e1:bd:d3:f3: a6:d6:51:7f:cd:eb:f1:63:45:58:33:48:e7:a2:f9:97:32:4d: 12:15:f8:78:4d:8d:eb:77:46:e5:02:df:56:dd:12:8e:fe:ad: 2e:0b:a2:3c:d7:13:65:ba:0c:41:9b:f3:f8:b0:d9:d9:30:96: 3c:03:55:b2:db:03:79:4e:9d:4c:07:f7:13:90:30:af:dc:f8: 56:61:8e:7d:ac:cf:5e:06:0d:07:dc:54:b7:51:52:46:fc:a8: 6f:f9:3a:ba:bd:00:58:13:eb:5b:c3:68:fd:0b:f7:8d:0b:9e: 47:83:cd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOnE5ODPkYJQnSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2I1Y2RmODUtMTQ5OS00YTMyLWIwNzUtMmI2YzFmYmMxODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3uBGq8vDeXRAxcTlDs8E/My8mab1EQ4ql2+ 3IHxv8t2M+lRYa0zglnypLDUCtnYG8bxdA1ct/n8E/yQ0tcUl7JJfw3trKbVV+O2 qzXpT2zgJiTunSrQJQDQC3/Ct37EiNG3WfNvTlrfnUjjyCOjBpzV2FNp69jOMLXp ZmEO2aKRHalV/dLjmKPlnDZjouAl1JgLVB+h4nRWsd29jfEqlryFxyMe9b6L/vYp tcIHzbsyB4+uMMjcDaF2qBJzJFZjoSsznunawJlJgwdLu1p3cfD9n8nJWi5GR6Xr XtHPNH84o2WmXRdpmjsuUh4Qr0YKpDD+G8iD3zVGsu5VJGbx8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKLa0tJFm6xwiNueAMPQMJ5lnKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNTdhZjg2YzYtOTkzYi0z ODYxLTkzNWEtMTI3NTRjZDllMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbRY8znlELJqZA2TyJqh7Ohsr2/FGKRUwJ5om+LVX2ND0VnvmbARjaI C8AjV6ttI8nOE2dEup1AKrTmloymRXza+/ne7M+1Mu/0/CP74NgcH1AFV3++J6mp G0dBlS/VwobEIWUHQFCvyg2V46RRFmgwv4Bueafzv2FNMB6svPLTbBnA6XfsTadh 1MMO4b3T86bWUX/N6/FjRVgzSOei+ZcyTRIV+HhNjet3RuUC31bdEo7+rS4LojzX E2W6DEGb8/iw2dkwljwDVbLbA3lOnUwH9xOQMK/c+FZhjn2sz14GDQfcVLdRUkb8 qG/5Orq9AFgT61vDaP0L940LnkeDzbw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:29:44 2025 by rpki-client