$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a45fb4e-c233-34c0-8992-252abc1a2964.roa File: 5a45fb4e-c233-34c0-8992-252abc1a2964.roa (raw, json) Hash identifier: npvD4YOgkXAH0dVC5WKVC3OyCZGgqoN+iSHJ72PH/OI= Subject key identifier: 9E:FF:21:61:D5:F0:2C:C9:67:CE:CF:E6:E9:FD:F8:D3:28:B4:0C:21 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CED03F90C0FC5B932B180 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a45fb4e-c233-34c0-8992-252abc1a2964.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 53813 IP address blocks: 136.226.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ed:03:f9:0c:0f:c5:b9:32:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=6538e5a2-07ff-4183-ad62-ee0b021ed52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:16:8d:36:9f:36:4e:15:b9:4c:f2:1f:72: db:12:d7:81:6d:ac:bb:89:f8:21:ae:8f:e1:79:bd: c2:b3:29:d3:61:36:44:d2:49:24:b2:b1:09:2b:d0: e1:95:f6:fa:77:d4:44:92:a7:a2:a4:1a:90:04:14: c2:e3:aa:c8:77:16:7a:39:14:c0:7f:c8:ca:9a:27: ec:79:d5:1c:94:fa:c4:2b:de:12:fe:09:6e:e4:72: 96:39:f1:a4:a7:c2:4b:7f:6e:7e:d3:de:d8:f8:90: 62:0c:c9:aa:9f:5e:54:b8:06:a8:fb:2b:91:f5:69: 8f:09:31:15:b7:ad:f3:9f:72:f1:0a:fa:97:77:e6: c3:72:55:91:9a:b2:34:72:00:cf:1e:07:84:dd:6d: c1:18:1e:9c:c0:bc:fb:40:ef:bd:bf:43:e5:5f:72: b4:04:6e:a2:b9:24:0a:35:30:08:3b:27:23:f4:a3: 20:f7:13:38:fe:c0:79:c2:16:c5:d2:30:d5:ed:9b: 82:ba:72:a1:4e:9e:3f:30:70:f6:99:14:84:08:76: 29:2d:00:85:7d:5b:61:a5:fd:af:98:7d:e7:50:11: ba:33:71:e6:83:c4:cf:aa:68:46:45:ed:7d:0a:55: fc:dd:97:de:a9:00:68:7b:78:b8:93:56:72:69:d3: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:21:61:D5:F0:2C:C9:67:CE:CF:E6:E9:FD:F8:D3:28:B4:0C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a45fb4e-c233-34c0-8992-252abc1a2964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ef:dc:51:e5:f8:e5:14:cf:89:90:19:da:b9:85:af:b1:39: fb:17:41:df:44:e3:a6:c5:ad:bc:52:de:df:ea:5a:c6:1a:58: b3:00:f3:31:f2:6b:8d:09:9d:9e:45:00:db:ac:b0:d1:33:d6: 55:43:81:e8:cd:27:3d:a8:4a:6b:9a:79:b5:5f:2e:2a:74:da: 9e:a8:6e:37:58:87:ea:56:f0:89:bb:2c:38:d3:92:d1:06:a1: fc:d5:16:e2:e4:ca:43:c8:98:d5:32:55:69:79:01:e7:78:1a: 53:74:bd:01:c2:69:b8:d1:db:b3:43:fc:c7:8b:fe:f6:de:bb: 83:ce:9e:4d:bb:e4:77:5c:44:f5:a3:89:18:14:f0:77:10:0f: 82:70:f6:97:e3:71:86:a3:0c:c8:cf:ef:f5:7f:32:6b:be:90: e6:88:29:b9:6e:4e:eb:1f:d4:5f:2f:3f:71:40:1a:e8:b0:cd: 44:26:1c:90:90:e1:96:61:7d:7f:56:da:90:4c:56:a3:e2:fe: 90:a0:3c:11:aa:41:5f:56:58:43:3b:47:fe:de:41:bd:36:4e: dd:bd:66:c5:f7:33:60:16:65:69:51:3c:c9:35:81:2c:13:39: dc:7c:66:57:bc:11:d8:ef:b9:e5:2d:fd:8a:9b:48:e0:4b:5f: de:62:20:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPO0D+QwPxbkysYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NjUzOGU1YTItMDdmZi00MTgzLWFkNjItZWUwYjAyMWVkNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoYWjTafNk4VuUzyH3LbEteBbay7ifghro/h eb3CsynTYTZE0kkksrEJK9Dhlfb6d9REkqeipBqQBBTC46rIdxZ6ORTAf8jKmifs edUclPrEK94S/glu5HKWOfGkp8JLf25+097Y+JBiDMmqn15UuAao+yuR9WmPCTEV t63zn3LxCvqXd+bDclWRmrI0cgDPHgeE3W3BGB6cwLz7QO+9v0PlX3K0BG6iuSQK NTAIOycj9KMg9xM4/sB5whbF0jDV7ZuCunKhTp4/MHD2mRSECHYpLQCFfVthpf2v mH3nUBG6M3Hmg8TPqmhGRe19ClX83ZfeqQBoe3i4k1ZyadO6BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7/IWHV8CzJZ87P5un9+NMotAwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNWE0NWZiNGUtYzIzMy0z NGMwLTg5OTItMjUyYWJjMWEyOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOJZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLv3FHl+OUUz4mQGdq5ha+xOfsXQd9E46bFrbxS3t/qWsYaWLMA8zHy a40JnZ5FANussNEz1lVDgejNJz2oSmuaebVfLip02p6objdYh+pW8Im7LDjTktEG ofzVFuLkykPImNUyVWl5Aed4GlN0vQHCabjR27ND/MeL/vbeu4POnk275HdcRPWj iRgU8HcQD4Jw9pfjcYajDMjP7/V/Mmu+kOaIKbluTusf1F8vP3FAGuiwzUQmHJCQ 4ZZhfX9W2pBMVqPi/pCgPBGqQV9WWEM7R/7eQb02Tt29ZsX3M2AWZWlRPMk1gSwT Odx8Zle8EdjvueUt/YqbSOBLX95iIHU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:58:45 2025 by rpki-client