$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd7b0ff-77e7-356f-82a1-c91081108b27.roa File: 9bd7b0ff-77e7-356f-82a1-c91081108b27.roa (raw, json) Hash identifier: 2KMTCq4DgiuDBIaRGB0Qyp+dleOZv6/HFfpmA3vkeQo= Subject key identifier: 76:26:1A:E2:7E:D8:60:F8:BD:12:24:46:22:F3:98:39:FE:96:A3:81 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEC1A55B625E8C86DDD00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd7b0ff-77e7-356f-82a1-c91081108b27.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ec:1a:55:b6:25:e8:c8:6d:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=458251d8-a0b1-4a5c-891c-8dad253d73a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:ac:80:7b:3c:05:20:c3:93:16:f7:37:96: 50:57:d9:3d:6a:ef:0c:a5:bd:e4:c2:b4:c5:07:ae: 61:d9:1f:7f:60:05:a3:39:c4:a7:15:d6:6a:62:54: 5a:48:22:e3:50:2b:ee:5e:83:fe:a0:b6:3d:7e:ce: b7:fe:b3:bb:78:27:19:62:1e:53:a5:55:09:d5:c3: b0:00:e8:1f:4d:d6:ca:fa:06:51:25:74:3b:b2:c7: 57:4f:49:2a:b6:2c:2f:be:a0:98:f3:dc:24:15:9a: 93:c5:97:38:c7:dc:bc:92:15:e2:7c:d0:8a:e2:97: 3f:78:7c:0d:c0:86:2c:c8:f3:77:e5:f8:bd:9c:7c: 9a:ac:2b:57:db:2f:4e:aa:44:81:ec:eb:86:76:2c: 85:68:ad:6f:28:f9:ae:c7:59:2b:79:05:7f:6d:b5: a6:3f:8b:96:68:cb:5b:9a:91:b6:2d:23:74:fb:05: 52:8f:4a:ec:50:8e:e0:be:7a:fc:ab:58:c7:bf:eb: a6:7c:f6:fe:51:50:7b:fd:e5:c8:fd:4c:cf:06:d7: ed:77:3f:50:b4:03:e7:dc:a5:81:82:5a:a9:44:33: 70:22:4e:77:24:4d:f3:22:9c:bc:73:76:ca:bd:f6: 87:c2:33:9c:d2:f4:49:f6:76:24:12:44:71:1a:a2: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:26:1A:E2:7E:D8:60:F8:BD:12:24:46:22:F3:98:39:FE:96:A3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd7b0ff-77e7-356f-82a1-c91081108b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:cf:aa:e8:4b:91:4e:3b:51:ed:a3:9c:43:00:8b:ab:0b:12: 54:9b:2e:b5:15:91:0e:27:40:33:68:05:52:f1:da:65:22:c9: d7:6d:e0:6c:a7:a4:86:53:27:38:0a:02:aa:c8:2a:81:9f:bb: 60:10:b0:5d:f5:dc:69:f9:e6:63:20:13:27:50:3d:91:9e:3b: a9:49:09:b6:b1:d1:8a:6a:d8:90:8d:0c:78:5e:67:19:88:11: 1e:a2:86:62:91:a9:50:20:16:86:dc:0f:82:0d:60:7f:c5:45: 55:e8:47:a1:f4:47:bd:9f:b8:ac:b9:fc:a6:c3:8e:1c:82:b5: 33:97:11:ed:8a:54:56:b7:2a:e7:5b:1a:bb:dc:35:6f:e5:81: 4e:e3:c4:c8:94:9c:8c:93:89:7f:6a:70:2e:22:9f:b7:65:da: 0d:7a:da:d1:82:3a:43:55:9c:87:88:c4:31:65:1e:f3:bd:24: b9:16:44:0e:77:d9:21:54:92:a5:2f:91:69:ca:b3:c3:0e:f0: f7:e4:10:e0:ce:78:6b:f8:81:5c:89:58:33:c7:dd:5c:a8:ff: 2a:4a:14:77:44:f4:83:22:d3:df:44:b0:39:fb:a9:a5:6d:f0: d7:03:94:04:f9:30:0f:19:9b:63:22:f7:c0:c5:3f:05:82:62: 14:4b:29:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOwaVbYl6Mht3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NDU4MjUxZDgtYTBiMS00YTVjLTg5MWMtOGRhZDI1M2Q3M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IesgHs8BSDDkxb3N5ZQV9k9au8Mpb3kwrTF B65h2R9/YAWjOcSnFdZqYlRaSCLjUCvuXoP+oLY9fs63/rO7eCcZYh5TpVUJ1cOw AOgfTdbK+gZRJXQ7ssdXT0kqtiwvvqCY89wkFZqTxZc4x9y8khXifNCK4pc/eHwN wIYsyPN35fi9nHyarCtX2y9OqkSB7OuGdiyFaK1vKPmux1kreQV/bbWmP4uWaMtb mpG2LSN0+wVSj0rsUI7gvnr8q1jHv+umfPb+UVB7/eXI/UzPBtftdz9QtAPn3KWB glqpRDNwIk53JE3zIpy8c3bKvfaHwjOc0vRJ9nYkEkRxGqLI1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYmGuJ+2GD4vRIkRiLzmDn+lqOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOWJkN2IwZmYtNzdlNy0z NTZmLTgyYTEtYzkxMDgxMTA4YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTPquhLkU47Ue2jnEMAi6sLElSbLrUVkQ4nQDNoBVLx2mUiyddt4Gyn pIZTJzgKAqrIKoGfu2AQsF313Gn55mMgEydQPZGeO6lJCbax0Ypq2JCNDHheZxmI ER6ihmKRqVAgFobcD4INYH/FRVXoR6H0R72fuKy5/KbDjhyCtTOXEe2KVFa3Kudb GrvcNW/lgU7jxMiUnIyTiX9qcC4in7dl2g162tGCOkNVnIeIxDFlHvO9JLkWRA53 2SFUkqUvkWnKs8MO8PfkEODOeGv4gVyJWDPH3Vyo/ypKFHdE9IMi099EsDn7qaVt 8NcDlAT5MA8Zm2Mi98DFPwWCYhRLKe4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:23 2025 by rpki-client