$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b77425ee-5ffc-3449-8273-f2d994133cf6.roa File: b77425ee-5ffc-3449-8273-f2d994133cf6.roa (raw, json) Hash identifier: oYgZHx4UC8IiUUMCOBu+zskTvyM6TmfRDAL8BG1mAe8= Subject key identifier: 09:20:56:20:1A:FB:3A:C3:04:B4:CB:94:4C:DC:F9:A4:B0:79:E1:5A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEE5BA5BD2DE511B29440 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b77425ee-5ffc-3449-8273-f2d994133cf6.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ee:5b:a5:bd:2d:e5:11:b2:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=a6fd6a80-bd4d-4679-b8f9-9931833558c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:f1:f3:22:35:d8:f2:4a:da:cc:b6:08:07: 03:9a:97:a1:1b:3e:e6:57:80:f4:1a:81:7b:35:f1: 86:b1:61:d4:be:4b:5c:04:f1:4f:72:8d:7f:50:b2: 49:9e:60:d8:0f:54:3f:d1:0d:6b:26:4c:4b:34:f2: 6d:cc:5b:74:fe:76:fe:ef:68:2e:fc:fa:12:b9:da: a9:1e:2f:0f:f2:ea:03:da:ec:46:f2:b0:59:54:38: 2a:fa:17:f0:70:78:75:ea:b7:10:77:b7:b6:42:9a: 22:10:35:5f:cc:21:53:af:6a:a6:b3:b9:d1:1f:43: 60:f1:76:22:07:17:0d:be:fa:d0:c0:f2:b0:87:a5: fb:fa:2f:2f:a4:77:f8:88:a2:55:28:67:79:8d:65: a1:2e:fc:9e:7e:87:c9:1f:36:92:e0:46:8d:10:2d: 4f:11:9a:4b:14:a2:ae:70:9e:1a:16:0d:0f:ba:80: 6d:5a:e7:2f:4d:06:11:8b:f5:31:ff:e4:9b:e1:f9: c6:91:74:98:25:5a:3a:ff:d8:6e:e8:bf:61:d9:e7: 81:5a:fe:3b:83:f9:38:3a:70:7b:d2:da:1a:95:f6: 0f:99:b8:df:ca:38:9b:e9:d6:ef:e6:84:b2:f4:cc: 3b:be:31:c3:b5:5c:cc:8e:5a:fa:60:7b:57:7e:10: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:20:56:20:1A:FB:3A:C3:04:B4:CB:94:4C:DC:F9:A4:B0:79:E1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b77425ee-5ffc-3449-8273-f2d994133cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:0e:a3:91:ab:4a:f5:f8:0a:11:c2:e7:cb:7e:77:0a:24:44: 6b:b1:78:b6:83:60:20:3a:49:e5:7e:a2:be:57:be:0e:86:b6: cd:88:66:96:33:70:5b:59:6b:22:5b:1f:66:32:72:f9:94:c9: 51:da:e3:67:d1:48:d4:bb:4a:0d:00:2e:a4:99:13:14:be:da: 0e:7f:94:34:ce:7b:85:63:a7:87:ad:0e:14:9e:0f:03:ea:99: 8e:93:b0:66:05:dd:56:4c:8a:a4:3d:38:d8:aa:51:2b:4d:5b: d9:4b:ec:d2:ec:bd:7d:ba:c2:f8:20:bb:86:d1:b8:dc:14:fd: 16:a7:dd:ba:af:c5:cd:0b:f8:7b:08:f3:26:a3:e4:87:44:c1: 09:46:3a:93:0b:b5:7c:b7:c0:a7:0a:40:dd:77:b5:28:d0:2b: 89:6f:bd:83:75:25:bd:31:0f:d6:23:d4:b5:a0:8a:da:41:24: 5c:04:b5:0e:a2:be:8a:87:d1:f4:26:00:61:ed:e2:e9:1c:23: 00:fb:01:4f:6d:fa:85:20:ca:51:d9:51:32:ca:97:8b:c7:e6: 5d:67:3c:c1:e4:2a:58:22:ba:ac:5d:37:d8:10:d5:06:31:38: 42:a7:0f:41:98:59:79:44:57:5a:6c:5b:2e:55:ca:01:06:6d: 79:c9:f1:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPO5bpb0t5RGylEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YTZmZDZhODAtYmQ0ZC00Njc5LWI4ZjktOTkzMTgzMzU1OGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWHx8yI12PJK2sy2CAcDmpehGz7mV4D0GoF7 NfGGsWHUvktcBPFPco1/ULJJnmDYD1Q/0Q1rJkxLNPJtzFt0/nb+72gu/PoSudqp Hi8P8uoD2uxG8rBZVDgq+hfwcHh16rcQd7e2QpoiEDVfzCFTr2qms7nRH0Ng8XYi BxcNvvrQwPKwh6X7+i8vpHf4iKJVKGd5jWWhLvyefofJHzaS4EaNEC1PEZpLFKKu cJ4aFg0PuoBtWucvTQYRi/Ux/+Sb4fnGkXSYJVo6/9hu6L9h2eeBWv47g/k4OnB7 0toalfYPmbjfyjib6dbv5oSy9Mw7vjHDtVzMjlr6YHtXfhB66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkgViAa+zrDBLTLlEzc+aSweeFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjc3NDI1ZWUtNWZmYy0z NDQ5LTgyNzMtZjJkOTk0MTMzY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOKCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0Oo5GrSvX4ChHC58t+dwokRGuxeLaDYCA6SeV+or5Xvg6Gts2IZpYz cFtZayJbH2YycvmUyVHa42fRSNS7Sg0ALqSZExS+2g5/lDTOe4Vjp4etDhSeDwPq mY6TsGYF3VZMiqQ9ONiqUStNW9lL7NLsvX26wvggu4bRuNwU/Ran3bqvxc0L+HsI 8yaj5IdEwQlGOpMLtXy3wKcKQN13tSjQK4lvvYN1Jb0xD9Yj1LWgitpBJFwEtQ6i voqH0fQmAGHt4ukcIwD7AU9t+oUgylHZUTLKl4vH5l1nPMHkKlgiuqxdN9gQ1QYx OEKnD0GYWXlEV1psWy5VygEGbXnJ8QQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:09:57 2025 by rpki-client