$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9370e42-790c-3493-9843-6281c90a4129.roa File: b9370e42-790c-3493-9843-6281c90a4129.roa (raw, json) Hash identifier: +pdWC+j7IUWORl2rBUO/7MRegGAne1WDDHczC1LHFCc= Subject key identifier: 24:7A:2B:B9:56:36:75:F2:49:CC:9A:52:11:58:18:50:98:C1:96:0B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEC07DABD9D7AB4006280 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9370e42-790c-3493-9843-6281c90a4129.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ec:07:da:bd:9d:7a:b4:00:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=0fa4f618-d13a-4df1-b05a-0b3b3bc71c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:64:58:b7:6c:9c:69:cf:79:d5:28:d5:a1:3a: 36:b0:a2:83:e6:97:93:89:a3:84:8d:2a:95:f6:a7: 00:7d:3c:fa:dd:50:41:6a:1c:25:da:d9:ec:d8:3e: d8:22:f3:0f:79:dd:4a:73:9b:9e:55:32:cf:22:ff: 41:6f:4d:40:be:da:87:87:e5:16:4b:cc:80:2e:79: ad:50:bf:ab:a5:3d:ad:69:9f:63:9f:74:64:25:8b: c6:97:c4:55:5a:e2:24:9a:cb:e5:94:60:bc:ae:88: a9:6b:68:15:1c:03:87:7c:9f:45:e4:55:03:20:17: 72:96:a3:54:55:9f:69:ee:01:97:86:b4:b1:d1:68: 3c:e1:c9:db:dd:0d:8e:07:b9:34:e3:6d:11:5b:0a: 38:4a:df:67:fc:64:c3:63:cc:14:23:8e:98:e6:27: 8e:09:bf:34:44:e1:6d:12:d5:9e:02:c0:9c:a9:6b: fb:81:5c:7b:2d:8b:b1:2d:e4:a0:c5:ff:3c:56:7a: 92:f1:3f:69:e0:a0:6e:75:73:fb:5f:c8:55:43:66: 79:95:44:dc:0d:a0:0a:d1:5e:11:1c:7f:71:5e:88: bf:6a:6e:22:0c:ab:d8:95:f9:78:48:b2:ec:f0:e7: 45:5e:b4:c3:6e:89:34:d8:1a:83:ce:e0:22:8c:96: 56:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7A:2B:B9:56:36:75:F2:49:CC:9A:52:11:58:18:50:98:C1:96:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b9370e42-790c-3493-9843-6281c90a4129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:37:0a:0d:90:bf:72:4a:bd:2a:ef:e8:10:cc:a7:b7:eb:2c: 09:cd:9d:01:55:82:d3:df:b9:3f:ed:9c:d1:a6:85:c8:f0:be: 62:05:d2:34:5f:20:d9:a9:e1:0c:2b:7b:e6:d1:88:44:90:e3: e9:3d:7e:13:d2:c8:82:7e:f2:6e:3e:58:bc:97:d4:5f:6b:9c: 08:3e:cd:8c:14:0b:6a:46:e9:4c:c6:48:34:d1:f8:1d:f8:20: 47:96:23:1a:17:df:ca:d1:b2:47:a6:8a:85:18:d5:3d:ac:b2: ed:41:2e:22:74:41:52:eb:3e:33:1b:c9:68:09:35:a3:b5:37: e4:3f:01:d0:51:c2:14:98:05:7d:da:38:fa:54:8e:b7:35:6f: 0b:1b:37:9e:e7:f1:95:2a:f1:61:ce:8d:ba:26:c7:fa:41:4a: 13:8d:fe:e2:7d:31:5a:2c:fc:e6:30:5e:6e:0a:1e:72:5a:e7: 39:3b:56:34:1d:56:9c:77:80:1c:ba:c9:6c:6c:89:24:6d:c9: d8:c6:1a:9c:d6:80:56:dd:31:92:28:a9:70:bc:d6:06:7e:05: e3:27:db:ff:a8:88:fc:85:55:a2:09:68:16:68:5a:e4:90:83: 47:b4:0f:f1:01:18:fe:6f:b4:d9:a7:0f:91:a7:8b:42:23:ce: 4a:52:e8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOwH2r2derQAYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MGZhNGY2MTgtZDEzYS00ZGYxLWIwNWEtMGIzYjNiYzcxYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWRYt2ycac951SjVoTo2sKKD5peTiaOEjSqV 9qcAfTz63VBBahwl2tns2D7YIvMPed1Kc5ueVTLPIv9Bb01AvtqHh+UWS8yALnmt UL+rpT2taZ9jn3RkJYvGl8RVWuIkmsvllGC8roipa2gVHAOHfJ9F5FUDIBdylqNU VZ9p7gGXhrSx0Wg84cnb3Q2OB7k0420RWwo4St9n/GTDY8wUI46Y5ieOCb80ROFt EtWeAsCcqWv7gVx7LYuxLeSgxf88VnqS8T9p4KBudXP7X8hVQ2Z5lUTcDaAK0V4R HH9xXoi/am4iDKvYlfl4SLLs8OdFXrTDbok02BqDzuAijJZWlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR6K7lWNnXyScyaUhFYGFCYwZYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjkzNzBlNDItNzkwYy0z NDkzLTk4NDMtNjI4MWM5MGE0MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU3Cg2Qv3JKvSrv6BDMp7frLAnNnQFVgtPfuT/tnNGmhcjwvmIF0jRf INmp4Qwre+bRiESQ4+k9fhPSyIJ+8m4+WLyX1F9rnAg+zYwUC2pG6UzGSDTR+B34 IEeWIxoX38rRskemioUY1T2ssu1BLiJ0QVLrPjMbyWgJNaO1N+Q/AdBRwhSYBX3a OPpUjrc1bwsbN57n8ZUq8WHOjbomx/pBShON/uJ9MVos/OYwXm4KHnJa5zk7VjQd Vpx3gBy6yWxsiSRtydjGGpzWgFbdMZIoqXC81gZ+BeMn2/+oiPyFVaIJaBZoWuSQ g0e0D/EBGP5vtNmnD5Gni0IjzkpS6KM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:20 2025 by rpki-client