$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c27a2b11-83d5-3627-962d-3c441b193d70.roa File: c27a2b11-83d5-3627-962d-3c441b193d70.roa (raw, json) Hash identifier: 489ffhbN0vx1mUIIlridO3JC6+XEZTdFbmY42xUxFP8= Subject key identifier: AA:8C:BE:72:32:DB:58:67:78:6F:B4:3F:5B:36:B7:A1:20:F3:3B:FE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEE1BA9E62AA74C18BC60 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c27a2b11-83d5-3627-962d-3c441b193d70.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ee:1b:a9:e6:2a:a7:4c:18:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=56ee37ff-a1cb-453a-8d88-b9a912a55fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:5b:5f:47:c2:b5:34:8e:ce:0b:b5:9e:f0: 6c:ae:a7:72:a3:ca:ba:83:41:41:09:76:1d:e6:69: c1:ac:79:ad:c2:ca:06:ce:a7:b2:c6:39:62:90:55: f8:66:a6:ad:ba:59:31:1d:2d:f7:27:f4:55:25:b4: 22:b8:2d:68:71:51:00:c0:4b:fb:a8:92:72:e0:4e: 73:fd:a6:fe:11:13:ca:79:28:59:ec:ce:47:4f:9f: 08:57:ba:59:22:94:d1:ae:a2:2d:70:58:78:19:41: 21:12:23:e4:de:d2:c5:00:93:11:ac:92:46:e0:ff: e2:5b:3f:52:92:c0:d5:d0:97:17:68:2b:4d:be:38: d3:00:08:eb:01:32:19:29:db:f7:6f:24:c7:9a:aa: a0:b4:ad:bf:00:a3:b8:74:17:ce:18:8c:28:fb:a8: bc:4e:d2:ce:73:5d:91:1f:91:4f:84:4e:55:d2:dd: b7:75:75:f7:00:c8:69:3b:6b:57:47:63:0d:91:24: 86:21:a5:b0:47:79:b9:3e:d5:a9:34:a7:b3:ec:51: 57:7a:8c:92:b5:f5:31:63:c6:09:24:02:12:af:8d: 2d:1d:b6:44:1e:f6:ab:48:a8:e4:37:11:09:b7:7e: b1:fa:a4:de:ca:cf:2c:17:07:87:72:77:a0:8d:1b: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8C:BE:72:32:DB:58:67:78:6F:B4:3F:5B:36:B7:A1:20:F3:3B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c27a2b11-83d5-3627-962d-3c441b193d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:2d:e0:dc:7d:27:0d:67:71:60:86:52:a5:75:f4:6f:b7:85: e5:c0:2b:0c:06:7d:72:af:02:a1:7d:e0:f7:0e:c2:13:8a:ea: 90:0d:59:71:a8:b0:7f:14:20:b6:ed:ac:eb:92:10:85:40:b7: 09:42:26:32:0d:ac:28:47:bd:28:f9:07:3d:6e:a0:67:92:4c: be:e9:23:f1:78:51:83:66:0c:0d:e9:6c:8e:8b:f6:87:c3:1e: ad:4c:4b:2b:11:c0:8b:dc:e9:b4:89:b1:dd:4c:06:6b:73:08: 1d:bc:61:58:82:15:69:16:ba:20:55:a8:45:1a:7f:ae:36:1a: 53:9a:55:13:7d:a4:06:73:a6:c9:e2:24:ee:a9:a4:ff:4d:62: 81:4c:8a:5e:6d:a0:db:0a:b6:2b:45:7f:50:d1:e8:5a:73:96: 95:5a:32:aa:34:df:fa:22:eb:b3:3d:c1:3a:44:f7:e4:ab:c9: e0:96:ae:11:bd:a3:32:b6:50:e4:e8:bb:3b:db:2c:da:66:91: e1:4e:de:9c:ef:d7:cc:4d:06:24:4d:ca:b3:4c:e7:16:b8:8a: df:1f:4c:a0:05:b7:12:87:88:ae:50:1b:85:09:ae:44:10:6b: d8:32:64:7a:00:0d:d7:00:92:5b:20:d9:f4:c3:fa:af:b5:56: 57:e0:f7:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPO4bqeYqp0wYvGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NTZlZTM3ZmYtYTFjYi00NTNhLThkODgtYjlhOTEyYTU1ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopJbX0fCtTSOzgu1nvBsrqdyo8q6g0FBCXYd 5mnBrHmtwsoGzqeyxjlikFX4ZqatulkxHS33J/RVJbQiuC1ocVEAwEv7qJJy4E5z /ab+ERPKeShZ7M5HT58IV7pZIpTRrqItcFh4GUEhEiPk3tLFAJMRrJJG4P/iWz9S ksDV0JcXaCtNvjjTAAjrATIZKdv3byTHmqqgtK2/AKO4dBfOGIwo+6i8TtLOc12R H5FPhE5V0t23dXX3AMhpO2tXR2MNkSSGIaWwR3m5PtWpNKez7FFXeoyStfUxY8YJ JAISr40tHbZEHvarSKjkNxEJt36x+qTeys8sFweHcnegjRve8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqMvnIy21hneG+0P1s2t6Eg8zv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzI3YTJiMTEtODNkNS0z NjI3LTk2MmQtM2M0NDFiMTkzZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIt4Nx9Jw1ncWCGUqV19G+3heXAKwwGfXKvAqF94PcOwhOK6pANWXGo sH8UILbtrOuSEIVAtwlCJjINrChHvSj5Bz1uoGeSTL7pI/F4UYNmDA3pbI6L9ofD Hq1MSysRwIvc6bSJsd1MBmtzCB28YViCFWkWuiBVqEUaf642GlOaVRN9pAZzpsni JO6ppP9NYoFMil5toNsKtitFf1DR6FpzlpVaMqo03/oi67M9wTpE9+SryeCWrhG9 ozK2UOTouzvbLNpmkeFO3pzv18xNBiRNyrNM5xa4it8fTKAFtxKHiK5QG4UJrkQQ a9gyZHoADdcAklsg2fTD+q+1Vlfg994= -----END CERTIFICATE-----Generated at Wed Nov 5 07:03:39 2025 by rpki-client