$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c97de213-4f07-3298-9cee-3a216fcfd2d4.roa File: c97de213-4f07-3298-9cee-3a216fcfd2d4.roa (raw, json) Hash identifier: equjWYE4+ssVY9dC9tOcq4rSu1Nw6shCEi3WGOT6TcM= Subject key identifier: CE:B6:CB:EA:6E:BF:E3:4D:B9:DB:E3:39:99:62:96:CA:F7:AA:7F:79 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEA655D94B50E2488B700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c97de213-4f07-3298-9cee-3a216fcfd2d4.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ea:65:5d:94:b5:0e:24:88:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=9d062a7a-d2bb-4a0d-b6c7-884b91cfc3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:dd:f0:f3:82:c0:d6:18:a1:db:97:e7:5e: 3e:e3:2f:be:53:e3:cd:e9:cd:b6:f1:b1:c7:16:c0: e1:3c:90:95:58:3a:18:c7:7d:08:99:17:2d:41:a6: 4e:41:3e:c8:9f:03:51:6c:ce:0a:ca:d0:0d:ac:97: 75:0e:15:82:7f:0b:b9:02:38:d3:7c:b5:1f:90:02: 27:73:f1:a1:fb:68:ef:3f:0e:47:da:bb:83:18:c8: 3a:42:6b:a8:c3:05:b4:a7:a9:4d:dc:11:31:18:5d: 6d:1a:60:ff:34:c6:2e:11:1c:b6:38:88:77:f0:fb: dc:30:57:a8:cd:45:5e:1c:f4:86:5b:4d:83:a3:49: 3a:1e:4e:2b:1f:3e:e3:75:43:c5:50:20:79:27:c0: 0f:de:4f:f5:d6:37:49:ff:1e:86:5c:2f:27:8e:42: 2e:83:05:73:22:de:11:ec:0f:80:ea:ae:39:8b:6f: cb:1e:78:b3:92:9d:1b:ef:d8:73:74:4b:93:43:59: be:8e:d2:b0:85:51:9c:c7:6f:6e:97:ee:e0:5a:23: 51:fd:8a:b3:1c:f9:84:47:b1:3d:76:aa:ad:e2:9c: eb:6b:f1:b9:02:b6:8d:25:fb:18:98:4d:f4:7f:41: 6a:d1:53:06:94:b5:e9:49:07:62:3f:b8:d9:c9:9e: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:CB:EA:6E:BF:E3:4D:B9:DB:E3:39:99:62:96:CA:F7:AA:7F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c97de213-4f07-3298-9cee-3a216fcfd2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:83:4f:33:11:24:59:45:96:c8:09:13:cf:51:12:87:d5:90: 39:c5:69:2d:9a:bb:81:9c:93:7e:c4:d2:b9:19:44:29:25:ab: 47:7a:9a:dd:cf:46:c3:8f:f1:7c:c5:2f:6a:96:71:4b:52:ca: 73:c2:d0:1d:81:63:e9:06:06:73:4f:34:a5:b4:c2:b0:24:3c: 66:30:99:2f:c4:4f:44:3e:0d:87:a8:16:c3:53:3d:e2:c8:f8: 46:0c:19:43:f6:ca:84:10:f8:bf:39:3e:44:60:36:69:b3:56: 96:65:8d:5d:1e:32:fa:49:51:2b:73:4f:17:98:94:dd:ef:bd: 0e:f3:5d:10:ad:96:25:dd:64:21:c9:8c:f4:73:2e:4d:2a:3a: a8:33:3a:a0:83:14:da:68:0d:93:b6:b0:63:95:39:a4:9c:f3: f0:e1:da:74:fb:d7:b1:ed:c0:33:3c:ba:d1:07:a9:d5:f8:65: 64:41:c6:59:c6:98:13:ec:f3:0f:a2:ed:e9:0e:db:ed:f4:0f: e3:3c:db:4d:b3:2a:69:c3:91:1a:3e:ee:77:f6:0b:49:ad:76: bc:da:d4:8f:70:df:c6:24:f5:ac:2b:c2:32:a5:67:1c:ac:22: d0:b4:88:5b:0f:82:cc:47:db:b5:9d:4d:98:2f:b7:a1:63:a8: 38:17:c4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOplXZS1DiSItwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OWQwNjJhN2EtZDJiYi00YTBkLWI2YzctODg0YjkxY2ZjM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5nd8POCwNYYoduX514+4y++U+PN6c228bHH FsDhPJCVWDoYx30ImRctQaZOQT7InwNRbM4KytANrJd1DhWCfwu5AjjTfLUfkAIn c/Gh+2jvPw5H2ruDGMg6QmuowwW0p6lN3BExGF1tGmD/NMYuERy2OIh38PvcMFeo zUVeHPSGW02Do0k6Hk4rHz7jdUPFUCB5J8AP3k/11jdJ/x6GXC8njkIugwVzIt4R 7A+A6q45i2/LHnizkp0b79hzdEuTQ1m+jtKwhVGcx29ul+7gWiNR/YqzHPmER7E9 dqqt4pzra/G5AraNJfsYmE30f0Fq0VMGlLXpSQdiP7jZyZ7QwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM62y+puv+NNudvjOZlilsr3qn95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzk3ZGUyMTMtNGYwNy0z Mjk4LTljZWUtM2EyMTZmY2ZkMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHODTzMRJFlFlsgJE89REofVkDnFaS2au4Gck37E0rkZRCklq0d6mt3P RsOP8XzFL2qWcUtSynPC0B2BY+kGBnNPNKW0wrAkPGYwmS/ET0Q+DYeoFsNTPeLI +EYMGUP2yoQQ+L85PkRgNmmzVpZljV0eMvpJUStzTxeYlN3vvQ7zXRCtliXdZCHJ jPRzLk0qOqgzOqCDFNpoDZO2sGOVOaSc8/Dh2nT717HtwDM8utEHqdX4ZWRBxlnG mBPs8w+i7ekO2+30D+M8202zKmnDkRo+7nf2C0mtdrza1I9w38Yk9awrwjKlZxys ItC0iFsPgsxH27WdTZgvt6FjqDgXxLA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:40 2025 by rpki-client