$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ca7f2096-e280-3d81-b7a8-d7558d70343b.roa File: ca7f2096-e280-3d81-b7a8-d7558d70343b.roa (raw, json) Hash identifier: 3zet11ggUMbyHK546dLQ32ozOFfboXqWjSN2mJkK4+0= Subject key identifier: CF:22:8B:2D:EC:91:1C:78:8A:C2:6B:59:FB:64:08:7E:5F:18:1E:BC Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF01A50B3959C39583F10 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ca7f2096-e280-3d81-b7a8-d7558d70343b.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 136.226.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f0:1a:50:b3:95:9c:39:58:3f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=2ecaeca5-4cde-47a8-86b9-50e4b281bfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:ed:da:fb:43:98:2c:b6:ce:c3:b8:f2:fd: 2d:c5:a6:c5:ab:1e:2a:73:6f:ba:69:43:15:97:7b: 9c:97:0d:c0:28:ed:8f:d7:de:32:af:86:f2:0e:ec: 00:3c:ff:51:4a:6a:d8:62:d8:31:f7:dc:5e:1d:ec: ee:81:75:8b:0c:48:dc:02:ac:57:91:f6:41:7c:b7: 45:ca:83:84:c6:77:66:db:fd:6a:7e:a0:76:7b:cf: a2:30:0f:2c:70:5b:76:ce:5f:f3:98:38:12:55:8f: 53:00:c6:71:b7:f2:12:6b:cb:86:e9:b8:9c:d4:4e: 14:04:2c:20:ea:54:ec:94:69:79:f3:a9:63:b9:ca: 0b:4d:8c:35:12:23:76:6a:f2:04:66:ab:b0:52:3e: dd:af:10:6f:5a:32:d7:a5:24:e4:c2:1e:82:9c:5c: 84:81:d6:c4:41:07:39:d8:b5:2c:5a:75:9b:a9:6f: 84:69:fd:ef:9b:f4:03:23:50:e9:72:b5:43:49:75: c9:d1:af:24:70:d2:57:5c:da:a4:31:86:f1:72:93: eb:d6:0d:c6:32:76:0f:56:1b:fd:49:ff:bb:d4:ba: 50:70:c7:4e:86:cd:cc:43:bc:86:e5:a6:c9:12:7e: 95:3b:28:95:5c:7f:0d:ab:d8:de:61:ef:97:2e:ef: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:8B:2D:EC:91:1C:78:8A:C2:6B:59:FB:64:08:7E:5F:18:1E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ca7f2096-e280-3d81-b7a8-d7558d70343b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a5:bb:ec:da:90:1a:4e:b4:8d:61:b2:0f:31:c1:6c:6f:c1: c5:57:21:5e:b2:e2:2c:9e:29:55:b6:30:82:f3:1b:62:1d:3c: 57:ed:10:17:49:61:58:9c:11:b2:eb:6f:fc:6e:54:c8:24:4c: 3d:00:e4:70:ab:e6:d2:ec:80:d0:21:23:ef:e9:8e:aa:02:9e: b2:7d:00:36:f7:ca:fd:b1:e2:d6:3c:49:14:4f:42:be:cb:0a: 0e:0a:a6:6a:1a:e4:bd:fa:ad:95:95:22:66:2a:2d:dd:e4:11: 9f:3c:fb:af:76:3f:90:6f:b2:a3:84:3a:e6:2d:ac:10:f3:26: 08:67:26:1e:c0:ab:69:ca:01:a1:ee:21:30:19:3a:60:5e:fb: 44:0c:4f:22:41:2e:b0:7d:a9:4e:24:1d:23:d1:d4:25:01:43: 07:35:69:b0:05:e6:4f:b8:79:7c:e4:39:9b:5a:d3:8f:e5:01: 23:90:43:a4:fa:56:94:0d:c3:b4:b2:de:a5:dd:1b:b6:a2:54: 6a:d5:c3:1f:e9:d3:b7:9c:ab:f8:ee:ee:20:af:30:0e:24:a3: 6d:1f:2f:22:2a:ef:9d:16:fc:2c:7c:a0:05:43:1d:eb:b2:13: 19:b5:2e:e0:5d:6f:37:35:a0:92:59:4e:e7:3e:ff:51:be:75: 8d:c7:1a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPAaULOVnDlYPxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MmVjYWVjYTUtNGNkZS00N2E4LTg2YjktNTBlNGIyODFiZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Dt2vtDmCy2zsO48v0txabFqx4qc2+6aUMV l3uclw3AKO2P194yr4byDuwAPP9RSmrYYtgx99xeHezugXWLDEjcAqxXkfZBfLdF yoOExndm2/1qfqB2e8+iMA8scFt2zl/zmDgSVY9TAMZxt/ISa8uG6bic1E4UBCwg 6lTslGl586ljucoLTYw1EiN2avIEZquwUj7drxBvWjLXpSTkwh6CnFyEgdbEQQc5 2LUsWnWbqW+Eaf3vm/QDI1DpcrVDSXXJ0a8kcNJXXNqkMYbxcpPr1g3GMnYPVhv9 Sf+71LpQcMdOhs3MQ7yG5abJEn6VOyiVXH8Nq9jeYe+XLu9fVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8iiy3skRx4isJrWftkCH5fGB68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2E3ZjIwOTYtZTI4MC0z ZDgxLWI3YTgtZDc1NThkNzAzNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2lu+zakBpOtI1hsg8xwWxvwcVXIV6y4iyeKVW2MILzG2IdPFftEBdJ YVicEbLrb/xuVMgkTD0A5HCr5tLsgNAhI+/pjqoCnrJ9ADb3yv2x4tY8SRRPQr7L Cg4Kpmoa5L36rZWVImYqLd3kEZ88+692P5BvsqOEOuYtrBDzJghnJh7Aq2nKAaHu ITAZOmBe+0QMTyJBLrB9qU4kHSPR1CUBQwc1abAF5k+4eXzkOZta04/lASOQQ6T6 VpQNw7Sy3qXdG7aiVGrVwx/p07ecq/ju7iCvMA4ko20fLyIq750W/Cx8oAVDHeuy Exm1LuBdbzc1oJJZTuc+/1G+dY3HGkQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:54 2025 by rpki-client