$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa File: f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa (raw, json) Hash identifier: ra1QRj9E1EVmIMd9XGgjao0hqhLWgRFS26PAR/GCM0Q= Subject key identifier: DA:80:66:71:D2:44:A3:75:68:62:9D:7E:0A:B9:98:4D:3E:AE:8E:4A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEC9673DFFDBE605C9840 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 136.226.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ec:96:73:df:fd:be:60:5c:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=c3f575f0-e10e-4b79-a3c0-7cd1a3fd5440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:59:ab:ea:50:aa:ac:75:40:df:12:b8:18: 13:c8:ed:51:9b:d2:8f:15:5c:7a:37:ab:4f:a4:84: e8:35:a8:e4:3b:c0:28:15:5a:f1:4f:56:ff:42:73: 0d:42:bf:5c:41:1a:12:b2:e6:ae:38:85:a5:3b:fa: af:ea:5c:7d:5e:0d:72:11:6a:32:9e:9c:a8:8d:f4: c6:8f:80:02:6a:b4:b4:ee:ca:dd:b1:67:93:1e:5b: 6e:60:8d:37:87:37:3f:2a:9f:e2:19:8a:f2:3d:b5: cd:ca:de:67:fb:08:12:a1:2b:2b:6d:76:58:87:2c: bf:bf:49:28:c9:16:16:24:b1:1a:9c:e9:d2:e9:8c: da:70:93:a1:6a:ef:2a:8a:3b:ef:4a:44:d9:ef:50: 0c:04:fa:64:ff:84:41:aa:a8:23:7c:88:cb:2d:51: 35:e4:81:72:2e:41:c7:d0:54:66:01:0c:6d:c4:cc: 45:6b:a0:4c:bb:09:76:19:83:89:81:9f:98:10:68: e7:16:7c:ab:ed:ab:f4:75:1f:22:fa:e6:f7:e6:39: 50:98:90:c1:93:8e:d6:57:71:e4:b9:71:7b:bd:42: df:04:99:4a:a8:d0:0e:ca:3d:bf:c0:34:a0:10:9e: 33:a7:20:3d:f7:f6:f7:f6:03:27:a0:e6:24:10:0d: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:80:66:71:D2:44:A3:75:68:62:9D:7E:0A:B9:98:4D:3E:AE:8E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9a:a7:02:41:4b:c2:29:d8:a7:39:ba:6a:33:93:19:b3:b4: 89:cb:18:eb:e0:96:84:25:42:03:03:eb:cc:da:e0:a7:ee:64: 21:49:4d:c5:f5:c9:35:8a:3a:35:cf:84:43:f3:3c:a6:ca:26: c5:b6:fc:ad:1a:f1:ef:9f:90:c5:eb:b5:63:1b:03:30:fc:c8: a3:70:48:9f:ce:de:a6:a6:b3:1e:47:6c:59:a9:68:92:ba:4e: 41:c6:cc:0f:2a:49:2f:e8:09:e3:74:d0:8d:3d:a4:ff:4b:e2: af:ac:04:96:c2:d4:9d:5f:24:a4:bd:b7:63:83:9b:18:8e:c2: c3:be:b9:5d:9b:d3:fd:68:1b:07:66:7b:c5:8f:75:0d:5b:36: a7:0d:e0:ba:dd:d9:2f:d1:f1:51:c7:d4:4c:d6:a5:04:76:85: cf:9e:9e:27:96:0b:15:1e:b4:5d:4f:67:b6:0a:20:7b:71:a1: 7d:e3:22:33:0a:26:a3:53:a4:0b:37:e5:1c:39:88:28:38:a8: 65:f1:9e:45:7a:19:94:56:57:ee:48:44:78:d0:eb:d3:50:9a: 30:ec:b6:b0:a6:2f:98:ff:b6:27:c9:2b:a0:83:4e:29:e3:29: 41:4f:49:fb:dc:05:45:da:0b:5a:35:d0:33:79:73:96:98:84: 0b:6f:18:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOyWc9/9vmBcmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YzNmNTc1ZjAtZTEwZS00Yjc5LWEzYzAtN2NkMWEzZmQ1NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaFZq+pQqqx1QN8SuBgTyO1Rm9KPFVx6N6tP pIToNajkO8AoFVrxT1b/QnMNQr9cQRoSsuauOIWlO/qv6lx9Xg1yEWoynpyojfTG j4ACarS07srdsWeTHltuYI03hzc/Kp/iGYryPbXNyt5n+wgSoSsrbXZYhyy/v0ko yRYWJLEanOnS6YzacJOhau8qijvvSkTZ71AMBPpk/4RBqqgjfIjLLVE15IFyLkHH 0FRmAQxtxMxFa6BMuwl2GYOJgZ+YEGjnFnyr7av0dR8i+ub35jlQmJDBk47WV3Hk uXF7vULfBJlKqNAOyj2/wDSgEJ4zpyA99/b39gMnoOYkEA3ZzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqAZnHSRKN1aGKdfgq5mE0+ro5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjE2NDExYWEtOTE5NS0z MWUyLThiMzItZmZiNGQ5YzMyM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyapwJBS8Ip2Kc5umozkxmztInLGOvgloQlQgMD68za4KfuZCFJTcX1 yTWKOjXPhEPzPKbKJsW2/K0a8e+fkMXrtWMbAzD8yKNwSJ/O3qamsx5HbFmpaJK6 TkHGzA8qSS/oCeN00I09pP9L4q+sBJbC1J1fJKS9t2ODmxiOwsO+uV2b0/1oGwdm e8WPdQ1bNqcN4Lrd2S/R8VHH1EzWpQR2hc+enieWCxUetF1PZ7YKIHtxoX3jIjMK JqNTpAs35Rw5iCg4qGXxnkV6GZRWV+5IRHjQ69NQmjDstrCmL5j/tifJK6CDTinj KUFPSfvcBUXaC1o10DN5c5aYhAtvGIQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:25 2025 by rpki-client