$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/03097b4b-171e-373c-95b7-f17a8cbaed08.roa File: 03097b4b-171e-373c-95b7-f17a8cbaed08.roa (raw, json) Hash identifier: lGSOCmW6UVnWJY0YOrHRky1ejMqim1EEzrHeFYVsck8= Subject key identifier: D1:19:C7:79:21:93:34:D8:78:A3:11:6C:C3:3E:1D:3E:42:A8:3E:51 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584BA39D1A8DFEB86911EE734180 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/03097b4b-171e-373c-95b7-f17a8cbaed08.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14340 IP address blocks: 136.147.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1a:8d:fe:b8:69:11:ee:73:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=ee5b9b87-7674-4db4-b5ee-047e88ea46e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:7d:8a:3e:09:88:62:7e:4e:bc:ed:21:d1:01: fc:22:a3:fc:50:78:e9:88:a6:cd:91:17:d7:4e:f7: c3:ec:b9:91:66:3b:62:a3:73:e3:bd:c0:9c:02:1d: 7c:85:c3:2a:31:01:33:0b:9d:c3:d3:26:65:29:b1: 9d:2f:0b:e9:e8:98:bb:f8:9a:ba:94:b5:cf:45:cb: ef:99:55:e3:26:4e:63:e2:24:13:80:55:ba:50:c6: 98:27:49:1c:e2:91:2d:ed:e6:02:ad:63:28:fc:ec: c3:c3:6e:f2:3a:fb:17:d6:ec:0a:b3:98:47:19:b2: 14:87:57:43:e9:80:db:e3:3d:39:95:0e:07:46:c5: 7e:fa:95:93:72:6e:2e:44:72:3d:ce:00:1b:0f:91: 0a:49:f1:1c:78:95:7b:e2:24:84:48:a0:cd:5f:61: 1b:07:6f:4f:50:2d:2d:3d:b9:cd:67:d5:e7:ac:84: b9:b2:19:16:d3:43:c3:0b:ae:29:5e:60:7e:1d:15: 8c:70:3b:d4:91:9e:fb:25:06:3d:a0:a2:e7:ef:00: 0f:6a:81:1f:d8:55:52:9a:8e:74:88:af:c8:7b:b4: c6:c2:80:88:42:62:a8:34:d5:9e:3b:e2:f3:56:aa: 55:1d:94:86:7c:5f:5d:22:36:d7:40:38:59:74:91: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:19:C7:79:21:93:34:D8:78:A3:11:6C:C3:3E:1D:3E:42:A8:3E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/03097b4b-171e-373c-95b7-f17a8cbaed08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:58:6d:8b:c4:13:9d:26:62:a5:22:d5:2f:99:5e:f3:cd:33: 7e:32:02:12:20:4c:10:23:d1:8e:82:da:53:f0:78:ff:ae:fe: e7:13:c9:90:11:63:58:07:46:a4:a4:bf:d5:99:7a:f7:29:75: 68:ba:d0:46:7e:57:86:79:aa:ee:4e:aa:fd:ce:af:51:b9:54: a0:40:57:b0:c6:f5:73:fe:87:e1:ad:03:68:16:28:15:ec:0c: 1b:2d:bd:cf:42:05:09:25:06:f7:14:08:e0:11:94:dc:f7:71: 76:3b:41:a8:58:9c:4f:c1:6b:6e:67:b4:97:c8:7c:72:2e:2e: b4:0a:ff:23:79:9e:87:c9:02:b9:32:66:2f:d8:15:eb:63:03: 0c:b9:00:c2:b0:0b:42:f7:a8:b5:88:46:12:a7:da:d5:25:fd: 8b:8c:fa:4a:70:f0:db:e1:34:aa:db:b3:22:70:c5:ef:b9:a2: 1b:17:73:6c:b9:04:f2:50:9f:3f:98:b4:e4:bf:f6:d2:b5:db: 4a:4c:c0:53:8d:3d:de:2b:6e:ec:1e:72:ad:e7:06:5a:ba:84: 37:98:6e:a3:83:31:c7:fa:c4:fd:9c:2c:96:7d:8f:b3:11:0d: 97:78:da:eb:c4:dd:37:73:f3:d5:b4:83:52:47:69:7f:a9:b2: f8:8e:42:ed -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEujnRqN/rhpEe5zQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWU1YjliODctNzY3NC00ZGI0LWI1ZWUtMDQ3ZTg4ZWE0NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+32KPgmIYn5OvO0h0QH8IqP8UHjpiKbNkRfX TvfD7LmRZjtio3PjvcCcAh18hcMqMQEzC53D0yZlKbGdLwvp6Ji7+Jq6lLXPRcvv mVXjJk5j4iQTgFW6UMaYJ0kc4pEt7eYCrWMo/OzDw27yOvsX1uwKs5hHGbIUh1dD 6YDb4z05lQ4HRsV++pWTcm4uRHI9zgAbD5EKSfEceJV74iSESKDNX2EbB29PUC0t PbnNZ9XnrIS5shkW00PDC64pXmB+HRWMcDvUkZ77JQY9oKLn7wAPaoEf2FVSmo50 iK/Ie7TGwoCIQmKoNNWeO+LzVqpVHZSGfF9dIjbXQDhZdJEH8QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNEZx3khkzTYeKMRbMM+HT5CqD5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMDMwOTdiNGItMTcxZS0z NzNjLTk1YjctZjE3YThjYmFlZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiJMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAR1hti8QTnSZipSLVL5le880zfjICEiBMECPRjoLaU/B4/67+5xPJkBFj WAdGpKS/1Zl69yl1aLrQRn5Xhnmq7k6q/c6vUblUoEBXsMb1c/6H4a0DaBYoFewM Gy29z0IFCSUG9xQI4BGU3PdxdjtBqFicT8Frbme0l8h8ci4utAr/I3meh8kCuTJm L9gV62MDDLkAwrALQveotYhGEqfa1SX9i4z6SnDw2+E0qtuzInDF77miGxdzbLkE 8lCfP5i05L/20rXbSkzAU4093itu7B5yrecGWrqEN5huo4Mxx/rE/Zwsln2PsxEN l3ja68TdN3Pz1bSDUkdpf6my+I5C7Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:29:35 2025 by rpki-client