$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ac2c178d-d305-3196-8322-24867f79e011.roa File: ac2c178d-d305-3196-8322-24867f79e011.roa (raw, json) Hash identifier: FWcW0+jXYlfBi4/KEjJk18qcDpaJaAdxUiTyqZ1AapI= Subject key identifier: B0:B2:E1:73:1E:8C:6F:C2:4C:64:56:22:A7:F5:DB:36:0B:87:C6:1B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B583C80796089D26878391800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ac2c178d-d305-3196-8322-24867f79e011.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 53813 IP address blocks: 136.226.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:80:79:60:89:d2:68:78:39:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=c36b69f8-bb25-4ea2-974a-f88ce50aef85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:bd:5d:7b:8b:21:fd:5d:71:b7:59:62:00: be:c2:07:16:2a:54:99:77:f7:c2:fe:5f:a2:52:9a: 0d:76:d4:7b:49:b1:9d:0e:b1:ae:07:a6:f4:9e:f6: 1d:4f:a2:f3:45:0a:a8:49:75:ea:db:dc:74:7c:c8: f5:d0:54:3c:4d:aa:9a:b1:bd:77:cb:c1:16:db:cb: 64:df:c8:af:d1:dd:6a:0d:6c:2f:1e:a4:ec:db:19: da:bc:70:98:ef:9f:5e:b3:12:20:f1:90:98:65:1e: 18:85:f4:bc:1c:c7:3f:8d:44:71:7a:28:03:45:ef: de:f8:a6:2d:e2:bf:d6:7c:c4:6c:83:8a:2f:5d:8e: b6:32:4a:ba:bd:37:6b:8f:ce:f1:3d:99:9f:0d:e4: d9:ab:5a:70:cb:f6:ce:ac:0e:a1:df:f8:6b:2a:3a: 59:26:d2:e5:7f:66:56:ca:1c:87:65:b8:fd:61:11: 2d:52:0e:3e:14:d7:8a:85:ad:5f:1e:4c:5b:77:31: dc:c9:c0:77:de:d8:4e:6b:2c:30:d3:37:04:9d:ca: 4d:da:6f:9a:c5:20:5b:b2:de:1d:83:1b:cc:51:97: 4e:83:d8:5d:5b:51:70:0f:4c:54:ca:50:a1:2c:75: 52:9f:22:fb:d8:33:04:13:b1:c4:9a:56:cb:07:d4: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B2:E1:73:1E:8C:6F:C2:4C:64:56:22:A7:F5:DB:36:0B:87:C6:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ac2c178d-d305-3196-8322-24867f79e011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d6:8d:c7:63:f9:38:cd:2c:19:4e:ac:d2:b1:23:a6:76:b5: b0:ac:22:05:fd:f2:32:cd:e4:d1:89:f8:2d:25:7d:83:ce:ae: 65:45:7b:71:26:c7:9f:1f:ba:89:0e:49:d6:35:33:36:55:ec: 48:20:bb:29:79:cb:f8:1e:c9:a2:3c:87:60:8a:95:c5:4c:b7: e9:17:7e:ea:38:b6:38:a7:66:d2:92:3b:18:1f:ba:90:31:68: 9c:c4:5b:5e:22:ce:ef:84:e1:ca:75:07:e8:1d:a8:f8:af:b1: bc:51:40:df:23:21:8a:7c:6a:00:93:a1:a1:c8:ca:43:a1:85: 26:c7:b1:ae:15:f3:b1:6d:2a:28:05:ba:9f:73:73:10:32:eb: 30:3d:0e:13:c3:4e:5b:9d:d0:c2:9f:7d:d3:5c:4f:35:35:a8: 83:f2:95:b2:41:20:08:1e:ea:da:8f:ec:9c:44:8e:7a:9c:f0: 6d:c0:ac:5e:aa:c5:32:97:51:24:e1:82:8e:37:18:25:88:2a: e2:09:ac:65:de:09:73:01:f7:71:43:a5:77:a9:c3:97:3d:8c: 13:4b:86:a3:ba:94:fd:5b:54:6d:fc:3c:51:2f:94:d8:eb:29: 82:b6:2b:df:be:20:fc:9c:5d:6d:4d:34:aa:e5:d0:76:da:f5: 54:8c:31:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIB5YInSaHg5GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzM2YjY5ZjgtYmIyNS00ZWEyLTk3NGEtZjg4Y2U1MGFlZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/C9XXuLIf1dcbdZYgC+wgcWKlSZd/fC/l+i UpoNdtR7SbGdDrGuB6b0nvYdT6LzRQqoSXXq29x0fMj10FQ8Taqasb13y8EW28tk 38iv0d1qDWwvHqTs2xnavHCY759esxIg8ZCYZR4YhfS8HMc/jURxeigDRe/e+KYt 4r/WfMRsg4ovXY62Mkq6vTdrj87xPZmfDeTZq1pwy/bOrA6h3/hrKjpZJtLlf2ZW yhyHZbj9YREtUg4+FNeKha1fHkxbdzHcycB33thOayww0zcEncpN2m+axSBbst4d gxvMUZdOg9hdW1FwD0xUylChLHVSnyL72DMEE7HEmlbLB9T1dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCy4XMejG/CTGRWIqf12zYLh8YbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWMyYzE3OGQtZDMwNS0z MTk2LTgzMjItMjQ4NjdmNzllMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDWjcdj+TjNLBlOrNKxI6Z2tbCsIgX98jLN5NGJ+C0lfYPOrmVFe3Em x58fuokOSdY1MzZV7Egguyl5y/geyaI8h2CKlcVMt+kXfuo4tjinZtKSOxgfupAx aJzEW14izu+E4cp1B+gdqPivsbxRQN8jIYp8agCToaHIykOhhSbHsa4V87FtKigF up9zcxAy6zA9DhPDTlud0MKffdNcTzU1qIPylbJBIAge6tqP7JxEjnqc8G3ArF6q xTKXUSThgo43GCWIKuIJrGXeCXMB93FDpXepw5c9jBNLhqO6lP1bVG38PFEvlNjr KYK2K9++IPycXW1NNKrl0Hba9VSMMcU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:46 2025 by rpki-client