$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c85f8a2a-7356-393c-8636-675c190b1567.roa File: c85f8a2a-7356-393c-8636-675c190b1567.roa (raw, json) Hash identifier: BTLEOudjeW3OV2bSXsMJu+NpdG5wL4pCzo6CNJ5l0aw= Subject key identifier: 74:46:7F:CE:CB:C1:08:54:C1:85:E4:A2:E6:00:CC:52:27:7C:94:12 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B4081A4DEAA571A499EB5FFC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c85f8a2a-7356-393c-8636-675c190b1567.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 136.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a4:de:aa:57:1a:49:9e:b5:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=93e82a3d-aa80-499c-930a-21f02c778f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:14:c9:23:e2:37:5c:f4:4b:9f:00:ef:8b: 6f:51:53:16:e6:eb:d7:c4:2e:f6:aa:e8:0e:f2:bd: 74:e2:62:ff:f2:61:34:87:db:6e:4a:f4:a9:65:f3: b2:94:15:8f:e3:ba:5f:eb:25:4b:14:fe:c8:f7:6d: 51:f6:8f:f3:24:7b:2e:99:80:c8:6c:e6:bb:b1:15: b7:0a:59:97:a6:97:d1:ef:b4:54:4f:97:b1:20:0e: 41:e1:73:e6:5d:37:61:0e:fa:69:46:74:5a:9e:c1: 4f:b0:e4:12:97:f3:f8:67:0e:00:30:74:82:c9:d5: d7:b2:a6:bb:3a:4e:79:24:9b:77:12:fb:19:13:7f: 32:66:61:70:c6:49:7d:35:fd:da:3b:7f:93:ad:9a: d7:42:d9:9a:16:15:6a:1b:b4:33:49:06:ee:2c:f2: 7f:9e:99:b2:27:63:0a:1b:db:62:7b:6c:3c:12:c5: 68:fb:f1:8f:a5:25:c5:d1:8e:5d:4e:72:bd:04:c1: 35:9b:64:eb:d8:d0:54:2a:c5:57:d6:7d:1e:22:4b: 45:49:d7:6d:43:1e:c8:f3:2c:57:b3:93:09:7e:c7: a1:dd:88:d9:ef:fa:93:04:5d:73:5a:52:a5:5f:8c: d6:fd:5a:34:d9:43:d6:5f:05:4c:94:d9:77:53:f9: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:7F:CE:CB:C1:08:54:C1:85:E4:A2:E6:00:CC:52:27:7C:94:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c85f8a2a-7356-393c-8636-675c190b1567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ce:f2:d8:96:6d:1f:6b:d8:5f:d5:87:79:50:8d:64:35:99: 97:1e:21:a1:6c:82:0e:6b:cd:e6:bb:b2:31:ab:b6:b4:41:02: 55:35:87:5d:2c:ed:b7:fb:58:34:46:63:11:24:16:04:99:fd: 20:34:27:a2:f1:3b:95:db:8f:c5:f5:bc:4e:2d:6d:7a:af:c0: c8:55:2b:c5:65:c6:8d:c8:e7:bd:f8:e3:68:7e:f7:98:e5:c4: 17:74:85:b1:df:08:45:c8:8a:f5:2e:bc:6f:63:f5:05:89:04: 97:26:20:15:0c:ad:a8:00:32:ae:61:b8:e0:f2:bd:03:bd:db: 2f:59:dc:65:ea:f0:d2:7b:71:11:d2:ed:dc:34:db:f3:c3:c2: 03:09:bc:ca:53:1f:ba:ec:3f:f6:46:6e:1f:78:ae:85:a4:3c: fe:bc:94:d3:ab:a5:00:6e:95:f4:07:92:d6:4e:e5:a8:91:18: 35:23:d9:56:d5:e7:5f:fd:e2:9d:ca:7e:55:85:60:c5:dc:30: 63:0b:13:09:52:60:da:2b:cd:51:d4:4b:4e:7d:42:be:b8:8b: 6e:5c:09:32:29:6f:bb:99:47:47:c0:1c:1a:84:0c:02:5e:88: 24:f8:24:e6:8d:5d:5c:79:27:e0:36:4d:b5:07:74:8b:fb:16: f4:d8:d2:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaTeqlcaSZ61/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OTNlODJhM2QtYWE4MC00OTljLTkzMGEtMjFmMDJjNzc4ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD4UySPiN1z0S58A74tvUVMW5uvXxC72qugO 8r104mL/8mE0h9tuSvSpZfOylBWP47pf6yVLFP7I921R9o/zJHsumYDIbOa7sRW3 ClmXppfR77RUT5exIA5B4XPmXTdhDvppRnRansFPsOQSl/P4Zw4AMHSCydXXsqa7 Ok55JJt3EvsZE38yZmFwxkl9Nf3aO3+TrZrXQtmaFhVqG7QzSQbuLPJ/npmyJ2MK G9tie2w8EsVo+/GPpSXF0Y5dTnK9BME1m2Tr2NBUKsVX1n0eIktFSddtQx7I8yxX s5MJfseh3YjZ7/qTBF1zWlKlX4zW/Vo02UPWXwVMlNl3U/mXuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRGf87LwQhUwYXkouYAzFInfJQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzg1ZjhhMmEtNzM1Ni0z OTNjLTg2MzYtNjc1YzE5MGIxNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDO8tiWbR9r2F/Vh3lQjWQ1mZceIaFsgg5rzea7sjGrtrRBAlU1h10s 7bf7WDRGYxEkFgSZ/SA0J6LxO5Xbj8X1vE4tbXqvwMhVK8Vlxo3I573442h+95jl xBd0hbHfCEXIivUuvG9j9QWJBJcmIBUMragAMq5huODyvQO92y9Z3GXq8NJ7cRHS 7dw02/PDwgMJvMpTH7rsP/ZGbh94roWkPP68lNOrpQBulfQHktZO5aiRGDUj2VbV 51/94p3KflWFYMXcMGMLEwlSYNorzVHUS059Qr64i25cCTIpb7uZR0fAHBqEDAJe iCT4JOaNXVx5J+A2TbUHdIv7FvTY0lE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:04:36 2025 by rpki-client