$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/63b641e1-cbcd-38a0-8522-a2fac45100f3.roa File: 63b641e1-cbcd-38a0-8522-a2fac45100f3.roa (raw, json) Hash identifier: STAj0WrmHNeErBWzl7AYjMOYhWwioU5kLzcMXPMNyOE= Subject key identifier: 82:8E:CB:1A:FE:93:22:60:9F:BD:2A:F4:06:00:A3:9F:A6:68:83:55 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CEF7C9618DF54D911BB40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/63b641e1-cbcd-38a0-8522-a2fac45100f3.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 136.226.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:ef:7c:96:18:df:54:d9:11:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=dc694356-ed29-427c-bb45-91cc3a074fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:ad:3d:5a:c6:28:2d:10:46:9c:7e:b5:6d: 92:60:92:e9:b8:29:c2:fb:9a:d9:ed:f9:2f:d8:43: af:2d:62:83:3d:0d:d8:4b:97:1f:b1:f5:ac:1a:58: a9:e0:df:98:2d:87:32:08:c1:92:3f:76:69:c9:70: c6:5d:05:02:d8:f8:8c:43:68:a1:72:6d:dc:43:dc: 46:03:22:be:80:d2:c4:d8:3a:9b:37:6d:94:e2:71: b2:3c:11:eb:c1:70:3e:46:26:b8:60:9d:c0:22:12: d8:da:66:92:e9:c4:a6:99:fa:a4:c3:aa:37:01:6a: 0f:aa:4d:cc:9b:90:34:f8:cf:56:22:26:6f:e5:62: c9:57:bd:a2:5d:31:78:1e:06:10:19:4f:ed:26:ef: a0:38:f8:88:b1:a6:1a:b2:17:bd:8a:60:92:c1:e1: 16:61:48:a3:0a:f9:f9:c0:6c:ab:c6:78:7f:7c:90: 62:eb:85:9a:aa:ed:7c:5b:f5:c7:d2:96:90:c2:b3: 6b:9b:41:31:75:7f:91:6c:99:c3:80:35:32:c9:c4: 65:f6:84:9d:35:22:5a:8a:19:39:aa:f3:6c:8d:e4: 36:19:79:39:2b:5d:9a:1c:d3:62:d8:6d:f7:7a:56: c4:2f:a3:d6:32:ea:99:68:c9:2f:8d:5f:6d:9a:51: 76:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8E:CB:1A:FE:93:22:60:9F:BD:2A:F4:06:00:A3:9F:A6:68:83:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/63b641e1-cbcd-38a0-8522-a2fac45100f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:44:ad:ea:98:cf:33:bf:62:d5:f5:61:c3:a2:d2:ea:85:a9: 4f:ff:7d:24:18:15:1f:e5:0e:dd:5c:0d:b8:16:d4:69:ae:be: 6d:51:ce:4d:8d:ac:e0:32:45:69:8e:df:d0:1f:00:9b:dd:1d: 8f:16:40:7b:dc:af:b2:ac:57:27:06:16:b3:3b:86:63:8c:fd: d6:ef:0f:39:17:01:48:39:09:0b:14:7c:55:57:0c:ed:12:f3: a8:c8:62:8a:51:93:c3:a2:5f:bd:52:f1:89:6d:d9:99:f1:f0: 26:e8:8e:c2:a7:ec:7b:bd:c9:99:04:87:cc:c2:10:7f:e0:fc: 47:c8:9a:d6:cc:c8:9b:cc:87:51:c4:80:2c:9a:24:b3:7b:2c: 8f:e1:68:33:12:c3:5e:dc:4d:a3:66:03:af:fc:b0:5c:17:c3: b1:4b:e1:18:0c:0f:2a:9d:65:26:74:9a:7a:20:ba:75:dd:c7: c1:99:ca:ab:f0:9b:db:1e:23:1f:9a:71:81:c5:64:84:b7:49: 19:a2:6e:c7:ea:f3:e0:3e:83:ed:9f:e6:07:a4:e0:9a:97:71: 59:f9:d5:ca:60:2c:76:80:96:73:34:17:75:6a:bc:07:ce:55: c3:25:90:5d:c2:76:ce:20:f0:2f:f0:2a:49:6d:3b:59:4f:1b: 15:6c:66:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPO98lhjfVNkRu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZGM2OTQzNTYtZWQyOS00MjdjLWJiNDUtOTFjYzNhMDc0ZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZetPVrGKC0QRpx+tW2SYJLpuCnC+5rZ7fkv 2EOvLWKDPQ3YS5cfsfWsGlip4N+YLYcyCMGSP3ZpyXDGXQUC2PiMQ2ihcm3cQ9xG AyK+gNLE2DqbN22U4nGyPBHrwXA+Ria4YJ3AIhLY2maS6cSmmfqkw6o3AWoPqk3M m5A0+M9WIiZv5WLJV72iXTF4HgYQGU/tJu+gOPiIsaYashe9imCSweEWYUijCvn5 wGyrxnh/fJBi64Waqu18W/XH0paQwrNrm0ExdX+RbJnDgDUyycRl9oSdNSJaihk5 qvNsjeQ2GXk5K12aHNNi2G33elbEL6PWMuqZaMkvjV9tmlF2rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKOyxr+kyJgn70q9AYAo5+maINVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjNiNjQxZTEtY2JjZC0z OGEwLTg1MjItYTJmYWM0NTEwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOKfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtEreqYzzO/YtX1YcOi0uqFqU//fSQYFR/lDt1cDbgW1Gmuvm1Rzk2N rOAyRWmO39AfAJvdHY8WQHvcr7KsVycGFrM7hmOM/dbvDzkXAUg5CQsUfFVXDO0S 86jIYopRk8OiX71S8Ylt2Znx8CbojsKn7Hu9yZkEh8zCEH/g/EfImtbMyJvMh1HE gCyaJLN7LI/haDMSw17cTaNmA6/8sFwXw7FL4RgMDyqdZSZ0mnogunXdx8GZyqvw m9seIx+acYHFZIS3SRmibsfq8+A+g+2f5gek4JqXcVn51cpgLHaAlnM0F3VqvAfO VcMlkF3Cds4g8C/wKkltO1lPGxVsZkc= -----END CERTIFICATE-----Generated at Thu Oct 23 08:25:40 2025 by rpki-client