$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/958921fc-46d0-3d9c-a3e5-f58f7f8a5d3f.roa File: 958921fc-46d0-3d9c-a3e5-f58f7f8a5d3f.roa (raw, json) Hash identifier: 3VBmuWv5WrHVx/JesFUGDmQX1YzAivuriMl6fj1yUeQ= Subject key identifier: 5E:F0:C1:E1:F1:32:5D:F5:F7:BB:0C:7D:C9:76:76:3C:A7:D1:04:08 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF162DACD7DC550D3C800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/958921fc-46d0-3d9c-a3e5-f58f7f8a5d3f.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 53813 IP address blocks: 136.226.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f1:62:da:cd:7d:c5:50:d3:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=1eb56ee9-be3d-4140-a6c0-76dabf962fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:0b:55:b8:b2:4e:fe:24:21:9d:96:b8:38: 60:a8:4f:e1:76:a9:9c:c3:5c:ae:b6:2e:a7:ce:d4: 64:bc:0d:c2:ba:6c:58:00:81:3e:e6:d8:8e:18:28: a6:9d:45:6a:28:da:f0:f1:fb:13:80:ac:c9:54:1e: 9d:dd:92:5a:9d:45:dd:c4:6d:ea:73:a8:00:36:fb: a9:23:44:8a:8a:e2:0d:cf:47:32:f3:f2:ce:5b:e2: 70:64:98:2e:74:ca:6e:e0:86:d5:aa:7f:f8:1c:48: ff:6d:19:56:44:d3:93:9a:f3:90:09:f2:de:5a:7d: 8d:a0:23:d3:14:09:33:eb:6c:e6:94:b0:c0:d1:59: 6a:38:e3:e3:ab:1c:3e:a4:06:5e:41:9e:13:82:61: 22:a9:0f:31:f7:e7:d3:52:9f:37:aa:f2:e6:65:19: 8b:9f:84:5d:b5:e1:36:dd:db:6a:21:cd:82:78:8f: ef:4f:0e:3b:85:98:bc:5d:ef:20:63:77:bd:f7:e4: 23:20:fd:9b:96:e8:7e:3c:99:9f:bb:41:ae:21:36: 74:fa:53:ca:8d:f3:ee:69:ed:34:06:19:2c:22:86: 79:92:f9:49:93:60:4a:d4:d5:5b:c3:6a:7c:83:0a: 16:1e:bb:fc:60:38:06:fe:12:7b:4c:29:32:d9:8b: 88:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F0:C1:E1:F1:32:5D:F5:F7:BB:0C:7D:C9:76:76:3C:A7:D1:04:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/958921fc-46d0-3d9c-a3e5-f58f7f8a5d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:91:91:c5:33:33:7a:06:d4:37:c7:aa:6d:e6:ea:0d:bc:e3: 1d:9f:f5:b9:d8:eb:c5:08:56:82:62:e9:a6:84:18:41:a9:cf: 6c:22:29:f2:16:52:56:ff:29:4f:6f:97:c1:8b:4a:33:dc:ed: c8:94:2c:b2:ca:35:74:14:e4:6b:f2:ac:dc:02:3e:d3:e0:6e: 9b:2c:20:5f:b1:53:1b:71:89:9b:dc:ab:39:a0:6a:a3:50:a6: 46:9f:bd:9e:ce:94:ba:5c:61:bd:42:fe:e4:f5:65:64:bb:d5: e2:85:1f:57:d4:f4:f6:e5:07:5b:c1:76:3a:ed:e9:c0:35:87: 09:85:1c:4c:94:b9:91:0b:2b:cf:d2:78:79:20:82:8d:4b:e6: 42:3f:c8:7d:c5:04:9b:f8:70:ec:81:b8:23:0c:07:cf:5d:ca: e3:c8:c5:94:f8:a7:6d:e3:ec:3c:48:d6:90:c8:ee:76:fd:95: 92:d0:ed:89:f4:56:b9:e7:3c:7e:29:88:30:84:a4:ff:79:3a: ea:82:87:81:65:f9:42:9c:13:41:4e:37:39:f9:4b:78:de:4c: 85:d0:7f:33:6d:22:00:7f:f9:c8:36:95:ec:ce:ce:b6:28:38: 20:46:9d:13:a1:c5:29:9f:54:08:bc:77:3e:ea:15:c9:94:a2: 5d:a9:05:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPFi2s19xVDTyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MWViNTZlZTktYmUzZC00MTQwLWE2YzAtNzZkYWJmOTYyZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8oLVbiyTv4kIZ2WuDhgqE/hdqmcw1yuti6n ztRkvA3CumxYAIE+5tiOGCimnUVqKNrw8fsTgKzJVB6d3ZJanUXdxG3qc6gANvup I0SKiuINz0cy8/LOW+JwZJgudMpu4IbVqn/4HEj/bRlWRNOTmvOQCfLeWn2NoCPT FAkz62zmlLDA0VlqOOPjqxw+pAZeQZ4TgmEiqQ8x9+fTUp83qvLmZRmLn4RdteE2 3dtqIc2CeI/vTw47hZi8Xe8gY3e99+QjIP2bluh+PJmfu0GuITZ0+lPKjfPuae00 BhksIoZ5kvlJk2BK1NVbw2p8gwoWHrv8YDgG/hJ7TCky2YuIDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7wweHxMl3197sMfcl2djyn0QQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTU4OTIxZmMtNDZkMC0z ZDljLWEzZTUtZjU4ZjdmOGE1ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuRkcUzM3oG1DfHqm3m6g284x2f9bnY68UIVoJi6aaEGEGpz2wiKfIW Ulb/KU9vl8GLSjPc7ciULLLKNXQU5GvyrNwCPtPgbpssIF+xUxtxiZvcqzmgaqNQ pkafvZ7OlLpcYb1C/uT1ZWS71eKFH1fU9PblB1vBdjrt6cA1hwmFHEyUuZELK8/S eHkggo1L5kI/yH3FBJv4cOyBuCMMB89dyuPIxZT4p23j7DxI1pDI7nb9lZLQ7Yn0 VrnnPH4piDCEpP95OuqCh4Fl+UKcE0FONzn5S3jeTIXQfzNtIgB/+cg2lezOzrYo OCBGnROhxSmfVAi8dz7qFcmUol2pBS4= -----END CERTIFICATE-----Generated at Thu Oct 23 02:14:22 2025 by rpki-client