$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa File: 17022886-1432-374e-99e8-7da57cfb3a83.roa (raw, json) Hash identifier: MAaalMhE2PrxDm9W5okFEKjaCse/7ZguMvjBI6o5Yj0= Subject key identifier: A4:56:41:A8:50:DA:96:4A:C4:8A:98:13:8D:E4:A7:1F:27:D2:0A:AD Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F376119A4BEC41E42508600 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:61:19:a4:be:c4:1e:42:50:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=9e697ebe-e1e1-4a08-9ed0-63965d8a4948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0e:24:a7:47:59:20:d8:5c:dc:d3:9e:f6:6d: 10:87:56:4f:9f:53:48:41:e8:d4:c6:88:68:49:59: 2a:34:64:6d:81:af:32:4b:7e:be:e7:34:d5:27:60: b4:0f:4b:66:84:68:20:1e:76:66:54:f7:e2:16:30: f8:34:ac:9d:97:4e:06:8a:ab:3b:7f:3a:bc:17:16: 4d:26:d0:68:e0:24:e5:c0:a9:d8:71:f0:a7:63:02: 84:a3:a0:d4:40:f9:04:c6:74:67:ab:d1:29:8f:1f: 40:10:e6:4c:0b:05:16:a9:12:53:6c:37:83:d3:0a: 97:eb:bf:42:48:62:15:70:3f:00:3d:a1:15:c9:5c: f7:f2:cb:8c:48:99:0d:54:55:5c:c3:8a:cf:cf:b2: 36:f5:a2:23:2f:fe:07:f8:f6:ae:56:a4:9e:4d:e1: a9:b8:01:d0:40:96:5e:1f:24:c3:b4:87:70:df:88: 82:bb:c1:87:77:96:ab:4c:96:9a:c8:53:f5:49:2e: fa:96:f2:17:bd:e2:0f:e7:68:a3:6e:76:54:c2:10: a5:fa:fc:d4:b0:c3:b8:e6:81:a8:b9:d6:69:37:76: c2:6b:84:26:6b:39:3b:bd:6e:d6:4b:5f:41:5c:7b: 4b:f6:c4:49:be:71:90:07:cf:c1:4b:7e:0c:c3:0c: 40:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:56:41:A8:50:DA:96:4A:C4:8A:98:13:8D:E4:A7:1F:27:D2:0A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17022886-1432-374e-99e8-7da57cfb3a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d1:13:df:e5:8e:0f:97:73:09:b3:70:da:a0:4b:11:ab:65: c8:68:40:45:62:da:d9:fb:3e:79:93:b2:1d:88:d6:2d:93:5f: fd:8e:2d:cb:56:ae:82:39:9e:4f:b5:00:25:e5:b2:09:18:0e: a5:d5:67:29:7f:98:8e:ad:ab:4e:5a:02:c8:11:e5:3f:dd:a2: ad:78:0a:94:9a:ea:51:c2:46:cb:c2:d8:11:b8:7a:13:d3:c3: 8b:39:40:72:34:3d:89:4a:10:a7:1b:48:a3:25:6f:ff:66:3f: 03:ce:1c:6f:1f:96:5f:f8:30:76:b2:c3:83:2b:e0:fc:e4:ff: 7d:48:cd:34:98:3e:f2:4e:4c:37:33:f1:80:94:9d:5c:76:ab: ba:a2:75:82:0f:1c:a4:42:10:2f:7b:95:43:b2:f1:6f:35:9d: a7:9f:de:ea:a0:85:67:c4:97:b2:72:e4:70:f8:96:17:92:1c: ec:78:92:08:6a:79:d6:cb:40:ce:b1:83:59:d6:f6:19:9f:37: 5e:f0:67:6d:4f:88:95:6e:97:24:44:3f:06:7c:ab:17:a2:24: 53:d4:24:b6:f2:26:4b:9a:54:08:b1:f7:75:73:26:90:02:76: 9b:f3:4b:a3:99:f8:c3:f8:79:45:08:af:f2:6c:f9:9c:58:9e: f3:85:75:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2EZpL7EHkJQhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OWU2OTdlYmUtZTFlMS00YTA4LTllZDAtNjM5NjVkOGE0OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw4kp0dZINhc3NOe9m0Qh1ZPn1NIQejUxoho SVkqNGRtga8yS36+5zTVJ2C0D0tmhGggHnZmVPfiFjD4NKydl04Giqs7fzq8FxZN JtBo4CTlwKnYcfCnYwKEo6DUQPkExnRnq9Epjx9AEOZMCwUWqRJTbDeD0wqX679C SGIVcD8APaEVyVz38suMSJkNVFVcw4rPz7I29aIjL/4H+PauVqSeTeGpuAHQQJZe HyTDtIdw34iCu8GHd5arTJaayFP1SS76lvIXveIP52ijbnZUwhCl+vzUsMO45oGo udZpN3bCa4Qmazk7vW7WS19BXHtL9sRJvnGQB8/BS34MwwxAqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRWQahQ2pZKxIqYE43kpx8n0gqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMTcwMjI4ODYtMTQzMi0z NzRlLTk5ZTgtN2RhNTdjZmIzYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnRE9/ljg+XcwmzcNqgSxGrZchoQEVi2tn7PnmTsh2I1i2TX/2OLctW roI5nk+1ACXlsgkYDqXVZyl/mI6tq05aAsgR5T/doq14CpSa6lHCRsvC2BG4ehPT w4s5QHI0PYlKEKcbSKMlb/9mPwPOHG8fll/4MHayw4Mr4Pzk/31IzTSYPvJOTDcz 8YCUnVx2q7qidYIPHKRCEC97lUOy8W81naef3uqghWfEl7Jy5HD4lheSHOx4kghq edbLQM6xg1nW9hmfN17wZ21PiJVulyREPwZ8qxeiJFPUJLbyJkuaVAix93VzJpAC dpvzS6OZ+MP4eUUIr/Js+ZxYnvOFdUI= -----END CERTIFICATE-----Generated at Tue Oct 21 11:40:39 2025 by rpki-client