$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa File: 2bfa52c4-12bd-3269-86da-c8ff98786228.roa (raw, json) Hash identifier: eMwLaf0DFdsPek5AnN2KPBp4UMvtxHkDvCwQhkG4YIg= Subject key identifier: 86:D5:88:20:10:AD:EC:D6:9F:7F:4F:C7:6D:9C:65:16:9B:F8:57:2F Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F375E96247E2F04977D02C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:5e:96:24:7e:2f:04:97:7d:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=bb7d2a17-45fc-4d9f-b70a-5b01ca332b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:6e:1c:05:59:5e:66:fc:c3:aa:6c:c1:82: 63:50:09:b6:5c:7d:43:ab:39:6d:cc:ee:3a:0d:2e: 95:c6:cb:57:e0:c5:c5:4f:8a:84:f3:25:b5:6f:e8: be:25:50:e8:27:61:e5:8f:3e:d5:4a:86:7a:cb:03: 1d:fa:f7:f3:5f:72:4c:9a:1a:92:af:2b:9b:69:5b: 11:cd:fe:75:bc:85:2f:32:70:7a:f7:3d:a2:0b:3c: 60:d3:e7:64:1a:bf:0a:79:a9:14:24:f4:a9:34:6b: 58:22:af:8f:11:dd:64:80:05:79:9d:37:e4:e7:d0: f2:6a:0d:35:9a:f7:8e:60:9d:58:8e:44:a6:f0:da: 0b:c2:a9:fd:d4:90:80:40:af:e0:0a:30:8a:50:2f: a6:7a:51:74:0a:16:d2:c0:c2:73:06:56:3b:3c:e9: ca:55:45:35:4c:f5:27:04:ca:68:f4:c8:6c:97:83: ba:b0:91:25:57:05:4a:5e:20:a2:9d:a9:c8:a6:ce: e1:98:40:81:87:c3:28:29:7c:d9:07:6e:aa:ad:6e: 5c:18:93:b3:26:1d:46:2d:3a:6f:26:65:da:13:8a: c7:c7:38:9c:c1:d0:38:9b:f6:ce:6d:1d:61:77:21: 33:87:2e:26:23:f1:5e:27:9a:5d:f7:c4:75:fe:d7: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:88:20:10:AD:EC:D6:9F:7F:4F:C7:6D:9C:65:16:9B:F8:57:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2b:13:d8:08:9b:d3:53:d7:b9:f7:33:fd:9f:d9:a4:38:79: 16:06:05:64:b7:9b:6f:62:3c:94:d5:8b:19:8a:4a:25:0b:3d: e9:9e:3d:4c:bf:2a:7a:d9:f1:16:8a:f6:b3:8d:59:37:9a:b2: aa:4c:22:dc:e0:7f:76:45:a6:5b:0f:8c:69:2e:b8:3b:cd:78: 62:30:f8:f9:fd:35:34:e8:97:4f:9b:e0:27:47:46:d1:b9:fb: 56:ba:bd:f7:4d:4e:be:71:98:39:0f:b9:2b:72:ff:93:64:53: 1d:9a:55:ac:61:76:8b:87:0c:e5:22:f7:d1:c5:c1:ad:77:2a: 4a:7b:81:ad:ac:37:7f:c5:4b:3f:b0:36:b3:68:35:20:53:73: aa:a3:37:e4:d4:88:e1:87:4e:bf:a3:5b:83:f1:91:ae:55:25: d4:ad:9d:cb:54:00:a5:2b:60:77:24:9e:8b:ce:49:b2:99:d5: e4:12:36:c8:a7:15:14:f2:db:c3:45:ab:9b:55:18:00:ec:53: 18:49:6b:46:39:1a:87:9d:66:b2:34:61:02:7a:c6:c9:47:9b: fe:ec:75:87:3d:27:11:cc:6f:9f:df:fc:02:a9:2e:c0:5c:5c: 49:1d:fe:88:ef:c2:39:67:a9:16:f7:e6:32:99:c5:24:24:05: ca:67:d1:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN16WJH4vBJd9AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YmI3ZDJhMTctNDVmYy00ZDlmLWI3MGEtNWIwMWNhMzMyYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA329uHAVZXmb8w6pswYJjUAm2XH1DqzltzO46 DS6VxstX4MXFT4qE8yW1b+i+JVDoJ2Hljz7VSoZ6ywMd+vfzX3JMmhqSryubaVsR zf51vIUvMnB69z2iCzxg0+dkGr8KeakUJPSpNGtYIq+PEd1kgAV5nTfk59Dyag01 mveOYJ1YjkSm8NoLwqn91JCAQK/gCjCKUC+melF0ChbSwMJzBlY7POnKVUU1TPUn BMpo9Mhsl4O6sJElVwVKXiCinanIps7hmECBh8MoKXzZB26qrW5cGJOzJh1GLTpv JmXaE4rHxzicwdA4m/bObR1hdyEzhy4mI/FeJ5pd98R1/tfFOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbViCAQrezWn39Px22cZRab+FcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMmJmYTUyYzQtMTJiZC0z MjY5LTg2ZGEtYzhmZjk4Nzg2MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMrE9gIm9NT17n3M/2f2aQ4eRYGBWS3m29iPJTVixmKSiULPemePUy/ KnrZ8RaK9rONWTeasqpMItzgf3ZFplsPjGkuuDvNeGIw+Pn9NTTol0+b4CdHRtG5 +1a6vfdNTr5xmDkPuSty/5NkUx2aVaxhdouHDOUi99HFwa13Kkp7ga2sN3/FSz+w NrNoNSBTc6qjN+TUiOGHTr+jW4Pxka5VJdStnctUAKUrYHcknovOSbKZ1eQSNsin FRTy28NFq5tVGADsUxhJa0Y5GoedZrI0YQJ6xslHm/7sdYc9JxHMb5/f/AKpLsBc XEkd/ojvwjlnqRb35jKZxSQkBcpn0fY= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:33 2025 by rpki-client