$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d4f56ed-6398-3472-a1c1-390242177cb0.roa File: 3d4f56ed-6398-3472-a1c1-390242177cb0.roa (raw, json) Hash identifier: UZCsSJbKYk1U8ERr2IDTOAD7zB3LVReibUy+hDLNL3U= Subject key identifier: 5B:29:69:CA:AC:E8:F1:24:C2:78:72:9B:9A:AD:2D:E9:E2:1E:46:E8 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F37694A74B3A8297D8D76C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d4f56ed-6398-3472-a1c1-390242177cb0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:69:4a:74:b3:a8:29:7d:8d:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=790e4fbb-4dc9-4eb4-b8ff-c5d5f0462e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:55:fc:6b:98:67:c7:86:be:d9:f4:55:e0: fb:a3:50:18:e8:c5:74:9a:02:af:23:f1:4b:a0:dd: 48:81:d1:d2:d4:65:9e:27:30:fd:20:db:89:ff:b6: cb:0f:58:50:56:57:92:90:89:17:e9:5e:d1:7a:db: 7e:50:41:37:69:7a:bf:06:df:ce:ad:4e:bb:58:06: 88:4e:75:3c:6a:c4:60:b4:4f:d4:b0:e1:3b:38:78: f9:85:65:22:ad:4e:b4:3e:ce:8e:39:1e:90:f6:3c: a6:a6:27:80:73:06:f0:d4:5d:e8:5f:0e:e8:e7:5b: 6e:ed:f7:3b:71:3e:aa:87:5f:3e:3d:e9:b8:9e:00: 4d:36:24:27:69:38:e5:77:ed:4b:f2:d0:da:c1:1a: 52:67:98:38:22:97:39:40:af:56:4a:b6:c5:f8:f6: 13:dc:7b:62:fb:88:32:99:14:70:08:3e:cc:0f:7e: a5:8a:1d:fd:6b:27:79:96:dd:3c:0e:19:eb:94:cc: d5:66:71:5d:e4:64:f3:63:90:da:2e:59:ed:91:29: 94:d6:3b:be:25:c1:92:2b:65:8c:d2:46:10:9b:19: 24:ae:e7:67:19:d9:a3:cc:ac:c5:8c:c7:d9:f2:55: 18:01:60:0d:87:d7:96:27:17:11:b6:d8:dd:12:2f: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:29:69:CA:AC:E8:F1:24:C2:78:72:9B:9A:AD:2D:E9:E2:1E:46:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d4f56ed-6398-3472-a1c1-390242177cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:df:75:ea:0d:72:ce:5b:08:d5:41:a0:6e:12:f9:71:60:8a: a7:72:2c:97:fe:4e:fa:06:2d:aa:23:5d:a5:f9:01:4f:8d:c1: 7f:0b:0c:d5:fb:25:75:3b:6d:ee:b6:da:66:ac:49:7b:b1:29: 27:98:37:ee:ea:4d:79:5c:20:19:3d:f2:d6:1f:6c:ec:fd:c8: bd:a9:1d:6a:c2:22:3b:1e:36:93:dd:27:d1:8d:92:99:e8:2f: 3c:b9:37:1a:40:16:1d:c6:29:2d:71:24:66:ac:87:0a:95:4d: 8f:37:aa:84:a6:a5:3d:12:88:7f:28:74:0d:b3:de:d7:f0:c4: fa:ca:24:94:cb:5f:e9:9f:d8:61:19:ea:fc:63:08:6a:2f:96: 66:d8:f7:4f:cd:90:79:1f:7e:d3:73:32:e9:31:60:62:33:a5: 9c:68:04:55:6b:fb:ae:d0:35:b6:22:28:fd:f2:8a:03:9c:40: a0:c8:f3:e3:ba:98:8b:a6:f1:aa:93:5e:73:fb:3b:0f:96:31: 02:ea:df:f4:ef:b2:60:02:e6:5e:73:11:01:b4:81:34:3a:c6: 11:b9:04:07:15:65:7e:0b:81:39:b1:6f:ba:8d:ba:34:b7:f7: 15:e4:a6:a3:4f:51:77:cd:90:13:4e:6b:ac:63:94:b9:62:0b: d4:81:bc:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2lKdLOoKX2NdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NzkwZTRmYmItNGRjOS00ZWI0LWI4ZmYtYzVkNWYwNDYyZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlghV/GuYZ8eGvtn0VeD7o1AY6MV0mgKvI/FL oN1IgdHS1GWeJzD9INuJ/7bLD1hQVleSkIkX6V7Rett+UEE3aXq/Bt/OrU67WAaI TnU8asRgtE/UsOE7OHj5hWUirU60Ps6OOR6Q9jympieAcwbw1F3oXw7o51tu7fc7 cT6qh18+Pem4ngBNNiQnaTjld+1L8tDawRpSZ5g4Ipc5QK9WSrbF+PYT3Hti+4gy mRRwCD7MD36lih39ayd5lt08DhnrlMzVZnFd5GTzY5DaLlntkSmU1ju+JcGSK2WM 0kYQmxkkrudnGdmjzKzFjMfZ8lUYAWANh9eWJxcRttjdEi8kBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFspacqs6PEkwnhym5qtLeniHkboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvM2Q0ZjU2ZWQtNjM5OC0z NDcyLWExYzEtMzkwMjQyMTc3Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbfdeoNcs5bCNVBoG4S+XFgiqdyLJf+TvoGLaojXaX5AU+NwX8LDNX7 JXU7be622masSXuxKSeYN+7qTXlcIBk98tYfbOz9yL2pHWrCIjseNpPdJ9GNkpno Lzy5NxpAFh3GKS1xJGashwqVTY83qoSmpT0SiH8odA2z3tfwxPrKJJTLX+mf2GEZ 6vxjCGovlmbY90/NkHkfftNzMukxYGIzpZxoBFVr+67QNbYiKP3yigOcQKDI8+O6 mIum8aqTXnP7Ow+WMQLq3/TvsmAC5l5zEQG0gTQ6xhG5BAcVZX4LgTmxb7qNujS3 9xXkpqNPUXfNkBNOa6xjlLliC9SBvIs= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:38 2025 by rpki-client