$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa File: 4134f950-28af-3072-bb21-219f9bd36984.roa (raw, json) Hash identifier: DtRdQa76WA7p4YsP/M3l9vEadpFQNoa1sAQFGiXLbns= Subject key identifier: D3:31:67:5D:C2:4F:58:8D:B9:E3:7C:6A:F6:BA:0B:6F:98:40:3E:0B Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F3738548CFAD8D8C4C923C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:38:54:8c:fa:d8:d8:c4:c9:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=8ba9bc62-55ff-4b85-80c6-179063ff875a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:4c:3b:d2:9c:7c:35:c3:f6:a6:61:41:aa: f4:2d:4a:9e:54:bf:8f:36:f6:43:3c:7a:d7:7e:0b: a4:35:28:4a:e0:73:fd:87:07:94:c6:01:c0:e2:c5: 53:b0:6d:15:90:a1:f5:9a:d3:04:38:24:19:a3:02: 85:59:00:5b:5b:90:5f:68:92:4a:17:10:6e:24:95: 9f:25:39:15:ec:6d:79:a4:ac:f5:10:3c:69:04:ba: c0:c7:75:7e:28:fe:93:3e:c2:c3:36:fb:93:0d:b6: cf:ae:a0:56:05:8a:9c:37:e8:d1:c8:18:15:f7:76: ee:b3:e1:dc:80:e6:af:43:7a:29:98:e0:7c:4b:06: bd:cf:be:17:a8:0c:b8:ce:4a:a6:1a:80:46:4a:eb: 56:0b:c5:2c:8a:cf:b7:01:fd:3c:48:9d:8e:11:02: d2:01:90:65:86:68:51:fa:6a:d4:0e:ff:c4:4d:01: 8b:1b:b7:ca:fc:f1:2f:3e:24:e5:e4:c7:13:54:8d: 65:79:77:d6:6b:e4:ff:bb:f3:cd:ff:4b:7b:01:67: 0c:44:62:d5:dd:34:7d:75:9c:7a:2d:93:ab:55:90: 27:c9:fe:de:5b:5b:1e:92:b3:f2:bf:36:b5:6f:9d: 72:82:d3:2e:b0:93:a3:4b:70:40:ff:53:75:45:40: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:31:67:5D:C2:4F:58:8D:B9:E3:7C:6A:F6:BA:0B:6F:98:40:3E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e2:40:15:28:50:b1:83:21:09:42:bf:48:8a:65:17:bc:8e: bc:5e:a1:ef:04:4d:56:f1:97:ba:e8:f1:ca:1f:bc:06:8b:21: 93:37:13:15:87:be:30:84:f4:6e:28:a1:fb:f1:5c:69:fa:21: 5a:63:af:c2:b9:f9:57:bc:4a:9e:82:6f:f2:e5:e6:7b:c3:e7: 6a:ac:d0:81:bf:c7:6b:6f:34:48:ad:d8:6c:d4:ba:e7:e7:47: 8e:6d:f0:dc:52:fc:48:09:f9:72:53:a7:82:02:9d:cc:51:9a: 19:02:f7:99:f8:99:3f:48:75:6f:cd:8e:73:8f:83:a7:dc:11: 9b:d0:a8:aa:9b:af:9e:79:2c:3c:73:dc:a6:4f:f7:98:a3:00: 9a:f4:6d:2c:37:25:c4:ba:26:a7:b7:f6:e6:8d:07:d6:fe:53: b2:2e:a0:18:64:ad:cb:6f:d9:7c:d8:34:cf:1d:45:61:23:aa: 66:0a:2a:d7:41:b1:c8:08:e8:a4:cc:5b:2e:33:c9:16:96:8a: 02:1c:93:85:dd:44:8e:94:ec:6c:66:02:2c:f3:94:47:cd:8d: 54:d4:99:83:b7:ab:09:8e:a3:da:2c:7d:4e:a3:7a:82:57:4f: 25:4c:83:c3:c1:67:8a:43:11:af:59:8c:05:31:9b:67:a1:cc: 66:85:87:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzhUjPrY2MTJI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OGJhOWJjNjItNTVmZi00Yjg1LTgwYzYtMTc5MDYzZmY4NzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzARMO9KcfDXD9qZhQar0LUqeVL+PNvZDPHrX fgukNShK4HP9hweUxgHA4sVTsG0VkKH1mtMEOCQZowKFWQBbW5BfaJJKFxBuJJWf JTkV7G15pKz1EDxpBLrAx3V+KP6TPsLDNvuTDbbPrqBWBYqcN+jRyBgV93bus+Hc gOavQ3opmOB8Swa9z74XqAy4zkqmGoBGSutWC8Usis+3Af08SJ2OEQLSAZBlhmhR +mrUDv/ETQGLG7fK/PEvPiTl5McTVI1leXfWa+T/u/PN/0t7AWcMRGLV3TR9dZx6 LZOrVZAnyf7eW1sekrPyvza1b51ygtMusJOjS3BA/1N1RUBObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMxZ13CT1iNueN8ava6C2+YQD4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNDEzNGY5NTAtMjhhZi0z MDcyLWJiMjEtMjE5ZjliZDM2OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjiQBUoULGDIQlCv0iKZRe8jrxeoe8ETVbxl7ro8cofvAaLIZM3ExWH vjCE9G4oofvxXGn6IVpjr8K5+Ve8Sp6Cb/Ll5nvD52qs0IG/x2tvNEit2GzUuufn R45t8NxS/EgJ+XJTp4ICncxRmhkC95n4mT9IdW/NjnOPg6fcEZvQqKqbr555LDxz 3KZP95ijAJr0bSw3JcS6Jqe39uaNB9b+U7IuoBhkrctv2XzYNM8dRWEjqmYKKtdB scgI6KTMWy4zyRaWigIck4XdRI6U7GxmAizzlEfNjVTUmYO3qwmOo9osfU6jeoJX TyVMg8PBZ4pDEa9ZjAUxm2ehzGaFh0w= -----END CERTIFICATE-----Generated at Tue Oct 21 11:40:32 2025 by rpki-client