$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4b5aa02b-54a6-3db7-a227-00b184713292.roa File: 4b5aa02b-54a6-3db7-a227-00b184713292.roa (raw, json) Hash identifier: RV28NSNCRysr0134OzxtULs6/H3fiSUDsSO1V5tiLu8= Subject key identifier: BF:B5:15:16:09:7C:74:AA:BA:B1:1A:72:47:C1:0C:B4:DB:C0:06:D7 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F37438502C3098507335580 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4b5aa02b-54a6-3db7-a227-00b184713292.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:43:85:02:c3:09:85:07:33:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=2bcea462-e251-4318-a7df-0f14bd444cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:26:0e:04:88:cc:53:ee:64:6b:41:75:5e: 9b:25:b1:70:91:1d:94:2b:d6:d1:c6:22:69:e1:6f: bc:50:59:cb:b6:9b:55:33:af:08:da:62:b3:73:e0: 5d:12:58:ed:76:14:16:27:14:08:3b:31:9f:62:9c: 7c:fc:18:29:42:13:b3:48:3c:d9:18:13:bf:b8:5d: 2c:81:ce:dd:9e:98:65:0c:27:54:03:6d:c1:0b:6a: c7:3a:20:a2:bf:f3:04:d3:8a:53:60:42:4d:43:bb: 60:51:1d:4a:93:f3:fe:4a:db:f3:63:46:cd:99:56: 31:9a:f0:45:a8:f1:cf:69:ca:30:7f:a0:96:d7:56: 10:d9:8e:ca:f6:1b:1c:40:a0:8a:59:6c:b8:64:15: 23:bc:dc:49:a3:b0:5c:45:e0:1d:55:91:df:2b:cf: 0c:b6:2e:f9:e6:16:f1:51:21:b9:0b:00:63:47:19: 8c:d9:20:ba:5d:60:4b:86:b3:86:fb:0e:3b:8d:7c: db:36:6d:ad:5b:66:9b:3f:b1:80:4e:0e:02:59:77: 78:05:3e:59:c2:66:2b:ec:6f:44:fa:d2:25:e3:85: 8a:4b:46:35:59:b2:59:22:aa:28:4f:d2:fc:bc:72: f3:70:9b:ac:ea:16:56:c7:47:7f:27:1f:dc:6b:05: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B5:15:16:09:7C:74:AA:BA:B1:1A:72:47:C1:0C:B4:DB:C0:06:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4b5aa02b-54a6-3db7-a227-00b184713292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:27:bc:32:1e:35:ee:60:71:f9:f0:fb:bd:32:4f:3b:7c:67: 37:ef:b6:62:ee:88:80:2d:82:08:8a:72:81:9d:63:b0:8a:37: 43:df:63:08:5b:47:e0:2f:5c:c1:d6:6a:fb:19:79:53:72:2a: 69:0c:a3:ef:2e:f8:59:1a:54:2a:42:03:25:88:f1:16:4d:b6: db:32:b6:fe:af:88:94:5c:bd:ea:25:f4:f3:45:bd:4d:fd:4a: 26:96:cf:0d:c0:55:99:6c:a2:3f:22:75:4b:61:66:7a:26:8b: 76:a0:79:8e:ba:10:31:c5:a2:be:e1:2f:ca:2a:20:38:8c:b2: 66:66:f6:03:bf:c1:04:d9:b5:cb:ab:c1:92:2f:61:84:c0:c5: 7d:08:ae:b5:ed:f1:65:cf:b9:cd:b8:7b:ce:27:ac:b7:42:2a: b9:38:96:73:81:e6:96:af:86:3e:9c:54:3d:48:76:bf:ff:62: ca:49:00:0f:39:30:a3:68:7b:e5:c1:9e:f3:cf:de:12:c3:53: da:3a:85:46:b3:42:78:eb:e9:a3:98:ec:78:50:dd:b1:65:ae: 81:46:7f:41:46:d8:b0:fd:e5:cd:a0:e5:6e:42:44:91:d1:d9: 0f:df:d5:7b:0a:22:b5:9a:9e:b1:3f:11:29:5d:cf:ac:65:3d: e7:8e:a9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0OFAsMJhQczVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MmJjZWE0NjItZTI1MS00MzE4LWE3ZGYtMGYxNGJkNDQ0Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMcmDgSIzFPuZGtBdV6bJbFwkR2UK9bRxiJp 4W+8UFnLtptVM68I2mKzc+BdEljtdhQWJxQIOzGfYpx8/BgpQhOzSDzZGBO/uF0s gc7dnphlDCdUA23BC2rHOiCiv/ME04pTYEJNQ7tgUR1Kk/P+StvzY0bNmVYxmvBF qPHPacowf6CW11YQ2Y7K9hscQKCKWWy4ZBUjvNxJo7BcReAdVZHfK88Mti755hbx USG5CwBjRxmM2SC6XWBLhrOG+w47jXzbNm2tW2abP7GATg4CWXd4BT5ZwmYr7G9E +tIl44WKS0Y1WbJZIqooT9L8vHLzcJus6hZWx0d/Jx/cawW0lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+1FRYJfHSqurEackfBDLTbwAbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNGI1YWEwMmItNTRhNi0z ZGI3LWEyMjctMDBiMTg0NzEzMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHInvDIeNe5gcfnw+70yTzt8ZzfvtmLuiIAtggiKcoGdY7CKN0PfYwhb R+AvXMHWavsZeVNyKmkMo+8u+FkaVCpCAyWI8RZNttsytv6viJRcveol9PNFvU39 SiaWzw3AVZlsoj8idUthZnomi3ageY66EDHFor7hL8oqIDiMsmZm9gO/wQTZtcur wZIvYYTAxX0IrrXt8WXPuc24e84nrLdCKrk4lnOB5pavhj6cVD1Idr//YspJAA85 MKNoe+XBnvPP3hLDU9o6hUazQnjr6aOY7HhQ3bFlroFGf0FG2LD95c2g5W5CRJHR 2Q/f1XsKIrWanrE/ESldz6xlPeeOqQQ= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:45 2025 by rpki-client