$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa File: 4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa (raw, json) Hash identifier: 2apgkatrlr+PV5M2dAZsSYToHpkpEMETEqO+qzeoWvI= Subject key identifier: B1:27:BF:56:2E:4E:05:E2:6B:77:69:DD:5E:F9:91:DC:F7:C4:CA:D3 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F373DD11F0E33F3FE0BEFE0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3d:d1:1f:0e:33:f3:fe:0b:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=b07e9af8-74f1-4335-b120-9b4f943ed19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:4b:3f:63:17:b2:64:37:d3:07:7d:d9:18: ca:7b:16:bb:e2:8e:c3:7e:1d:a5:53:bb:78:79:03: 98:2e:0a:7f:9a:2f:de:2e:65:fa:61:36:ea:48:32: 4e:ca:65:40:45:7d:30:1e:8f:ba:b1:8c:2a:37:f9: 90:9d:3f:a0:f9:35:4f:ce:a5:3d:4d:f3:f2:cf:ad: e3:3f:9e:d0:39:6b:84:19:8f:4f:34:31:79:4f:6a: ba:53:ec:37:65:61:f8:c1:23:56:a5:84:c8:ca:3e: 3b:2e:07:03:02:44:80:e7:07:e2:21:74:7e:18:0f: 0c:5c:fb:ed:5d:5d:11:f3:20:24:e3:f1:15:ea:55: d3:1e:2a:39:cf:4c:96:03:da:66:9e:1a:34:ff:ae: 32:44:d9:33:c3:9b:44:be:2b:23:7a:ce:ef:9b:3f: 58:01:99:4a:06:8e:08:bf:d4:45:f3:e8:cd:d0:2e: 16:77:86:52:68:3e:15:78:51:fa:a8:a2:5b:0a:58: 2b:d3:1b:f0:1a:3c:43:3c:c6:56:4f:13:f8:30:71: 80:e4:f4:33:e2:06:2d:5d:d7:7f:bc:c5:89:a3:14: e1:a0:1a:15:a3:98:be:34:94:8b:4b:21:27:5c:2b: ab:47:b7:4d:ca:fc:91:52:0a:1e:82:89:8e:d6:d3: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:BF:56:2E:4E:05:E2:6B:77:69:DD:5E:F9:91:DC:F7:C4:CA:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:71:d0:3f:43:68:a1:87:7a:77:21:73:93:8f:f7:54:d1:16: ac:e3:e0:b0:a6:ea:fe:f8:1b:a3:56:6f:0f:10:52:c6:22:21: 7b:0e:77:b1:c6:60:87:77:79:7a:17:ea:64:09:37:3f:c6:50: 0c:9e:34:15:77:93:0b:ab:bd:4f:c2:c8:99:4a:d9:73:ac:12: a0:a9:cf:e8:88:2d:44:f6:a2:30:79:5d:2c:c2:47:95:13:e3: 77:03:f4:12:38:cc:40:48:9f:bc:80:2d:30:e9:45:71:37:55: 8e:ea:bd:40:4b:23:ec:a0:26:cf:17:9e:73:c9:b3:de:6b:2a: 22:3b:9f:97:43:62:08:7b:26:e7:ab:fa:a1:d6:c7:88:a7:af: 07:41:3d:89:4e:7d:ea:70:39:21:a2:54:91:f3:ba:ae:f0:54: e0:89:5d:7b:e2:42:ca:c2:c6:5c:07:0a:34:00:f2:b1:67:eb: 04:99:63:19:e5:e5:2d:5c:bb:a1:14:40:48:90:cf:9c:72:9a: b6:5f:52:20:9e:9a:8c:b0:59:67:82:96:cb:32:0f:f7:31:2a: 73:2c:84:79:d9:37:09:a3:9a:af:76:47:f3:1d:1f:18:8e:7b: 54:7c:b9:9d:7f:63:6d:4b:6b:9f:e9:f6:d4:1e:19:df:22:ae: 47:ab:3d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz3RHw4z8/4L7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YjA3ZTlhZjgtNzRmMS00MzM1LWIxMjAtOWI0Zjk0M2VkMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf1LP2MXsmQ30wd92RjKexa74o7Dfh2lU7t4 eQOYLgp/mi/eLmX6YTbqSDJOymVARX0wHo+6sYwqN/mQnT+g+TVPzqU9TfPyz63j P57QOWuEGY9PNDF5T2q6U+w3ZWH4wSNWpYTIyj47LgcDAkSA5wfiIXR+GA8MXPvt XV0R8yAk4/EV6lXTHio5z0yWA9pmnho0/64yRNkzw5tEvisjes7vmz9YAZlKBo4I v9RF8+jN0C4Wd4ZSaD4VeFH6qKJbClgr0xvwGjxDPMZWTxP4MHGA5PQz4gYtXdd/ vMWJoxThoBoVo5i+NJSLSyEnXCurR7dNyvyRUgoegomO1tM1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEnv1YuTgXia3dp3V75kdz3xMrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNGY5MjhmZjgtMDhmZC0z ODBiLWExZmUtMzZmZjI4NDFhNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBx0D9DaKGHenchc5OP91TRFqzj4LCm6v74G6NWbw8QUsYiIXsOd7HG YId3eXoX6mQJNz/GUAyeNBV3kwurvU/CyJlK2XOsEqCpz+iILUT2ojB5XSzCR5UT 43cD9BI4zEBIn7yALTDpRXE3VY7qvUBLI+ygJs8XnnPJs95rKiI7n5dDYgh7Juer +qHWx4inrwdBPYlOfepwOSGiVJHzuq7wVOCJXXviQsrCxlwHCjQA8rFn6wSZYxnl 5S1cu6EUQEiQz5xymrZfUiCemoywWWeClssyD/cxKnMshHnZNwmjmq92R/MdHxiO e1R8uZ1/Y21La5/p9tQeGd8irkerPb0= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:44 2025 by rpki-client