$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/517bd76a-4a96-3b5d-a21e-b702a50d64c4.roa File: 517bd76a-4a96-3b5d-a21e-b702a50d64c4.roa (raw, json) Hash identifier: lpnHIkbevFIuLtlI3DYjg0AKfYRIpWE08l2Ysm06fKQ= Subject key identifier: 6E:AD:43:3D:06:51:EA:96:34:7E:CC:92:D5:32:06:A8:F3:B5:6C:0C Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B64CD5AAF82498B38AAA51D80 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/517bd76a-4a96-3b5d-a21e-b702a50d64c4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5a:af:82:49:8b:38:aa:a5:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0ccc889b-75c7-4b45-a485-840d489ca1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ab:79:7b:7f:c3:ce:0d:6e:c8:c1:70:d8:bc: 2f:3e:2a:41:72:76:68:fe:f4:0e:56:26:d2:5d:87: 36:7b:a5:c3:4f:0b:b2:f4:8f:fd:47:9b:f8:3a:50: 1c:5f:fe:f3:30:ce:a7:0b:ab:dd:64:81:59:5e:b4: 28:0d:07:41:dd:4f:50:3d:41:4e:24:5a:35:a9:6c: c8:b4:62:62:da:31:7b:64:27:4b:38:28:34:45:91: 33:71:8f:88:6d:68:0e:da:05:f8:f4:5b:1f:ba:8b: ca:92:f0:36:12:43:02:e2:80:c9:64:60:f3:73:3d: f3:07:aa:09:ad:6a:0d:7a:9a:e3:65:c3:ad:7e:32: 00:de:35:10:0b:80:12:56:d4:13:d4:d5:71:17:ff: d9:01:38:58:93:64:3a:14:3b:83:ca:c3:5a:3e:30: 3a:fc:50:1e:4e:87:6d:8c:d1:24:27:47:6f:b3:db: a0:46:53:46:9a:ce:8b:6a:64:fd:9f:30:a9:bc:33: 3e:cf:24:b6:01:a2:3d:9b:8b:02:79:10:64:b5:83: 5e:1b:60:ba:8a:38:2d:88:af:f4:f6:d7:be:9d:6a: 85:62:31:8e:38:ce:0a:0d:cb:25:24:ff:3f:24:96: 53:25:0b:36:c2:49:36:b9:ba:25:d0:39:ae:ad:a3: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:43:3D:06:51:EA:96:34:7E:CC:92:D5:32:06:A8:F3:B5:6C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/517bd76a-4a96-3b5d-a21e-b702a50d64c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5f:bb:b5:bf:78:7b:0e:a5:44:cc:84:17:ed:1c:c3:11:11: d9:ad:ae:eb:63:1b:4d:a9:0e:dd:11:a5:a8:91:32:0d:40:d4: 4b:22:2e:e8:97:4f:98:fc:01:6d:2e:fd:29:f4:ce:68:ba:6f: 4b:ee:96:08:d2:f8:10:7d:98:0e:63:c4:53:fe:17:0d:d6:c4: 0c:c2:ca:f3:a2:33:8a:11:f8:3f:99:74:9e:13:55:44:fa:6b: b8:eb:9e:fb:8f:d3:4f:e1:c4:79:4f:fc:c9:76:bb:33:f0:ba: 22:1c:c1:e2:aa:1c:0a:11:dd:0d:1b:7e:54:74:40:7b:19:32: b0:9c:36:8c:2f:2f:d6:92:5f:b5:da:61:89:02:c7:85:97:0b: 63:e6:f4:85:f3:1d:5a:92:54:21:ca:b7:0b:1f:3e:39:62:67: 4a:e9:60:57:09:e1:4e:73:88:30:21:57:65:11:15:28:13:f9: 3f:0b:81:17:3f:c2:d3:48:7b:c4:5a:b6:13:bf:38:b8:5f:ef: 36:7a:be:e3:d3:4d:65:50:57:c3:a1:39:51:a4:ab:b0:eb:50: 0c:95:bd:60:52:79:ab:b4:9b:f3:70:95:d2:e3:66:88:e2:00: 88:21:6b:af:78:38:9b:19:86:d1:b7:30:fa:44:19:56:e8:6d: ed:2c:21:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVqvgkmLOKqlHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGNjYzg4OWItNzVjNy00YjQ1LWE0ODUtODQwZDQ4OWNhMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqt5e3/Dzg1uyMFw2LwvPipBcnZo/vQOVibS XYc2e6XDTwuy9I/9R5v4OlAcX/7zMM6nC6vdZIFZXrQoDQdB3U9QPUFOJFo1qWzI tGJi2jF7ZCdLOCg0RZEzcY+IbWgO2gX49FsfuovKkvA2EkMC4oDJZGDzcz3zB6oJ rWoNeprjZcOtfjIA3jUQC4ASVtQT1NVxF//ZAThYk2Q6FDuDysNaPjA6/FAeTodt jNEkJ0dvs9ugRlNGms6LamT9nzCpvDM+zyS2AaI9m4sCeRBktYNeG2C6ijgtiK/0 9te+nWqFYjGOOM4KDcslJP8/JJZTJQs2wkk2ubol0DmuraPEgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6tQz0GUeqWNH7MktUyBqjztWwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTE3YmQ3NmEtNGE5Ni0z YjVkLWEyMWUtYjcwMmE1MGQ2NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBfu7W/eHsOpUTMhBftHMMREdmtrutjG02pDt0RpaiRMg1A1EsiLuiX T5j8AW0u/Sn0zmi6b0vulgjS+BB9mA5jxFP+Fw3WxAzCyvOiM4oR+D+ZdJ4TVUT6 a7jrnvuP00/hxHlP/Ml2uzPwuiIcweKqHAoR3Q0bflR0QHsZMrCcNowvL9aSX7Xa YYkCx4WXC2Pm9IXzHVqSVCHKtwsfPjliZ0rpYFcJ4U5ziDAhV2URFSgT+T8LgRc/ wtNIe8RathO/OLhf7zZ6vuPTTWVQV8OhOVGkq7DrUAyVvWBSeau0m/NwldLjZoji AIgha694OJsZhtG3MPpEGVbobe0sIfM= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:42 2025 by rpki-client