$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa File: 53960a1b-a057-314e-9200-bfba1423d151.roa (raw, json) Hash identifier: 3tKMNS3OkRKUZ98UEuk/2LXkdFAiFO4QQ63bknicyB4= Subject key identifier: D3:48:02:1C:A8:56:C7:96:BD:CD:B2:51:3D:E7:93:96:DF:ED:49:61 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F374140FBA109AC34F13200 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:41:40:fb:a1:09:ac:34:f1:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=95c3a336-68b8-426d-b22d-913a13e68c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:d0:59:80:89:2b:ef:45:11:fa:38:fb:c2: 3b:b1:28:91:5f:3f:23:ad:eb:12:a7:2d:01:cb:1d: 14:1a:72:c0:f7:b9:a1:ea:5a:f5:5e:37:45:36:b7: d8:e7:49:c7:20:61:f3:77:71:3d:24:00:1a:12:aa: e2:71:aa:27:9a:a1:3d:7f:6e:29:5c:fb:80:32:40: 8a:58:d1:6a:2e:d7:73:76:bd:02:53:46:7d:84:91: 0c:4e:ee:e0:c0:12:04:ec:58:2b:a7:9d:e8:6d:dd: 7f:53:20:f5:e7:83:65:7b:49:0d:7f:56:b1:fe:7c: e0:ca:9c:d6:61:56:76:b7:4b:44:9a:5d:2f:71:d2: 67:5d:03:b9:a2:61:71:f5:64:ab:92:94:1b:7e:04: 0d:0e:0a:a3:f9:d8:bd:6b:6e:1f:fb:ca:3d:42:9b: 5f:e2:6f:7c:59:aa:f5:44:59:bb:24:83:a3:1f:b4: a1:d9:d9:41:d1:c1:ce:e7:bf:fb:46:1e:c0:6d:89: f7:9d:8f:2a:fe:03:c4:45:b2:84:31:06:96:be:28: ac:a8:3d:b9:f7:04:1c:d8:a8:57:2a:17:ec:62:e2: 59:e7:87:f1:9d:4e:46:c1:33:dd:1d:b9:27:4b:fc: ec:ae:0f:c7:c0:67:c4:29:e2:e1:5c:36:55:b6:86: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:48:02:1C:A8:56:C7:96:BD:CD:B2:51:3D:E7:93:96:DF:ED:49:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:76:fd:2c:d0:c2:a0:ce:7a:ab:24:17:25:f6:2f:00:d6:68: 99:3d:80:5c:1d:2b:86:3c:51:b2:1b:4b:18:02:03:a8:48:c0: 76:0b:28:f5:b1:32:ab:a6:8e:78:d4:4f:4f:80:ae:ce:e4:2a: 23:fe:c0:47:31:0f:a8:53:1e:01:d9:e4:8e:2d:be:ee:c6:c0: 9e:17:f2:28:a5:64:bf:4a:12:f2:6a:86:d7:53:b5:77:a3:f8: 09:9b:b9:4d:5e:ea:3a:21:c0:c3:50:2a:c1:8f:68:76:8d:1f: 76:72:0e:e0:32:5a:e1:cb:3e:f6:cb:eb:bb:3d:37:40:6b:e5: a0:09:81:02:8b:95:b6:f4:73:ee:22:7a:c6:22:fa:b1:20:0e: ac:0c:af:de:09:fe:1d:77:21:0d:7c:27:c7:22:bd:77:55:8a: 0b:a2:46:55:49:4a:cb:4d:f3:fa:8a:fd:30:9b:8c:97:fc:62: 51:18:92:61:55:07:5e:b3:bf:24:68:29:4a:f2:3e:3b:ec:63: 42:f6:a8:07:c5:fe:cb:a8:b9:68:94:6d:6e:52:67:32:95:4a: 67:bd:67:cd:45:93:9b:29:9f:ef:52:34:e1:2b:4e:1d:41:47: 4f:05:5b:07:27:79:79:b4:fd:f8:13:54:22:b9:fa:4d:f2:a2: ee:76:09:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0FA+6EJrDTxMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTVjM2EzMzYtNjhiOC00MjZkLWIyMmQtOTEzYTEzZTY4YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXLQWYCJK+9FEfo4+8I7sSiRXz8jresSpy0B yx0UGnLA97mh6lr1XjdFNrfY50nHIGHzd3E9JAAaEqricaonmqE9f24pXPuAMkCK WNFqLtdzdr0CU0Z9hJEMTu7gwBIE7Fgrp53obd1/UyD154Nle0kNf1ax/nzgypzW YVZ2t0tEml0vcdJnXQO5omFx9WSrkpQbfgQNDgqj+di9a24f+8o9Qptf4m98War1 RFm7JIOjH7Sh2dlB0cHO57/7Rh7AbYn3nY8q/gPERbKEMQaWviisqD259wQc2KhX KhfsYuJZ54fxnU5GwTPdHbknS/zsrg/HwGfEKeLhXDZVtob0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNIAhyoVseWvc2yUT3nk5bf7UlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTM5NjBhMWItYTA1Ny0z MTRlLTkyMDAtYmZiYTE0MjNkMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt2/SzQwqDOeqskFyX2LwDWaJk9gFwdK4Y8UbIbSxgCA6hIwHYLKPWx MqumjnjUT0+Ars7kKiP+wEcxD6hTHgHZ5I4tvu7GwJ4X8iilZL9KEvJqhtdTtXej +AmbuU1e6johwMNQKsGPaHaNH3ZyDuAyWuHLPvbL67s9N0Br5aAJgQKLlbb0c+4i esYi+rEgDqwMr94J/h13IQ18J8civXdViguiRlVJSstN8/qK/TCbjJf8YlEYkmFV B16zvyRoKUryPjvsY0L2qAfF/suouWiUbW5SZzKVSme9Z81Fk5spn+9SNOErTh1B R08FWwcneXm0/fgTVCK5+k3you52CW0= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:33 2025 by rpki-client