$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa File: 61a53849-faa2-35a8-a44f-39748123203a.roa (raw, json) Hash identifier: sIOTCvYH28T6oWhM7xZfUgjCtECJ9mNaruMPnzR++Gs= Subject key identifier: E4:51:B9:C4:4B:4A:19:87:EE:97:BA:17:7F:08:50:8B:B7:FC:B2:B5 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F3744DCB425CFB56B0CC000 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:44:dc:b4:25:cf:b5:6b:0c:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3ab89523-c9be-4aac-b55c-70f52402f1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:30:54:29:41:c9:c0:cb:97:64:bb:8c:94: 58:26:a5:ce:d4:4c:b4:9a:57:5f:bb:2a:28:3a:d8: f2:b0:76:9c:b8:fe:81:68:b8:e9:f3:75:b9:bc:28: 11:b2:39:ce:89:1e:a1:bd:a4:e0:33:d1:a8:9f:1e: 46:45:5a:c2:d7:5b:75:e5:d4:f8:e7:76:c0:5c:8e: 90:50:57:17:35:f6:38:5c:c5:ed:a1:a8:77:a5:10: 24:9c:7f:5a:fd:56:3e:94:db:d6:7b:35:28:af:39: 44:14:0f:dc:8e:6b:60:87:15:8d:d6:fc:27:37:bc: 5e:22:6f:fa:68:2d:99:a1:f2:ea:3d:1a:54:dc:d6: ce:82:0e:b7:15:41:f0:f8:e5:ed:5f:14:fd:87:95: 5d:08:27:11:c6:d0:f9:0d:46:27:c7:cd:52:d8:a3: 95:4e:fd:64:df:aa:4f:41:81:6c:37:b2:7b:10:47: 22:1f:75:12:83:ee:55:62:45:1d:cd:85:03:71:ff: 90:8b:1a:c0:32:fe:8f:de:9d:27:dd:e8:06:b1:44: a8:16:00:5a:f3:1a:0c:13:87:b6:98:9f:c7:47:a8: 29:57:00:e7:f2:e2:10:c9:0c:87:45:91:97:bc:a9: ba:f9:c4:17:8b:8b:d2:45:d8:2e:be:b9:fc:51:ea: 1d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:51:B9:C4:4B:4A:19:87:EE:97:BA:17:7F:08:50:8B:B7:FC:B2:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:20:b8:53:cd:ab:ba:7e:35:55:5d:7c:cd:26:48:17:e7:e8: 5e:68:51:27:89:94:4b:b9:61:df:21:01:63:d8:7b:cb:9b:79: 6b:0c:cd:89:a8:24:ac:9d:a4:08:c8:c7:6e:2f:09:af:5b:01: e8:df:ea:ad:57:71:6e:5b:aa:b5:5c:26:44:6b:00:6d:47:08: 2c:dd:39:3f:91:b2:65:f6:b5:01:18:37:62:45:b5:5f:90:64: 87:bb:13:10:62:23:cc:86:31:13:32:81:78:79:42:bd:49:57: 1a:4c:ed:53:d0:61:78:44:44:fd:fd:a1:63:0a:e6:cf:f8:b1: 47:75:17:8d:63:b1:e2:b1:57:75:28:78:b3:86:7b:27:e1:fe: 6e:ed:1a:c0:f9:87:57:1f:67:c4:b8:5b:ab:ed:9d:40:38:2e: e2:b5:59:1e:c9:d3:1c:2a:74:33:43:f4:06:47:5c:85:a2:21: 5d:33:3e:48:d2:4e:e5:90:d4:c9:24:c4:dc:1e:73:22:9d:6a: 0a:1e:b3:fe:fa:f9:65:38:18:65:6e:e2:eb:ab:1c:03:a0:3d: 35:76:5e:64:9f:b1:0a:5e:2f:23:09:06:00:88:ec:12:cb:28: e1:d7:fc:5e:17:54:70:b9:2d:0d:6c:f9:20:ca:24:65:22:c0: 95:75:f0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0TctCXPtWsMwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2FiODk1MjMtYzliZS00YWFjLWI1NWMtNzBmNTI0MDJmMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVEwVClBycDLl2S7jJRYJqXO1Ey0mldfuyoo OtjysHacuP6BaLjp83W5vCgRsjnOiR6hvaTgM9Gonx5GRVrC11t15dT453bAXI6Q UFcXNfY4XMXtoah3pRAknH9a/VY+lNvWezUorzlEFA/cjmtghxWN1vwnN7xeIm/6 aC2ZofLqPRpU3NbOgg63FUHw+OXtXxT9h5VdCCcRxtD5DUYnx81S2KOVTv1k36pP QYFsN7J7EEciH3USg+5VYkUdzYUDcf+QixrAMv6P3p0n3egGsUSoFgBa8xoME4e2 mJ/HR6gpVwDn8uIQyQyHRZGXvKm6+cQXi4vSRdguvrn8Ueod9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORRucRLShmH7pe6F38IUIu3/LK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjFhNTM4NDktZmFhMi0z NWE4LWE0NGYtMzk3NDgxMjMyMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwguFPNq7p+NVVdfM0mSBfn6F5oUSeJlEu5Yd8hAWPYe8ubeWsMzYmo JKydpAjIx24vCa9bAejf6q1XcW5bqrVcJkRrAG1HCCzdOT+RsmX2tQEYN2JFtV+Q ZIe7ExBiI8yGMRMygXh5Qr1JVxpM7VPQYXhERP39oWMK5s/4sUd1F41jseKxV3Uo eLOGeyfh/m7tGsD5h1cfZ8S4W6vtnUA4LuK1WR7J0xwqdDND9AZHXIWiIV0zPkjS TuWQ1MkkxNwecyKdagoes/76+WU4GGVu4uurHAOgPTV2XmSfsQpeLyMJBgCI7BLL KOHX/F4XVHC5LQ1s+SDKJGUiwJV18Bo= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:39 2025 by rpki-client