$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648cd264-92c4-3292-a3db-0515ecc7d125.roa File: 648cd264-92c4-3292-a3db-0515ecc7d125.roa (raw, json) Hash identifier: X2RbHY4xfRi97GRE4nKxaLjzmowoveTcHhKnU11ukw8= Subject key identifier: 05:8B:76:A9:67:C5:22:D4:9D:56:9A:EA:81:76:4F:28:37:CA:62:5B Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B64CD628F923F9CA888A68100 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648cd264-92c4-3292-a3db-0515ecc7d125.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:62:8f:92:3f:9c:a8:88:a6:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=72fb2d00-336e-4835-8f6c-a255c20cf5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:0b:71:43:4a:33:5c:59:7f:1c:d5:ea:f4: 1b:60:cf:d9:44:ec:34:41:9e:27:95:6c:9b:73:ff: 1f:7a:94:db:99:0a:2a:4a:cd:11:15:c9:32:d4:59: 59:12:8f:8c:1e:9d:3d:ce:44:ad:73:da:4d:7f:8e: bb:51:e2:57:95:cb:fa:1f:40:ee:c2:fd:89:c1:ba: 26:54:4e:a8:08:4f:f1:93:e6:1a:ba:89:89:a7:94: 46:1d:6a:51:61:22:07:6c:ce:99:58:7c:6e:46:2a: 71:95:b1:41:69:3b:2c:b6:64:6e:ad:60:f8:35:ea: 13:7b:20:9e:97:34:f3:da:c0:90:4a:c9:27:f4:10: 03:38:a0:a8:ee:56:95:4e:27:3a:00:c4:96:6b:0c: 8e:f2:40:24:46:dd:ec:13:03:c5:ff:b1:89:13:1c: 8e:f9:24:17:a1:7d:f0:df:08:0e:ff:76:6c:6e:99: 1f:4b:27:5f:cb:98:bf:26:b1:eb:ff:ec:b1:7b:8e: 35:db:43:56:d8:fa:39:f8:e6:23:fd:57:ec:60:1f: 61:5c:94:0b:9c:5c:50:b7:0b:0c:20:70:6f:84:f0: c2:27:da:fa:d7:e4:25:45:32:24:bc:fb:c8:dc:fd: 12:80:bf:db:65:1d:23:9e:6a:e6:83:c7:a0:4b:0a: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8B:76:A9:67:C5:22:D4:9D:56:9A:EA:81:76:4F:28:37:CA:62:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648cd264-92c4-3292-a3db-0515ecc7d125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:dd:78:d7:2b:4d:c0:fe:d0:40:1e:71:20:9c:2c:f9:ad:f5: f1:5b:7d:f2:f4:7d:65:08:85:05:6e:ac:a9:e8:27:68:6c:48: 7a:1f:69:61:49:e0:5a:d7:d7:b7:09:64:3b:e8:7e:53:1d:c9: 07:e3:23:49:0b:bc:d8:b5:54:ae:10:91:b4:ad:7c:5a:9b:ce: e0:50:a9:b6:95:49:ee:47:05:d1:a3:1c:0f:cf:71:7b:75:70: 10:f5:00:8e:87:7c:60:74:9b:58:41:15:a0:d0:33:69:f0:9d: 2b:ea:0c:cd:d0:00:db:66:9a:a0:14:1f:81:71:24:42:bf:bc: a0:66:e8:41:7b:e8:47:7b:28:f7:80:4f:d1:a8:68:44:f4:da: 15:87:f7:8d:0e:e0:62:5d:7b:28:2e:07:8c:ac:1d:75:a2:8e: 05:86:ab:ce:98:16:4a:41:4f:2d:54:56:88:a6:db:09:f7:81: 5b:1d:4d:51:3f:c0:10:31:5b:8b:b8:91:c4:dc:41:e8:51:9f: 67:b8:d7:52:a6:ea:59:13:b3:6b:93:ea:99:f2:be:f0:78:c0: a5:04:00:6e:d7:26:0a:f4:22:bb:d8:83:b6:90:26:d5:24:8c: 47:e4:d2:0c:8f:e8:62:f9:c3:e6:16:da:06:88:ec:c7:82:03: 3a:cb:ec:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWKPkj+cqIimgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzJmYjJkMDAtMzM2ZS00ODM1LThmNmMtYTI1NWMyMGNmNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzigLcUNKM1xZfxzV6vQbYM/ZROw0QZ4nlWyb c/8fepTbmQoqSs0RFcky1FlZEo+MHp09zkStc9pNf467UeJXlcv6H0Duwv2Jwbom VE6oCE/xk+YauomJp5RGHWpRYSIHbM6ZWHxuRipxlbFBaTsstmRurWD4NeoTeyCe lzTz2sCQSskn9BADOKCo7laVTic6AMSWawyO8kAkRt3sEwPF/7GJExyO+SQXoX3w 3wgO/3ZsbpkfSydfy5i/JrHr/+yxe44120NW2Po5+OYj/VfsYB9hXJQLnFxQtwsM IHBvhPDCJ9r61+QlRTIkvPvI3P0SgL/bZR0jnmrmg8egSwq3IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWLdqlnxSLUnVaa6oF2Tyg3ymJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjQ4Y2QyNjQtOTJjNC0z MjkyLWEzZGItMDUxNWVjYzdkMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3deNcrTcD+0EAecSCcLPmt9fFbffL0fWUIhQVurKnoJ2hsSHofaWFJ 4FrX17cJZDvoflMdyQfjI0kLvNi1VK4QkbStfFqbzuBQqbaVSe5HBdGjHA/PcXt1 cBD1AI6HfGB0m1hBFaDQM2nwnSvqDM3QANtmmqAUH4FxJEK/vKBm6EF76Ed7KPeA T9GoaET02hWH940O4GJdeyguB4ysHXWijgWGq86YFkpBTy1UVoim2wn3gVsdTVE/ wBAxW4u4kcTcQehRn2e411Km6lkTs2uT6pnyvvB4wKUEAG7XJgr0IrvYg7aQJtUk jEfk0gyP6GL5w+YW2gaI7MeCAzrL7Hc= -----END CERTIFICATE-----Generated at Tue Oct 21 11:33:49 2025 by rpki-client