$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71c9f720-23f4-3d8b-9453-c41916e8ac49.roa File: 71c9f720-23f4-3d8b-9453-c41916e8ac49.roa (raw, json) Hash identifier: EttrrJUKzSwOakPAD/vZXtFY6LJ+exe+brRTar8V2SU= Subject key identifier: 3C:6B:EA:9E:F1:24:40:C2:36:95:F2:43:43:CB:77:D8:0D:66:5A:13 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B64CD589644FBF5AC97057B80 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71c9f720-23f4-3d8b-9453-c41916e8ac49.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:58:96:44:fb:f5:ac:97:05:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2f4ea813-e83e-4b32-9fc8-a68747b66777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:6e:1c:ec:5b:3b:03:de:76:1a:5f:89:6f: 59:89:ba:9b:a3:4f:06:07:0d:52:97:16:f2:d8:a6: f0:7a:7f:37:6e:60:ef:bc:2b:19:e6:d4:f2:d1:d9: cb:be:d8:63:53:25:38:fe:1e:ed:96:bf:5c:eb:f0: 76:d1:32:98:75:54:15:33:fe:e3:90:d7:8f:48:c7: 33:3a:91:b7:61:08:b1:2b:e9:80:4d:22:63:71:09: bb:5b:1a:0c:db:65:3b:13:b5:ed:39:4e:2e:26:d2: bc:63:a3:30:4c:e4:eb:61:f9:1a:cf:51:1b:53:3c: 1e:e1:86:c0:0a:f9:9c:d0:fd:5f:90:1b:bc:15:75: c1:33:f5:90:9b:20:d5:fa:ea:1e:e8:ca:0d:5e:93: 5e:b8:59:d4:e2:9a:e2:30:0d:c6:48:d7:57:9a:34: 79:17:2a:20:49:a6:37:c5:c6:d9:8f:7f:2a:01:61: b1:02:cf:80:29:4c:a5:9f:7d:c3:e2:9b:f0:55:c3: 3b:63:ad:cc:ce:aa:bc:43:62:1f:d4:85:3b:62:6a: 6b:86:44:0e:f0:34:9b:18:fc:6d:14:d8:e3:15:75: e9:ab:7f:04:0b:f7:2e:18:8d:7e:8f:be:0a:49:4c: 20:90:b3:b1:4f:c5:d6:d1:04:93:6d:c8:da:cd:8e: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:EA:9E:F1:24:40:C2:36:95:F2:43:43:CB:77:D8:0D:66:5A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71c9f720-23f4-3d8b-9453-c41916e8ac49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:72:71:5e:d0:97:b4:0b:a9:e1:e7:c7:13:c5:09:bc:ba:f3: 02:14:08:d6:41:33:f2:19:d2:da:0e:64:c4:7f:3a:38:02:e3: 64:ac:0b:b1:94:5b:dd:6f:91:f4:df:27:8c:68:78:1c:a1:57: 26:b8:ea:37:ca:b1:fc:15:b1:85:8a:f4:00:12:00:08:e0:a9: a4:4a:3d:71:8c:07:0a:6a:60:33:48:bf:c4:5c:9d:31:80:74: 95:f9:90:bd:94:4a:46:d8:02:1c:94:4e:d8:af:c0:ef:89:40: d3:81:99:b5:cf:ef:6c:0f:33:57:26:cd:80:e0:0c:61:2b:1c: 6b:af:94:e3:f1:66:b7:3e:1f:90:aa:dc:9f:72:7f:dc:9a:e2: b7:28:a8:b6:dc:dc:c0:61:86:2a:0e:f6:be:74:2d:3b:c9:31: fa:d4:ee:c9:8f:c6:c2:4b:72:eb:32:08:14:05:8a:e9:c7:85: 17:3a:81:64:6d:70:d8:e8:19:e4:b9:cd:65:81:c3:06:f7:a2: d8:14:81:1f:e1:29:d6:d0:40:e4:27:d7:a3:ed:6e:cf:fb:6c: 4d:3f:cd:d4:1d:ed:4a:df:b7:91:87:21:fe:64:d6:ac:25:54: 0b:de:46:d8:bc:8c:c9:3d:e6:b0:ae:d6:aa:99:06:7c:0f:40: 7c:ca:1d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzViWRPv1rJcFe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmY0ZWE4MTMtZTgzZS00YjMyLTlmYzgtYTY4NzQ3YjY2Nzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyANuHOxbOwPedhpfiW9Zibqbo08GBw1Slxby 2Kbwen83bmDvvCsZ5tTy0dnLvthjUyU4/h7tlr9c6/B20TKYdVQVM/7jkNePSMcz OpG3YQixK+mATSJjcQm7WxoM22U7E7XtOU4uJtK8Y6MwTOTrYfkaz1EbUzwe4YbA Cvmc0P1fkBu8FXXBM/WQmyDV+uoe6MoNXpNeuFnU4priMA3GSNdXmjR5FyogSaY3 xcbZj38qAWGxAs+AKUyln33D4pvwVcM7Y63Mzqq8Q2If1IU7YmprhkQO8DSbGPxt FNjjFXXpq38EC/cuGI1+j74KSUwgkLOxT8XW0QSTbcjazY7u8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxr6p7xJEDCNpXyQ0PLd9gNZloTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNzFjOWY3MjAtMjNmNC0z ZDhiLTk0NTMtYzQxOTE2ZThhYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERycV7Ql7QLqeHnxxPFCby68wIUCNZBM/IZ0toOZMR/OjgC42SsC7GU W91vkfTfJ4xoeByhVya46jfKsfwVsYWK9AASAAjgqaRKPXGMBwpqYDNIv8RcnTGA dJX5kL2USkbYAhyUTtivwO+JQNOBmbXP72wPM1cmzYDgDGErHGuvlOPxZrc+H5Cq 3J9yf9ya4rcoqLbc3MBhhioO9r50LTvJMfrU7smPxsJLcusyCBQFiunHhRc6gWRt cNjoGeS5zWWBwwb3otgUgR/hKdbQQOQn16Ptbs/7bE0/zdQd7Urft5GHIf5k1qwl VAveRti8jMk95rCu1qqZBnwPQHzKHcE= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:45 2025 by rpki-client