$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81a83678-c17d-3d8e-aa75-e044c5a559d3.roa File: 81a83678-c17d-3d8e-aa75-e044c5a559d3.roa (raw, json) Hash identifier: BJ5yvaw8jLs4HToIc5LDCdzSiyKx7GowSjRUdK6lSn0= Subject key identifier: 51:4A:C6:9C:18:C8:E4:5E:AD:F5:6B:69:C2:5E:C7:3A:84:67:4B:E6 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F3769D203CA480F71152780 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81a83678-c17d-3d8e-aa75-e044c5a559d3.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:69:d2:03:ca:48:0f:71:15:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=24ca9cc1-56ff-4248-9a3e-2fe9ba76d5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:db:e3:29:89:72:8d:f8:72:7c:60:25:9a: 5f:2c:00:a3:64:87:78:4d:12:d4:da:93:e7:46:bd: 9e:0f:31:b0:40:02:bd:11:15:29:b4:1a:38:51:88: 30:52:4a:a4:4b:f9:15:3f:5a:72:b7:61:88:12:e3: a8:45:5f:e0:a9:40:43:f4:6e:8b:ee:35:17:b9:15: 99:45:25:9d:c6:51:27:13:ea:ce:51:1c:d7:d6:79: 5e:d2:19:9c:15:ba:7f:5d:a3:3e:44:58:d9:b7:87: 44:65:06:01:f7:dc:d4:0c:7f:f3:77:7f:b5:11:69: c3:08:d4:07:dc:7d:2b:1c:25:6c:18:41:16:5d:b2: 7c:81:a5:b8:29:fc:31:7f:06:81:42:8d:aa:77:4f: 3d:e7:13:4d:5d:81:19:63:e3:e2:29:71:0c:20:d3: d4:71:18:16:66:73:64:03:81:80:52:f4:c0:29:a9: 5f:69:93:c1:46:12:f9:14:4c:4e:0a:4c:13:a2:05: 16:25:4b:01:93:60:88:65:bf:10:b3:86:74:32:7e: a1:ba:fd:d0:80:6f:b7:70:f2:87:1b:e4:b8:ab:dd: 49:69:39:01:b9:f5:2e:1a:35:89:0d:e2:c1:fb:3c: d1:d6:d3:80:24:fe:82:5a:80:13:73:2f:ee:83:62: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4A:C6:9C:18:C8:E4:5E:AD:F5:6B:69:C2:5E:C7:3A:84:67:4B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81a83678-c17d-3d8e-aa75-e044c5a559d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:55:e2:db:2c:54:72:c8:f8:6e:89:51:60:4a:d6:93:7f:a1: cf:21:d7:ae:0e:97:bf:19:19:8a:cd:04:a6:a2:1c:fc:70:92: ff:d7:99:60:6b:4c:1a:39:24:58:b9:56:d0:5c:48:b1:cd:39: 15:6f:1d:d7:94:ca:51:71:07:66:34:0c:fc:1f:49:df:13:55: e5:e3:5b:1f:55:19:13:ec:57:94:ff:0b:18:63:68:3d:2c:45: ab:55:e4:8c:3b:cc:79:0c:34:ae:aa:ac:b0:61:05:1c:d2:03: e1:b4:64:95:31:f2:25:8c:bb:a7:f0:59:e2:77:45:fe:89:ad: ef:e5:50:60:d9:76:df:8c:cc:75:91:73:1a:6e:99:e5:ac:9e: a2:ca:dd:56:e4:f8:b0:ac:dd:b3:cb:1d:22:1a:9a:5c:49:d1: 59:75:eb:53:e5:82:2a:f4:7b:74:4c:23:97:6a:84:5b:14:e7: db:a0:9b:44:a5:35:fb:13:70:19:0a:ae:b8:e8:be:c5:77:9c: b1:af:b9:0e:73:fa:2f:da:59:72:58:10:5c:b5:22:96:c1:11: 11:a9:23:bd:87:4d:37:c1:a3:91:13:10:e2:88:03:20:4b:e7: 0f:79:71:b4:d3:2b:91:16:45:0d:8e:ea:b5:5e:3f:8e:9e:f3: 8f:a3:f3:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2nSA8pID3EVJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MjRjYTljYzEtNTZmZi00MjQ4LTlhM2UtMmZlOWJhNzZkNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDXb4ymJco34cnxgJZpfLACjZId4TRLU2pPn Rr2eDzGwQAK9ERUptBo4UYgwUkqkS/kVP1pyt2GIEuOoRV/gqUBD9G6L7jUXuRWZ RSWdxlEnE+rOURzX1nle0hmcFbp/XaM+RFjZt4dEZQYB99zUDH/zd3+1EWnDCNQH 3H0rHCVsGEEWXbJ8gaW4KfwxfwaBQo2qd0895xNNXYEZY+PiKXEMINPUcRgWZnNk A4GAUvTAKalfaZPBRhL5FExOCkwTogUWJUsBk2CIZb8Qs4Z0Mn6huv3QgG+3cPKH G+S4q91JaTkBufUuGjWJDeLB+zzR1tOAJP6CWoATcy/ug2L1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFKxpwYyORerfVracJexzqEZ0vmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvODFhODM2NzgtYzE3ZC0z ZDhlLWFhNzUtZTA0NGM1YTU1OWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVV4tssVHLI+G6JUWBK1pN/oc8h164Ol78ZGYrNBKaiHPxwkv/XmWBr TBo5JFi5VtBcSLHNORVvHdeUylFxB2Y0DPwfSd8TVeXjWx9VGRPsV5T/CxhjaD0s RatV5Iw7zHkMNK6qrLBhBRzSA+G0ZJUx8iWMu6fwWeJ3Rf6Jre/lUGDZdt+MzHWR cxpumeWsnqLK3Vbk+LCs3bPLHSIamlxJ0Vl161Plgir0e3RMI5dqhFsU59ugm0Sl NfsTcBkKrrjovsV3nLGvuQ5z+i/aWXJYEFy1IpbBERGpI72HTTfBo5ETEOKIAyBL 5w95cbTTK5EWRQ2O6rVeP46e84+j86U= -----END CERTIFICATE-----Generated at Tue Oct 21 11:33:52 2025 by rpki-client