$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa File: 8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa (raw, json) Hash identifier: dMrPrJ3Q8mRegjh4SPqWDlryXi6RaRPie59oUmvwWvU= Subject key identifier: 9D:2B:EE:48:DB:1B:59:83:45:A5:A7:B0:E5:87:41:29:0E:70:EF:F4 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F373B7E7338D2748F2811C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3b:7e:73:38:d2:74:8f:28:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=817c5a9d-13c1-4e31-8485-b6f1f5e9b911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:41:34:a6:a3:1e:30:3e:f7:0a:71:ef:a5: 1a:84:90:0c:14:3a:95:04:07:dc:66:be:24:5a:0e: 1e:c8:74:9c:27:40:76:2a:2d:75:98:bc:54:9e:a6: 42:be:40:67:68:6f:66:7b:b7:3f:60:18:3e:80:8a: a7:15:53:e6:d6:cc:3a:82:20:c2:d9:23:3c:fb:25: e2:b5:d7:51:97:e1:23:ca:ad:2a:ce:61:7a:8d:b8: 5f:7a:bc:2c:93:06:72:f6:db:0b:17:a8:c9:83:68: a0:c4:e7:1e:06:c9:62:50:41:f1:a7:67:80:ce:78: 70:92:0d:90:44:70:7f:ed:fc:22:13:63:4a:70:d6: 77:66:d9:51:bc:20:d5:3f:f3:2b:7f:7a:43:1f:3a: f6:f4:58:b0:a1:9a:7f:51:7a:28:a8:21:1e:74:87: 1f:c4:3e:e9:68:11:4e:5c:5e:b8:f4:5b:59:f9:6b: f0:3c:7e:88:3f:27:22:ae:58:1b:8c:3f:50:45:a0: 17:f1:12:bf:b9:cc:7a:3c:23:38:ce:c9:d1:9a:76: 85:a4:7f:cc:37:ce:4b:f2:e9:f6:ac:f8:a4:d1:1a: 4d:44:4d:cf:63:ff:77:c2:e2:d2:e2:fd:7a:70:c3: d2:bc:35:3b:4b:90:e6:59:8e:93:73:91:fc:57:a0: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2B:EE:48:DB:1B:59:83:45:A5:A7:B0:E5:87:41:29:0E:70:EF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e03e4c1-7a4d-3b74-8edb-6768c6d4c6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b3:5c:99:b0:11:9a:8c:34:14:ae:9e:f7:9d:78:32:76:cf: aa:39:ec:6d:b0:a0:67:7c:a8:ea:1c:6a:e3:a6:04:5a:d5:4c: bf:35:0e:bf:c6:4b:d1:d1:cc:a5:2b:98:ac:93:15:4f:f0:77: 50:36:bc:d7:4f:e4:73:19:ec:3b:95:c1:00:9f:94:4c:fd:e1: d2:aa:18:6e:32:f5:fc:56:80:e0:d5:34:dc:ab:23:f6:30:21: 4a:c3:ef:80:ee:32:0c:b2:c5:16:94:f7:db:16:ca:c3:02:b3: 46:48:40:ec:a0:22:a7:72:24:fd:c9:89:9a:70:68:20:8a:3c: c1:48:23:e9:00:82:b5:40:42:fb:08:35:c7:ec:81:ab:ae:96: b9:32:e8:21:f6:a7:f4:69:0a:7d:c9:c5:60:1f:eb:fb:67:4f: 31:22:44:2b:c3:be:5d:d3:1f:3d:27:7b:cc:7c:82:24:2b:ec: 42:30:79:d5:72:6a:a3:03:66:92:6c:9e:7e:4d:40:58:29:43: dc:15:23:d4:7b:f7:5e:b1:c4:be:30:9a:96:41:dc:82:0c:74: 99:f2:bf:ed:72:7f:3b:df:eb:07:80:71:43:94:1c:66:5e:39: 93:48:da:5c:97:9d:20:83:f4:f5:20:e4:ba:7c:f7:e0:b6:fc: 15:58:f2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzt+czjSdI8oEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ODE3YzVhOWQtMTNjMS00ZTMxLTg0ODUtYjZmMWY1ZTliOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijdBNKajHjA+9wpx76UahJAMFDqVBAfcZr4k Wg4eyHScJ0B2Ki11mLxUnqZCvkBnaG9me7c/YBg+gIqnFVPm1sw6giDC2SM8+yXi tddRl+Ejyq0qzmF6jbhferwskwZy9tsLF6jJg2igxOceBsliUEHxp2eAznhwkg2Q RHB/7fwiE2NKcNZ3ZtlRvCDVP/Mrf3pDHzr29FiwoZp/UXooqCEedIcfxD7paBFO XF649FtZ+WvwPH6IPycirlgbjD9QRaAX8RK/ucx6PCM4zsnRmnaFpH/MN85L8un2 rPik0RpNRE3PY/93wuLS4v16cMPSvDU7S5DmWY6Tc5H8V6Du6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0r7kjbG1mDRaWnsOWHQSkOcO/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOGUwM2U0YzEtN2E0ZC0z Yjc0LThlZGItNjc2OGM2ZDRjNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqzXJmwEZqMNBSunvedeDJ2z6o57G2woGd8qOocauOmBFrVTL81Dr/G S9HRzKUrmKyTFU/wd1A2vNdP5HMZ7DuVwQCflEz94dKqGG4y9fxWgODVNNyrI/Yw IUrD74DuMgyyxRaU99sWysMCs0ZIQOygIqdyJP3JiZpwaCCKPMFII+kAgrVAQvsI Ncfsgauulrky6CH2p/RpCn3JxWAf6/tnTzEiRCvDvl3THz0ne8x8giQr7EIwedVy aqMDZpJsnn5NQFgpQ9wVI9R7916xxL4wmpZB3IIMdJnyv+1yfzvf6weAcUOUHGZe OZNI2lyXnSCD9PUg5Lp89+C2/BVY8jE= -----END CERTIFICATE-----Generated at Tue Oct 21 11:33:49 2025 by rpki-client