$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa File: a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa (raw, json) Hash identifier: DPQojkD5sI4S6pr4p4ifJD6GKzGPC0L2RPk2uU9ZYNc= Subject key identifier: 88:78:A1:43:74:0D:73:76:E9:B3:DB:F4:25:78:06:24:E4:3C:15:89 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F3730AAAEF5B06020CD7AC0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:30:aa:ae:f5:b0:60:20:cd:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=b8b97dd6-9005-4b2e-af46-e3f1d9f18d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:0c:19:d8:ba:a2:8b:d0:15:cd:e5:bb:72: 7c:eb:c6:d6:53:6a:d0:22:76:d9:00:47:ff:52:99: 3c:76:3c:c3:df:11:2a:98:8e:c0:63:b0:24:eb:22: eb:4b:58:7d:3f:32:6a:15:55:ee:43:e0:be:98:65: dc:4c:3b:91:59:dc:9a:00:c2:3f:08:3f:a5:69:01: 18:5a:85:77:35:cd:82:3a:99:88:e5:b4:b3:40:6f: 91:79:db:a9:2a:92:8f:c8:5b:ff:9e:9c:bb:e1:ca: 16:66:d7:00:bc:38:8f:1a:3a:33:e3:21:72:79:77: f6:f2:cf:72:c0:1e:5a:61:25:60:37:a1:61:cb:0d: b9:cd:25:45:ef:b5:e7:56:9e:23:a1:37:e8:aa:08: 0b:66:fb:8b:43:4d:f0:b3:01:3f:cc:2e:24:55:5f: 48:d5:01:dd:a6:55:86:a4:18:81:3d:2b:07:a3:29: 6f:5b:a6:45:74:fd:74:c5:a2:ed:cd:89:44:cf:84: 4e:b8:ad:ed:d1:85:df:be:75:db:93:58:b7:52:a8: 7f:6f:11:17:54:a0:15:24:87:25:41:bf:df:14:48: a2:ce:50:cb:4c:50:00:8b:cb:20:66:99:05:f2:3c: 3e:cb:71:70:c2:18:c9:d7:d9:49:bd:63:3d:45:b3: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:78:A1:43:74:0D:73:76:E9:B3:DB:F4:25:78:06:24:E4:3C:15:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:85:7e:07:35:4a:36:3d:0b:d3:a5:97:81:00:0d:8e:69:b7: 91:dc:96:e6:e7:82:ca:e4:d8:e5:73:c1:ab:75:bd:7c:90:bc: d9:21:b6:0f:10:e5:7c:6f:fa:31:98:b5:cd:0f:0f:e2:bf:0d: 20:38:d1:9c:5c:1e:f9:11:46:4d:c1:30:90:15:47:78:2c:23: 72:95:21:32:f5:6d:97:bd:af:54:9c:ab:63:49:c5:b4:d1:61: 45:4f:08:94:47:ac:56:ca:42:20:1a:c3:0c:59:e3:75:0a:b0: 66:77:4c:d8:18:94:66:69:0c:ca:f3:4b:2d:f2:e8:a8:4b:57: 25:77:19:dc:8a:22:8c:75:f5:9c:dc:a2:15:b3:5c:07:b0:7e: 2c:33:21:2f:b8:f6:23:72:6f:0d:fb:e1:f2:16:f5:07:88:cd: e9:23:bb:87:65:c9:e2:47:ad:de:60:9a:5b:58:2c:8c:73:f0: 76:4f:44:d6:09:b4:60:96:b6:1f:f9:ef:63:2a:23:5f:37:74: 0b:03:24:9c:6d:b7:aa:37:5b:37:a8:e0:7e:91:56:89:20:5c: 71:57:c8:be:bf:da:c1:5e:75:ae:11:1d:59:30:72:89:cc:f6: 37:b5:67:8c:0a:16:57:a6:e6:3d:20:2c:d9:78:71:80:1b:ad: 06:15:45:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzCqrvWwYCDNesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YjhiOTdkZDYtOTAwNS00YjJlLWFmNDYtZTNmMWQ5ZjE4ZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDsMGdi6oovQFc3lu3J868bWU2rQInbZAEf/ Upk8djzD3xEqmI7AY7Ak6yLrS1h9PzJqFVXuQ+C+mGXcTDuRWdyaAMI/CD+laQEY WoV3Nc2COpmI5bSzQG+RedupKpKPyFv/npy74coWZtcAvDiPGjoz4yFyeXf28s9y wB5aYSVgN6Fhyw25zSVF77XnVp4joTfoqggLZvuLQ03wswE/zC4kVV9I1QHdplWG pBiBPSsHoylvW6ZFdP10xaLtzYlEz4ROuK3t0YXfvnXbk1i3Uqh/bxEXVKAVJIcl Qb/fFEiizlDLTFAAi8sgZpkF8jw+y3FwwhjJ19lJvWM9RbMpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh4oUN0DXN26bPb9CV4BiTkPBWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYThiNmZjNzgtNmEwYy0z MDY2LWEzMmMtYTllZGI0N2Y1YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+Ffgc1SjY9C9Oll4EADY5pt5Hclubngsrk2OVzwat1vXyQvNkhtg8Q 5Xxv+jGYtc0PD+K/DSA40ZxcHvkRRk3BMJAVR3gsI3KVITL1bZe9r1Scq2NJxbTR YUVPCJRHrFbKQiAawwxZ43UKsGZ3TNgYlGZpDMrzSy3y6KhLVyV3GdyKIox19Zzc ohWzXAewfiwzIS+49iNybw374fIW9QeIzekju4dlyeJHrd5gmltYLIxz8HZPRNYJ tGCWth/572MqI183dAsDJJxtt6o3Wzeo4H6RVokgXHFXyL6/2sFeda4RHVkwconM 9je1Z4wKFlem5j0gLNl4cYAbrQYVRSM= -----END CERTIFICATE-----Generated at Tue Oct 21 11:28:05 2025 by rpki-client