$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa File: b2073852-2c85-39c7-bece-da234b549592.roa (raw, json) Hash identifier: 281HE3Oi3QFBWtCdihSmQQSFth96r9QZqsCE4K5b1xo= Subject key identifier: 06:49:3E:1D:5D:28:23:C4:DA:D6:17:AF:83:AB:D0:36:37:FB:08:B4 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F376E27A62260FE3AA922D8 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:6e:27:a6:22:60:fe:3a:a9:22:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c9ea0996-d969-4eac-b39d-180c1aa47ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:1d:c1:f0:44:ea:a4:ab:b4:4c:92:26:e7: f7:45:a1:0f:a2:f7:9b:81:e9:b1:05:5b:10:79:88: c9:58:76:48:90:8a:54:d9:a2:64:90:74:51:5a:0c: 2c:ed:80:35:63:fb:c1:e2:19:19:d9:fe:3b:13:9e: b3:3c:17:d0:f1:d1:0f:8d:0f:28:0a:73:17:53:5c: fe:cd:fe:29:50:66:0b:61:44:f5:63:6f:03:ff:95: 51:3b:c1:f0:1e:46:f5:df:63:c3:07:5e:1b:d6:f3: 12:79:b8:cf:a4:95:b4:6f:d2:96:70:10:95:8f:7e: 12:ce:28:09:ba:40:a1:7b:62:1e:09:4c:78:5c:f8: 00:60:8d:03:23:b1:86:d5:78:7b:e7:a1:05:e4:03: 23:5b:ef:6b:c0:b1:30:18:eb:c3:ad:21:b3:30:09: 92:ef:46:82:9d:a0:b5:97:e4:e4:de:82:f8:05:56: 01:e4:63:ed:7f:6a:de:29:24:5d:93:a2:e3:a3:30: 8c:b8:9c:0d:35:2e:d9:01:df:70:ed:d8:ee:ca:27: 58:b2:1e:66:5e:0e:f8:bd:03:11:1f:d5:fd:63:b4: 21:49:24:4e:41:03:40:5c:8b:8d:f8:47:4f:99:3d: b5:02:64:8a:77:f7:bd:9b:b9:59:f0:4a:63:e8:c4: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:49:3E:1D:5D:28:23:C4:DA:D6:17:AF:83:AB:D0:36:37:FB:08:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6a:8e:e1:bd:9c:c0:40:11:b6:e5:9a:7a:13:12:0d:6b:97: ea:2b:0f:24:5b:2f:2a:33:ff:1d:28:0f:98:32:b3:5a:73:89: 04:22:9c:da:89:3f:08:b4:ec:18:58:49:1f:b9:c5:27:64:52: 86:14:2b:33:47:e5:9e:29:b6:e2:2c:bc:25:03:0b:c0:33:19: d6:9b:c6:50:63:54:43:eb:bb:06:ce:d6:e6:9e:d6:e1:2f:8d: 89:4b:cb:b3:e9:ef:e7:e6:f4:e6:ec:be:5a:24:2f:2c:58:d7: 03:50:75:dd:cb:2c:3a:3f:39:54:bc:d3:9d:8b:1b:7d:72:32: 4c:5f:65:84:f6:27:ff:3f:61:fa:c9:4c:44:09:b4:da:3f:cf: 5c:18:54:e4:a8:91:db:57:5e:6e:90:be:ff:02:e2:00:a9:4b: 65:62:98:e9:2f:b8:5d:38:6b:11:94:74:bd:19:bc:49:10:db: 8e:b3:bb:4f:54:bc:37:84:f8:fd:06:d5:0b:92:1c:06:11:8e: 8f:c1:b5:d8:23:30:90:c6:c4:b8:3b:c3:10:09:88:33:3e:07: 5c:70:d3:87:cc:c1:de:51:8a:99:2a:0f:c9:28:40:60:e8:59: 8d:c9:37:a5:f2:d2:89:b5:4f:df:ac:c5:11:99:b3:23:7e:9e: 9e:e5:99:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN24npiJg/jqpItgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YzllYTA5OTYtZDk2OS00ZWFjLWIzOWQtMTgwYzFhYTQ3Y2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphEdwfBE6qSrtEySJuf3RaEPovebgemxBVsQ eYjJWHZIkIpU2aJkkHRRWgws7YA1Y/vB4hkZ2f47E56zPBfQ8dEPjQ8oCnMXU1z+ zf4pUGYLYUT1Y28D/5VRO8HwHkb132PDB14b1vMSebjPpJW0b9KWcBCVj34SzigJ ukChe2IeCUx4XPgAYI0DI7GG1Xh756EF5AMjW+9rwLEwGOvDrSGzMAmS70aCnaC1 l+Tk3oL4BVYB5GPtf2reKSRdk6LjozCMuJwNNS7ZAd9w7djuyidYsh5mXg74vQMR H9X9Y7QhSSROQQNAXIuN+EdPmT21AmSKd/e9m7lZ8Epj6MRwCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZJPh1dKCPE2tYXr4Or0DY3+wi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjIwNzM4NTItMmM4NS0z OWM3LWJlY2UtZGEyMzRiNTQ5NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFqjuG9nMBAEbblmnoTEg1rl+orDyRbLyoz/x0oD5gys1pziQQinNqJ Pwi07BhYSR+5xSdkUoYUKzNH5Z4ptuIsvCUDC8AzGdabxlBjVEPruwbO1uae1uEv jYlLy7Pp7+fm9ObsvlokLyxY1wNQdd3LLDo/OVS8052LG31yMkxfZYT2J/8/YfrJ TEQJtNo/z1wYVOSokdtXXm6Qvv8C4gCpS2VimOkvuF04axGUdL0ZvEkQ246zu09U vDeE+P0G1QuSHAYRjo/BtdgjMJDGxLg7wxAJiDM+B1xw04fMwd5RipkqD8koQGDo WY3JN6Xy0om1T9+sxRGZsyN+np7lmfI= -----END CERTIFICATE-----Generated at Tue Oct 21 11:40:35 2025 by rpki-client