$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa File: dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa (raw, json) Hash identifier: mobVJeadjKo2UR/rFwrLgNzK3BhZm1cPeT0SVVwO/DE= Subject key identifier: 7B:B8:37:55:49:CD:27:C5:5F:2C:B7:23:78:67:C7:BB:5A:41:8A:E4 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F3767BC961AA8E4A6F5ED80 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:67:bc:96:1a:a8:e4:a6:f5:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=af1d2ba4-34e2-4e19-acc1-01414508a2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:43:22:88:09:1a:9b:41:59:e0:0f:97:c8: 83:50:38:2c:0b:c1:62:7d:c0:fc:f2:e1:a3:5f:9e: df:99:d5:0a:d1:00:cf:9d:6e:bb:3e:3d:22:c3:6e: 6f:fb:bb:72:dd:53:6a:e8:43:2f:8e:43:e2:65:e6: a7:d9:68:21:bd:73:82:04:01:42:06:c4:c5:51:88: b7:e5:7f:de:b0:88:7a:83:45:24:ac:ed:b6:2d:e4: 64:9e:0d:d8:40:2a:b2:c0:d2:bf:f1:61:32:9c:bb: b0:9b:90:9a:46:ab:fb:fc:6a:59:29:ef:68:cc:42: 8b:0e:aa:0a:74:94:79:0e:fd:f7:60:32:34:d0:15: 42:e6:d6:f4:20:6a:59:ad:04:2e:cd:de:6c:3b:fa: a8:94:4e:ec:8a:8c:27:91:cb:b7:6b:9f:e3:a6:6c: e7:8f:77:91:3c:98:e1:5e:92:84:a1:54:9d:ef:9e: 88:f0:6f:07:df:f0:f6:ba:92:23:da:a8:03:72:d7: b0:ab:82:36:af:67:fb:2c:04:6c:2e:7e:a3:af:ae: 26:2f:0a:b6:43:8b:b0:b6:e8:a0:66:52:8b:c9:63: 9a:38:c5:85:32:ee:17:3d:0d:c5:d9:0c:88:ed:59: 28:d2:f7:48:a0:a3:14:eb:57:09:ef:0b:e4:4c:ad: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B8:37:55:49:CD:27:C5:5F:2C:B7:23:78:67:C7:BB:5A:41:8A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f3:f9:c6:2a:22:37:2a:06:a6:c2:f9:7e:f8:0b:86:6a:52: 13:dd:f6:3d:a4:c6:44:64:0f:12:5d:29:8e:12:a3:aa:90:66: 05:c9:3f:7e:ff:0c:82:51:41:1b:72:47:ef:5d:99:ab:d3:59: 5f:91:3a:97:63:4f:2c:39:e1:e2:35:57:ae:ac:bb:d3:5c:45: 56:3a:f7:c6:3a:d4:80:c6:fe:24:ca:d5:63:bd:7e:5b:b1:f4: 04:7f:23:ad:cb:f7:db:28:38:38:6d:43:f9:67:01:98:6a:d9: d5:54:e9:f7:e0:78:96:81:df:42:72:57:a3:e2:e3:62:69:26: 66:36:c0:00:1d:1d:23:f1:0b:1d:73:59:28:06:7b:f8:5c:81: 7d:88:7c:db:cd:59:df:c9:2f:79:18:4e:d2:b3:ff:7b:af:2c: 6e:ec:37:94:e6:eb:4a:7c:91:a0:6b:23:0f:46:da:a5:1b:b8: 73:a7:1f:47:da:85:bf:1f:3e:a6:d8:e0:87:44:45:10:9c:6c: f3:d4:f1:aa:07:46:0f:d2:57:eb:48:ed:2e:83:2f:50:f0:90: 8a:7c:9b:8f:ac:84:bc:89:28:bb:9e:6c:75:7c:9f:1c:16:38: 9e:46:9e:03:33:1b:fc:a4:7b:8c:e3:3c:e2:04:eb:48:3d:72: 78:d5:21:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2e8lhqo5Kb17YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YWYxZDJiYTQtMzRlMi00ZTE5LWFjYzEtMDE0MTQ1MDhhMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAVDIogJGptBWeAPl8iDUDgsC8FifcD88uGj X57fmdUK0QDPnW67Pj0iw25v+7ty3VNq6EMvjkPiZean2WghvXOCBAFCBsTFUYi3 5X/esIh6g0UkrO22LeRkng3YQCqywNK/8WEynLuwm5CaRqv7/GpZKe9ozEKLDqoK dJR5Dv33YDI00BVC5tb0IGpZrQQuzd5sO/qolE7siownkcu3a5/jpmznj3eRPJjh XpKEoVSd756I8G8H3/D2upIj2qgDctewq4I2r2f7LARsLn6jr64mLwq2Q4uwtuig ZlKLyWOaOMWFMu4XPQ3F2QyI7Vko0vdIoKMU61cJ7wvkTK1Q4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu4N1VJzSfFXyy3I3hnx7taQYrkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZGZlOGI5NDMtNGQ4Ny0z NjIzLWI4N2EtOWI5MmUwNWEyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnz+cYqIjcqBqbC+X74C4ZqUhPd9j2kxkRkDxJdKY4So6qQZgXJP37/ DIJRQRtyR+9dmavTWV+ROpdjTyw54eI1V66su9NcRVY698Y61IDG/iTK1WO9flux 9AR/I63L99soODhtQ/lnAZhq2dVU6ffgeJaB30JyV6Pi42JpJmY2wAAdHSPxCx1z WSgGe/hcgX2IfNvNWd/JL3kYTtKz/3uvLG7sN5Tm60p8kaBrIw9G2qUbuHOnH0fa hb8fPqbY4IdERRCcbPPU8aoHRg/SV+tI7S6DL1DwkIp8m4+shLyJKLuebHV8nxwW OJ5GngMzG/yke4zjPOIE60g9cnjVIXc= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:39 2025 by rpki-client