$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa File: f66dd74f-ed98-39a0-b948-3599c5d41e20.roa (raw, json) Hash identifier: AhlKXUfhHsAVd07cvVSJO24GjfWJTLaa2/gTcHiZh5s= Subject key identifier: E1:3E:53:D6:77:75:21:6B:C0:16:CD:54:C2:85:87:89:2B:36:39:EE Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584B5F3734FD1C03538D7C2D7CC0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36492 IP address blocks: 136.22.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:34:fd:1c:03:53:8d:7c:2d:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=645ea9d7-0a34-4bc2-ab0d-7adb6ad7660c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:d1:78:8a:2d:dd:09:ed:d2:cb:19:82:9c: 18:95:bb:05:2c:41:e1:ad:ad:b8:60:ec:61:a6:d9: 51:bf:44:1b:d6:77:19:a9:d2:f5:43:32:1f:73:27: 47:3d:e0:b0:b4:1f:30:a9:78:73:35:e0:67:e4:25: e6:c2:db:fd:f9:79:0e:13:1c:e2:48:a4:91:b6:cd: 08:c3:12:fa:a3:f8:06:b5:8f:c9:ea:88:9a:59:8a: 46:ae:89:09:02:68:0b:b2:82:d9:0d:e0:ac:ea:9a: 2f:83:b1:e6:c0:43:95:f2:33:23:f3:00:64:d1:35: 46:e1:99:39:03:44:d9:e8:eb:f9:a5:b7:c9:09:e4: 40:dc:de:dc:a4:16:b0:cc:5c:ca:63:45:60:69:63: d7:ea:1b:01:b7:11:3e:ba:0f:df:0e:db:a4:50:8a: 6f:fd:5f:65:a8:03:c8:bb:8f:3f:3b:40:56:14:c1: 23:6a:24:66:73:10:36:72:e8:1b:41:a1:90:ee:ea: 7e:9e:d0:2a:82:08:9a:29:08:ed:e0:71:ae:37:08: b5:a0:c8:b3:50:16:e5:3f:87:ba:83:01:3b:de:32: 5f:58:36:85:22:92:b3:04:54:5d:13:fd:b8:1d:a1: 4b:28:12:06:5a:ab:3a:e2:13:61:0c:d2:20:d8:ba: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3E:53:D6:77:75:21:6B:C0:16:CD:54:C2:85:87:89:2B:36:39:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:96:73:b4:82:52:b3:03:4f:62:19:8b:cf:79:8b:66:81:ca: 9a:85:b8:79:88:5b:c8:11:7b:67:a6:b9:1c:fa:84:7b:05:b2: 89:ed:90:2c:31:9f:26:ba:a1:ef:a9:37:d2:5b:1a:40:fa:b9: af:d8:0b:b8:e6:88:21:2f:ff:39:66:7e:a5:e5:a0:96:dd:b5: 45:6a:83:b2:f6:49:42:f7:02:33:24:a6:89:f6:98:44:24:18: 24:9d:39:10:12:72:80:05:90:e5:87:73:c4:fa:34:c4:64:e5: 02:2f:41:a2:0b:a3:2b:dc:13:f0:14:9c:c0:d7:19:8c:9d:f1: 59:8d:d4:1c:a9:51:ee:58:4c:c9:e6:21:d8:de:5d:6c:52:0c: 18:8b:31:33:e5:0f:96:f2:9f:35:34:43:28:2d:21:81:44:69: 5a:59:96:ec:3f:56:ac:4f:7c:83:03:3a:86:92:94:be:47:a0: 6e:3c:8c:e2:09:2e:bc:1b:b5:40:df:b8:60:2b:5e:b5:1d:e7: 14:26:c4:83:bb:e0:6f:04:69:fd:96:f4:9f:40:f4:88:4f:af: 46:78:f6:74:4c:cf:74:ba:fb:a9:98:30:f9:05:e1:91:dc:2e: 4c:bf:a7:52:9e:64:f7:56:bf:a2:1a:ec:51:63:54:21:6c:70: bc:1a:18:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzT9HANTjXwtfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NjQ1ZWE5ZDctMGEzNC00YmMyLWFiMGQtN2FkYjZhZDc2NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrPReIot3Qnt0ssZgpwYlbsFLEHhra24YOxh ptlRv0Qb1ncZqdL1QzIfcydHPeCwtB8wqXhzNeBn5CXmwtv9+XkOExziSKSRts0I wxL6o/gGtY/J6oiaWYpGrokJAmgLsoLZDeCs6povg7HmwEOV8jMj8wBk0TVG4Zk5 A0TZ6Ov5pbfJCeRA3N7cpBawzFzKY0VgaWPX6hsBtxE+ug/fDtukUIpv/V9lqAPI u48/O0BWFMEjaiRmcxA2cugbQaGQ7up+ntAqggiaKQjt4HGuNwi1oMizUBblP4e6 gwE73jJfWDaFIpKzBFRdE/24HaFLKBIGWqs64hNhDNIg2Lp1oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE+U9Z3dSFrwBbNVMKFh4krNjnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZjY2ZGQ3NGYtZWQ5OC0z OWEwLWI5NDgtMzU5OWM1ZDQxZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqWc7SCUrMDT2IZi895i2aBypqFuHmIW8gRe2emuRz6hHsFsontkCwx nya6oe+pN9JbGkD6ua/YC7jmiCEv/zlmfqXloJbdtUVqg7L2SUL3AjMkpon2mEQk GCSdORAScoAFkOWHc8T6NMRk5QIvQaILoyvcE/AUnMDXGYyd8VmN1BypUe5YTMnm IdjeXWxSDBiLMTPlD5bynzU0QygtIYFEaVpZluw/VqxPfIMDOoaSlL5HoG48jOIJ LrwbtUDfuGArXrUd5xQmxIO74G8Eaf2W9J9A9IhPr0Z49nRMz3S6+6mYMPkF4ZHc Lky/p1KeZPdWv6Ia7FFjVCFscLwaGAE= -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:33 2025 by rpki-client