$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json) Hash identifier: dGrhPIUwWnDkE+noA2XTeMb/8j4bgzBriDKs4DkCjKE= Subject key identifier: FC:4B:07:4F:97:CF:8B:CC:25:72:84:87:F3:E9:59:3A:F8:19:BC:42 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F375C66B3F4285227770B40 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:5c:66:b3:f4:28:52:27:77:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=2840a795-d690-4361-a69a-ce9fda61727e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:cd:09:5b:bc:e4:8a:22:ba:76:14:04:17: 50:93:ab:87:f4:8f:2b:46:63:50:f5:c5:78:74:54: 64:75:32:27:08:17:3f:bf:67:0b:9a:64:37:82:ad: bc:99:5c:6b:28:50:a7:ad:79:84:ab:eb:c6:08:87: 92:96:0a:b5:3b:99:62:3b:ba:2b:88:cc:46:bf:9f: 00:33:eb:ae:eb:dc:83:b8:0c:56:69:65:bc:a1:e4: fc:4b:6f:3f:d9:12:0d:39:8a:3f:e9:6f:cd:dd:dd: 73:57:89:0b:e7:7b:e4:c2:4d:f5:a6:c3:1b:89:fd: 54:2b:ba:01:71:f8:91:3e:ed:ff:45:dc:ec:55:6a: 57:d7:0f:f0:ae:8c:cd:ee:53:87:7e:91:2f:aa:68: c7:fc:4f:d8:8b:55:00:c8:97:a8:e9:f6:f7:a3:f9: 5c:3d:0e:66:2f:f0:d3:5d:20:5a:96:8c:08:88:43: b5:fc:ba:37:48:97:4e:17:4a:91:56:23:39:b9:0b: c5:00:41:c4:a5:66:5f:67:26:5b:19:49:fa:c2:0c: 53:3d:3a:15:58:34:25:68:45:0c:28:03:f7:3f:72: 3a:81:e2:d4:c7:f5:58:a7:7e:21:b6:1a:a9:e8:e8: dc:76:36:76:78:1e:76:e0:1a:2c:fb:4a:2a:23:e4: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4B:07:4F:97:CF:8B:CC:25:72:84:87:F3:E9:59:3A:F8:19:BC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1f:3e:e0:00:44:74:ae:47:b1:37:04:eb:b2:ae:55:f3:3b: 8c:70:3a:32:10:72:fa:5c:09:41:af:e9:f4:f6:35:3c:69:c0: 36:e5:1f:eb:57:7d:37:be:f6:47:ac:fb:4f:49:ec:4d:1d:d8: 5a:98:42:04:ba:21:30:6e:3a:ac:ca:71:13:0d:86:c7:fd:a3: 68:16:19:36:4d:9b:fc:90:1a:49:85:1c:f1:2a:e0:f7:4b:b2: d0:bb:5d:15:71:75:66:5a:e9:b8:9b:8c:29:b5:ae:4c:cd:85: ef:d2:84:12:62:d9:0a:01:da:22:76:56:45:a1:77:05:02:e0: 2d:f6:82:91:f3:f6:41:d7:de:ec:cd:7c:64:cf:05:0a:31:64: 11:32:c7:ad:b6:a8:d5:c3:ee:86:4e:8f:ab:70:91:29:95:62: 7c:b6:9a:fd:be:41:e5:f2:9a:50:ed:3d:d6:1d:5d:c6:f2:d9: 12:7e:eb:41:c5:bf:cd:e5:03:0d:b9:9c:e4:35:bc:55:fd:1c: 59:ec:f0:0f:0d:b0:bf:0a:df:3a:f9:ca:19:a8:24:3b:50:0b: f4:d5:43:46:99:45:89:5a:e9:f4:62:fb:d8:34:14:d4:80:45: b6:7c:ee:06:57:5e:78:fa:7b:6c:20:ff:83:53:6a:97:fc:6d: ea:b7:7c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN1xms/QoUid3C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Mjg0MGE3OTUtZDY5MC00MzYxLWE2OWEtY2U5ZmRhNjE3MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOzNCVu85IoiunYUBBdQk6uH9I8rRmNQ9cV4 dFRkdTInCBc/v2cLmmQ3gq28mVxrKFCnrXmEq+vGCIeSlgq1O5liO7oriMxGv58A M+uu69yDuAxWaWW8oeT8S28/2RINOYo/6W/N3d1zV4kL53vkwk31psMbif1UK7oB cfiRPu3/RdzsVWpX1w/wrozN7lOHfpEvqmjH/E/Yi1UAyJeo6fb3o/lcPQ5mL/DT XSBalowIiEO1/Lo3SJdOF0qRViM5uQvFAEHEpWZfZyZbGUn6wgxTPToVWDQlaEUM KAP3P3I6geLUx/VYp34hthqp6OjcdjZ2eB524Bos+0oqI+Q7twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxLB0+Xz4vMJXKEh/PpWTr4GbxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMmRlZmJiYzAtMzQ4NC0z Y2M0LWI0YTktOGU5ZDRjMTQxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwfPuAARHSuR7E3BOuyrlXzO4xwOjIQcvpcCUGv6fT2NTxpwDblH+tX fTe+9kes+09J7E0d2FqYQgS6ITBuOqzKcRMNhsf9o2gWGTZNm/yQGkmFHPEq4PdL stC7XRVxdWZa6bibjCm1rkzNhe/ShBJi2QoB2iJ2VkWhdwUC4C32gpHz9kHX3uzN fGTPBQoxZBEyx622qNXD7oZOj6twkSmVYny2mv2+QeXymlDtPdYdXcby2RJ+60HF v83lAw25nOQ1vFX9HFns8A8NsL8K3zr5yhmoJDtQC/TVQ0aZRYla6fRi+9g0FNSA RbZ87gZXXnj6e2wg/4NTapf8beq3fCs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:48 2025 by rpki-client