$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa File: 3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa (raw, json) Hash identifier: mDUvCJJ2tpUml4fLK9CFZOtWy0Z60euSRLanfCjxp/E= Subject key identifier: 34:64:41:96:ED:7D:10:C4:97:45:EA:B2:32:0B:67:A4:0A:0F:F5:2B Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F37400344C1B16A5E28DD30 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:40:03:44:c1:b1:6a:5e:28:dd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=089f8cae-129c-4492-a552-3b8a797df7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:55:da:6c:55:bd:e9:26:6a:a7:fe:8b:78:56: 62:ca:e3:c3:15:a5:c3:f1:4e:8f:01:39:36:b3:e1: 2d:3f:dd:78:ec:a4:c4:b3:e5:cd:d4:70:d8:dc:59: a9:57:30:fc:32:ce:8b:64:34:99:50:99:6a:a8:dc: 58:f5:1f:f7:8e:a5:ec:c9:01:62:37:83:bf:85:1d: 92:32:19:38:9d:2e:d3:31:98:c9:40:07:5d:71:2f: 17:56:95:55:d7:94:ea:69:d4:67:5c:63:36:c6:42: 4b:af:92:f3:4d:ca:59:b6:6b:03:66:8e:5f:7c:5d: 8a:3a:1f:6e:78:b8:1e:9f:c6:7e:eb:50:de:b9:20: a8:8c:d7:bd:e1:1a:28:48:7d:64:28:5e:db:b8:f7: 9c:af:92:a0:02:93:b1:35:23:a8:60:a9:00:a8:ba: 2c:57:ec:43:e3:56:97:a0:73:8c:60:4c:c9:d6:d2: d8:71:66:3e:7b:93:64:d1:df:e4:ea:72:7b:93:21: 26:08:65:72:71:ba:8f:05:5e:87:44:44:e9:de:fe: 3c:55:a6:fb:a5:af:3a:ca:35:b6:74:e2:5d:b8:7e: 57:22:5d:a8:c5:d0:67:04:52:b0:d7:5e:23:a9:cc: 34:89:39:58:a0:6e:a9:02:00:f6:b5:4b:bc:1a:fa: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:41:96:ED:7D:10:C4:97:45:EA:B2:32:0B:67:A4:0A:0F:F5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9e:a6:09:fc:e4:a0:f8:f6:58:79:58:b8:f8:a9:9a:48:1d: 9b:f3:5a:4b:4d:4f:fa:a8:36:e6:76:d8:4e:36:2e:68:91:97: d4:50:b6:79:0c:a5:93:49:ce:e5:5d:96:63:a7:ba:b3:ca:13: 6c:c0:7c:55:ed:61:7d:85:f3:cd:1a:99:48:94:65:63:4a:de: 78:de:00:2e:96:c0:64:c7:43:df:cc:ff:b9:53:d8:7d:e9:6a: 75:b2:c2:e6:2a:e4:38:d8:1d:c7:5a:25:20:51:df:96:a6:68: 68:12:b8:25:aa:36:ff:8c:8b:83:43:4c:4f:13:7f:ad:cb:04: eb:cb:b9:53:f4:1b:4a:55:8d:14:10:ad:65:a8:24:c0:c5:74: 49:65:22:c9:8c:3e:ea:f9:04:90:e0:06:a9:5e:38:56:1f:0e: 73:0f:51:94:97:b1:e5:da:c0:70:ad:da:09:91:2e:60:4f:32: 48:98:ee:f9:97:80:80:4a:fb:1f:48:d3:6d:41:d2:a0:66:df: dd:d8:8a:0c:34:f9:08:1c:22:22:3f:63:4c:e8:39:a7:d1:e5: 84:64:31:12:d6:9e:89:15:e1:ea:9e:94:a2:67:82:f8:a2:86: 24:f0:19:78:ac:88:73:88:ac:f2:22:1a:95:63:6d:97:00:6f: dd:0a:b0:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0ADRMGxal4o3TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MDg5ZjhjYWUtMTI5Yy00NDkyLWE1NTItM2I4YTc5N2RmN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlXabFW96SZqp/6LeFZiyuPDFaXD8U6PATk2 s+EtP9147KTEs+XN1HDY3FmpVzD8Ms6LZDSZUJlqqNxY9R/3jqXsyQFiN4O/hR2S Mhk4nS7TMZjJQAddcS8XVpVV15TqadRnXGM2xkJLr5LzTcpZtmsDZo5ffF2KOh9u eLgen8Z+61DeuSCojNe94RooSH1kKF7buPecr5KgApOxNSOoYKkAqLosV+xD41aX oHOMYEzJ1tLYcWY+e5Nk0d/k6nJ7kyEmCGVycbqPBV6HRETp3v48Vab7pa86yjW2 dOJduH5XIl2oxdBnBFKw114jqcw0iTlYoG6pAgD2tUu8GvofFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRkQZbtfRDEl0XqsjILZ6QKD/UrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvM2JiN2MwYjUtYWQ2ZC0z YjNlLThkYjItZmRhOGQxODZiZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSepgn85KD49lh5WLj4qZpIHZvzWktNT/qoNuZ22E42LmiRl9RQtnkM pZNJzuVdlmOnurPKE2zAfFXtYX2F880amUiUZWNK3njeAC6WwGTHQ9/M/7lT2H3p anWywuYq5DjYHcdaJSBR35amaGgSuCWqNv+Mi4NDTE8Tf63LBOvLuVP0G0pVjRQQ rWWoJMDFdEllIsmMPur5BJDgBqleOFYfDnMPUZSXseXawHCt2gmRLmBPMkiY7vmX gIBK+x9I021B0qBm393Yigw0+QgcIiI/Y0zoOafR5YRkMRLWnokV4eqelKJngvii hiTwGXisiHOIrPIiGpVjbZcAb90KsIE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:29:48 2025 by rpki-client