$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa File: 3f70c066-2334-345c-8e8d-a890ceb66284.roa (raw, json) Hash identifier: jsWEdY2eOOuQ8KBONr60bplFXXqdhn9+85cEduaKLrc= Subject key identifier: 45:54:CC:9D:46:6C:43:80:F5:04:7B:8F:8D:40:8A:2B:E6:21:73:AD Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F3735C0426CE0A0F6493240 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:35:c0:42:6c:e0:a0:f6:49:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3455b468-09c8-4ae6-9807-e67899dd6dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:e4:5d:96:86:2e:29:27:c0:0b:18:44:de: 09:46:9e:3e:db:f5:72:44:a1:1f:73:9e:93:36:4c: ba:66:e6:28:64:12:22:ba:48:cc:fc:15:c4:4a:39: c0:32:f3:57:d2:99:72:c6:84:9f:d4:6c:bb:53:38: ac:7e:7e:76:df:78:bc:d1:14:f8:3b:2e:8c:0d:83: e7:55:36:13:88:cc:7c:02:09:d5:32:da:99:1f:76: c4:c2:c3:cb:fe:99:72:99:2b:a6:c6:01:fb:2d:dd: a3:f7:c1:fd:05:05:7f:5a:bf:4e:6e:cc:f5:59:7a: 73:db:18:7a:04:3b:69:f7:0a:36:02:b7:e9:75:11: 61:50:5b:64:78:f2:01:41:6a:df:e5:e1:3e:99:09: 2d:12:dc:a8:f2:01:af:34:c2:9a:03:45:8f:93:5d: 79:36:82:eb:4c:e1:5a:ac:64:0a:36:0b:b3:06:a8: f5:ea:d0:c1:56:63:3c:e7:80:d3:e3:e5:05:cb:9f: c2:46:65:08:30:95:21:d9:82:75:cf:81:53:ec:8e: d8:80:48:8a:5a:29:77:e7:ff:2c:05:44:32:35:dc: 4c:5d:13:33:2f:e3:71:99:2f:e2:bf:a1:75:1f:2d: 2a:23:46:39:f0:9e:09:ad:bf:39:c1:83:9d:b4:d5: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:54:CC:9D:46:6C:43:80:F5:04:7B:8F:8D:40:8A:2B:E6:21:73:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fe:10:f8:2c:c1:fd:33:b7:00:45:b9:23:fc:b2:0e:37:e4: 34:e9:c9:fa:24:cf:6b:0d:1d:4f:e5:fe:1e:f8:b7:9f:c9:f7: e9:99:67:81:b2:34:d7:a4:eb:51:89:0a:f8:cd:bf:b6:12:24: 48:4d:04:37:d0:48:b6:76:df:9b:eb:ff:ec:2b:b1:09:64:43: 43:64:ee:4c:ed:0b:90:63:50:11:73:39:d1:c5:a5:23:fd:e2: 83:5c:59:5f:c1:9d:30:8b:9b:2f:09:85:a8:dc:4b:f6:ac:43: 5f:86:4f:45:46:27:2e:c7:59:7a:90:cc:94:03:0c:e8:76:fb: 88:98:49:cf:ff:56:63:0a:8d:a7:26:22:9b:08:75:24:ad:b3: 29:7c:7b:d4:19:e7:79:16:c7:94:96:af:cd:34:64:b2:7b:49: f1:19:04:29:52:50:1f:c6:a1:31:fa:90:c0:83:58:68:34:fa: b1:ce:e3:85:ad:0e:7a:ed:f9:45:5c:ce:d2:b3:f9:ad:cf:4f: bf:fe:02:0a:45:6b:19:85:e6:53:4c:17:94:53:f5:a3:5f:88: a5:f7:71:66:65:e6:fe:62:6f:4a:d2:79:bd:50:0f:5a:49:94: 41:1b:23:08:4e:3d:c8:76:16:c9:a4:e7:1a:ab:4e:39:f3:bb: d2:b6:3e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzXAQmzgoPZJMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MzQ1NWI0NjgtMDljOC00YWU2LTk4MDctZTY3ODk5ZGQ2ZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOLkXZaGLiknwAsYRN4JRp4+2/VyRKEfc56T Nky6ZuYoZBIiukjM/BXESjnAMvNX0plyxoSf1Gy7Uzisfn5233i80RT4Oy6MDYPn VTYTiMx8AgnVMtqZH3bEwsPL/plymSumxgH7Ld2j98H9BQV/Wr9Obsz1WXpz2xh6 BDtp9wo2ArfpdRFhUFtkePIBQWrf5eE+mQktEtyo8gGvNMKaA0WPk115NoLrTOFa rGQKNguzBqj16tDBVmM854DT4+UFy5/CRmUIMJUh2YJ1z4FT7I7YgEiKWil35/8s BUQyNdxMXRMzL+NxmS/iv6F1Hy0qI0Y58J4Jrb85wYOdtNXyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVUzJ1GbEOA9QR7j41AiivmIXOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvM2Y3MGMwNjYtMjMzNC0z NDVjLThlOGQtYTg5MGNlYjY2Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr+EPgswf0ztwBFuSP8sg435DTpyfokz2sNHU/l/h74t5/J9+mZZ4Gy NNek61GJCvjNv7YSJEhNBDfQSLZ235vr/+wrsQlkQ0Nk7kztC5BjUBFzOdHFpSP9 4oNcWV/BnTCLmy8JhajcS/asQ1+GT0VGJy7HWXqQzJQDDOh2+4iYSc//VmMKjacm IpsIdSStsyl8e9QZ53kWx5SWr800ZLJ7SfEZBClSUB/GoTH6kMCDWGg0+rHO44Wt Dnrt+UVcztKz+a3PT7/+AgpFaxmF5lNMF5RT9aNfiKX3cWZl5v5ib0rSeb1QD1pJ lEEbIwhOPch2Fsmk5xqrTjnzu9K2PjE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:48 2025 by rpki-client