$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa File: 3f70c066-2334-345c-8e8d-a890ceb66284.roa (raw, json) Hash identifier: ZAidyvmsl+xdyZhcxRj8C9c4y0NH55KmXzBLIE2nG5A= Subject key identifier: 69:65:88:64:2C:30:5A:38:8B:89:6B:F9:B8:C6:60:7F:56:64:4E:D8 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CAE1DAF08C2EE1A193D40 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:ae:1d:af:08:c2:ee:1a:19:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8321bf57-3aa1-4816-95dc-1e6b129c8750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:95:98:3f:32:c1:f4:c5:11:cb:e3:24:5d: 21:0f:88:5c:4c:bf:a9:af:d4:96:df:67:94:e9:ac: c6:66:a3:f1:4f:f6:12:c7:ee:d2:36:1d:c0:3e:54: 82:fd:52:83:d4:61:41:17:29:05:49:64:a3:a2:4d: 17:27:5a:40:ac:c8:1d:36:cb:ee:96:d5:26:22:d3: d7:77:85:7a:47:0b:68:46:f4:0c:9d:28:94:d2:e8: fd:71:b7:53:5f:2b:cc:10:02:fa:2c:2a:52:d4:78: 4e:3a:32:f3:bb:6c:6d:39:26:57:8f:5e:35:a7:09: f5:36:a1:9d:f3:55:64:b9:a9:3c:85:69:fc:6d:c4: 72:2b:ab:45:50:46:14:b5:38:81:ea:6c:9f:1a:4a: 0e:46:c4:76:1c:2f:0d:89:ee:a4:9a:e2:20:69:c0: 07:ea:2d:cb:e0:54:c7:09:4e:f6:71:f9:90:56:04: fd:1d:b2:99:5c:d8:55:f3:1f:4c:3f:13:78:8f:de: e8:57:50:11:12:b2:c1:33:6b:dd:dc:d3:51:6d:80: 9b:08:1d:fd:90:c2:0a:71:c3:cf:e5:c2:1b:57:8b: 89:d0:86:e3:db:60:a2:ee:e6:04:c2:a7:81:0d:c5: b7:c8:82:bf:77:f6:d9:17:b4:d8:9f:10:ee:41:7c: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:65:88:64:2C:30:5A:38:8B:89:6B:F9:B8:C6:60:7F:56:64:4E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:71:9c:de:5f:3b:c7:ba:1d:ac:fd:5c:b8:67:7a:6a:61:cb: 3a:7f:cd:ff:9e:b8:04:55:99:26:61:3d:b9:34:7e:39:4e:a5: 59:79:75:00:c9:b5:f2:3f:ab:9d:54:5a:06:89:93:39:0e:52: 35:ca:e4:32:95:48:00:23:78:db:35:e2:54:00:74:67:96:71: d4:a6:33:26:21:e2:6d:47:da:12:d2:9c:4a:ae:e2:c5:b5:3b: fa:81:ad:c2:cf:1d:e4:91:45:9a:59:5f:1f:b9:9f:7b:9d:9d: f8:83:1b:e0:dc:d0:ab:11:16:f0:c7:50:dc:bd:5a:12:79:77: 54:57:6b:6e:0b:69:72:5d:e7:40:b8:7a:cb:89:93:71:b6:34: f3:c3:4d:b3:fa:8d:ac:6c:8a:90:c8:3d:fa:9d:c1:b2:fd:87: c1:ba:02:23:75:62:95:24:3b:de:bd:0f:3d:ed:7e:42:81:d7: f5:3c:8f:63:e6:11:0d:45:23:f3:86:a4:65:00:dd:e4:a1:e6: 31:5e:8a:73:f2:f6:2d:57:71:3f:31:04:cc:9d:62:8f:03:77: b5:25:1d:c6:c6:e1:79:4b:2d:99:d7:73:11:b4:12:1e:b6:d0: 72:52:9d:64:00:f1:e2:8f:d6:47:ce:7b:56:c6:48:f8:c0:59: 31:0e:e8:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfK4drwjC7hoZPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODMyMWJmNTctM2FhMS00ODE2LTk1ZGMtMWU2YjEyOWM4NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4yVmD8ywfTFEcvjJF0hD4hcTL+pr9SW32eU 6azGZqPxT/YSx+7SNh3APlSC/VKD1GFBFykFSWSjok0XJ1pArMgdNsvultUmItPX d4V6RwtoRvQMnSiU0uj9cbdTXyvMEAL6LCpS1HhOOjLzu2xtOSZXj141pwn1NqGd 81Vkuak8hWn8bcRyK6tFUEYUtTiB6myfGkoORsR2HC8Nie6kmuIgacAH6i3L4FTH CU72cfmQVgT9HbKZXNhV8x9MPxN4j97oV1ARErLBM2vd3NNRbYCbCB39kMIKccPP 5cIbV4uJ0Ibj22Ci7uYEwqeBDcW3yIK/d/bZF7TYnxDuQXyLLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlliGQsMFo4i4lr+bjGYH9WZE7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvM2Y3MGMwNjYtMjMzNC0z NDVjLThlOGQtYTg5MGNlYjY2Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFxnN5fO8e6Haz9XLhnemphyzp/zf+euARVmSZhPbk0fjlOpVl5dQDJ tfI/q51UWgaJkzkOUjXK5DKVSAAjeNs14lQAdGeWcdSmMyYh4m1H2hLSnEqu4sW1 O/qBrcLPHeSRRZpZXx+5n3udnfiDG+Dc0KsRFvDHUNy9WhJ5d1RXa24LaXJd50C4 esuJk3G2NPPDTbP6jaxsipDIPfqdwbL9h8G6AiN1YpUkO969Dz3tfkKB1/U8j2Pm EQ1FI/OGpGUA3eSh5jFeinPy9i1XcT8xBMydYo8Dd7UlHcbG4XlLLZnXcxG0Eh62 0HJSnWQA8eKP1kfOe1bGSPjAWTEO6F4= -----END CERTIFICATE-----Generated at Sat Sep 26 09:52:39 2026 by rpki-client