$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa File: 82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa (raw, json) Hash identifier: Jgul3/GPoWWkmeIqhLz1qoJe4t0b1pv9Uo5En7Eo4xY= Subject key identifier: 13:D4:EC:FE:E5:89:E4:79:F7:33:F8:FF:82:83:3F:7C:C3:84:25:29 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F376FD6A96176A4C0A7BF80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:6f:d6:a9:61:76:a4:c0:a7:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=5f6b0db5-2ce1-45b9-ad76-5056e25da6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:34:c4:16:5a:46:7b:fe:62:6a:86:72:9f: 1a:ea:d3:31:fe:33:dd:47:a3:cd:53:a7:32:74:c0: 86:e0:c2:cb:6a:06:ba:70:99:59:7c:92:c8:6b:b7: c3:6a:ae:39:8e:76:45:8c:8c:fe:10:e3:52:83:ee: c4:1c:63:6f:9e:2f:45:37:4f:4e:00:5a:2d:74:be: ed:de:68:ed:60:fb:f2:6f:1b:de:4d:a6:34:ea:45: 1d:38:49:22:09:f0:7e:ff:ff:92:8a:c5:9b:26:06: 55:a3:ad:ff:66:36:1e:65:29:6f:49:e5:cd:dc:f9: f8:a7:17:7d:ba:f6:7d:11:66:c8:55:9d:b3:30:af: c8:8f:a0:50:4a:59:df:6a:52:40:81:16:e7:fc:f7: 94:f9:9d:fe:3b:6d:99:62:6f:a8:0b:bc:b2:71:0f: af:ad:f2:c3:9a:30:a8:8f:73:ca:76:a0:52:ef:97: 53:56:64:e9:5c:15:09:1c:05:96:18:d1:48:1d:d1: 87:6b:e8:53:25:ef:05:c3:6b:c3:ca:97:8c:9b:e1: f2:fc:6e:53:85:5b:f3:22:bc:70:67:eb:55:e0:d9: 97:82:35:d9:c4:67:9a:be:37:84:80:9e:50:6e:8d: 61:1a:eb:17:cb:2b:df:1b:1d:79:d9:f0:c7:3a:79: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:EC:FE:E5:89:E4:79:F7:33:F8:FF:82:83:3F:7C:C3:84:25:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fc:80:d1:15:51:02:40:22:bd:b7:3e:d0:cd:a7:57:e1:bb: 95:67:b3:11:e3:36:6b:09:d2:e1:96:7e:a2:ff:6e:17:f2:74: df:f7:c5:c4:1e:8b:7b:f8:57:9a:8e:76:a8:e3:22:3a:4c:3c: e5:e8:36:66:8f:c5:5e:85:e4:31:08:b2:58:c1:ff:3c:35:33: 2f:d2:6a:3c:f1:99:66:c5:c3:f5:2b:e1:ee:ff:fa:65:0e:be: ba:b6:84:3f:dd:14:02:8e:9b:f1:2d:32:ac:ca:6d:c3:4d:35: de:02:22:95:53:15:f0:7b:63:a3:a6:8f:6b:bb:f5:d7:d1:7f: 99:ac:74:ff:36:b1:18:3a:91:18:41:7b:93:2d:4a:c4:14:79: b1:57:be:3c:50:b4:52:f4:5f:8e:86:4b:da:cf:e4:7b:a8:ff: 8e:89:67:42:19:29:6c:db:c9:01:c2:d9:2e:7d:88:5a:a0:a0: 34:6e:95:67:0b:a7:ef:c3:60:c7:15:02:da:3d:90:8d:69:fe: da:a1:d4:c1:c9:6e:b0:97:9d:49:5a:28:ef:f3:7d:34:7d:0b: dd:18:fc:51:ba:1a:b3:d0:97:0a:aa:5c:d1:7e:5e:11:28:fb: 6e:a3:3d:ac:83:be:de:a1:23:78:b6:0a:b6:df:07:ea:d4:94: ac:77:99:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2/WqWF2pMCnv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NWY2YjBkYjUtMmNlMS00NWI5LWFkNzYtNTA1NmUyNWRhNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrE0xBZaRnv+YmqGcp8a6tMx/jPdR6PNU6cy dMCG4MLLaga6cJlZfJLIa7fDaq45jnZFjIz+EONSg+7EHGNvni9FN09OAFotdL7t 3mjtYPvybxveTaY06kUdOEkiCfB+//+SisWbJgZVo63/ZjYeZSlvSeXN3Pn4pxd9 uvZ9EWbIVZ2zMK/Ij6BQSlnfalJAgRbn/PeU+Z3+O22ZYm+oC7yycQ+vrfLDmjCo j3PKdqBS75dTVmTpXBUJHAWWGNFIHdGHa+hTJe8Fw2vDypeMm+Hy/G5ThVvzIrxw Z+tV4NmXgjXZxGeavjeEgJ5Qbo1hGusXyyvfGx152fDHOnkkNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPU7P7lieR59zP4/4KDP3zDhCUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODJhOGFjYzEtYWM1MC0z MzQyLWE4ZjgtMDc3NWU4ZTVhMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf8gNEVUQJAIr23PtDNp1fhu5VnsxHjNmsJ0uGWfqL/bhfydN/3xcQe i3v4V5qOdqjjIjpMPOXoNmaPxV6F5DEIsljB/zw1My/SajzxmWbFw/Ur4e7/+mUO vrq2hD/dFAKOm/EtMqzKbcNNNd4CIpVTFfB7Y6Omj2u79dfRf5msdP82sRg6kRhB e5MtSsQUebFXvjxQtFL0X46GS9rP5Huo/46JZ0IZKWzbyQHC2S59iFqgoDRulWcL p+/DYMcVAto9kI1p/tqh1MHJbrCXnUlaKO/zfTR9C90Y/FG6GrPQlwqqXNF+XhEo +26jPayDvt6hI3i2CrbfB+rUlKx3mTA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:52 2025 by rpki-client