$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87241a4f-0bb2-38f3-a179-49552194fafd.roa File: 87241a4f-0bb2-38f3-a179-49552194fafd.roa (raw, json) Hash identifier: Tusgtv/SzJ6+19u5ANPEHJuCk5KrxYwauXOb75xTcsQ= Subject key identifier: BC:60:F1:42:29:30:D2:76:96:E9:A4:66:0A:05:39:86:35:DC:70:84 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F373F35DC1B0D0C0798D380 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87241a4f-0bb2-38f3-a179-49552194fafd.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3f:35:dc:1b:0d:0c:07:98:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=6ce888cf-7c7e-423a-a03d-06a9e129aaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:6a:7a:d8:31:8c:e0:5e:92:73:68:18:a8: 3f:d1:61:ef:99:98:82:56:65:69:72:06:e6:5c:ee: ae:2e:be:c3:23:72:e7:42:7b:fe:5c:de:b2:35:bb: 3b:bc:e9:10:6e:28:64:6e:08:89:07:ce:27:0d:73: 66:5f:cc:48:3f:0e:19:cb:19:51:5e:bf:7a:c2:98: 01:d0:a7:d5:3d:77:aa:fd:69:f0:2a:80:a2:be:5b: b1:fc:ce:65:60:94:2a:ca:5b:17:d8:24:c3:9e:41: eb:66:eb:99:8a:2c:0a:c4:ca:eb:7e:5f:31:79:0a: 9c:7b:22:c3:4f:fc:6a:3f:ce:5c:f9:94:d5:55:64: 42:1b:6d:38:8c:bf:46:1e:8a:27:79:0a:67:eb:3e: ab:6f:66:e7:a1:a9:2d:f3:c6:a1:ee:d9:e2:c4:dc: b7:e8:50:0f:91:f1:e6:3a:16:1b:69:4e:ce:ad:91: f8:df:e6:48:a7:a4:1e:58:81:04:c8:89:42:0d:9d: 9e:9a:33:dd:69:65:8e:12:90:82:e9:ad:7b:97:5c: f2:9a:8f:0d:0b:f4:c8:49:2a:ab:8b:fe:dd:b3:84: 9d:d6:58:31:62:93:6b:2c:74:7d:57:29:b6:fd:8a: 92:6a:bf:a2:df:24:e2:90:48:a3:ec:94:a1:ef:c3: f4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:F1:42:29:30:D2:76:96:E9:A4:66:0A:05:39:86:35:DC:70:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87241a4f-0bb2-38f3-a179-49552194fafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2d:04:fb:5b:54:45:7f:5f:26:83:67:f9:a6:e4:54:96:62: fb:2e:0a:1f:3e:51:92:ea:af:00:20:4e:1d:32:61:6e:d2:d4: 36:02:a4:cb:83:52:4d:06:f5:a6:e3:90:b7:74:f9:7a:27:e0: 38:e5:c6:d3:f8:26:64:42:dd:30:95:e8:cd:88:bc:e8:5f:6d: 80:e8:47:3f:af:b6:64:2a:d9:21:42:8d:29:1d:d0:d7:9e:8c: de:68:2c:23:f9:73:d6:d8:d5:f5:05:e8:42:8b:ac:8e:1c:c4: ef:a1:3e:24:f6:b3:c2:6a:89:ec:41:2c:41:df:7e:20:ac:18: 04:3a:e0:09:1a:fd:99:28:67:48:c6:a5:3e:77:35:02:f3:6c: 41:f8:9d:79:a3:47:69:c3:05:b4:60:15:09:3c:4f:5d:de:ce: 9b:97:f7:82:b5:dd:98:5b:38:c1:7a:66:1c:f1:62:36:49:86: 6c:ec:14:11:50:cf:c0:5a:84:6d:a9:3d:c5:67:9d:73:a0:0a: 28:e0:10:64:0b:e6:1d:dc:3d:1f:8c:4b:ad:3f:0d:53:4f:e7: 81:e7:b4:b7:16:24:f4:f4:fe:f8:de:b7:39:a3:ec:64:98:26: 6e:eb:bc:c1:d0:32:e6:a7:69:22:26:e3:4b:aa:e3:46:81:f9: a0:ce:27:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz813BsNDAeY04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NmNlODg4Y2YtN2M3ZS00MjNhLWEwM2QtMDZhOWUxMjlhYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnshqetgxjOBeknNoGKg/0WHvmZiCVmVpcgbm XO6uLr7DI3LnQnv+XN6yNbs7vOkQbihkbgiJB84nDXNmX8xIPw4ZyxlRXr96wpgB 0KfVPXeq/WnwKoCivlux/M5lYJQqylsX2CTDnkHrZuuZiiwKxMrrfl8xeQqceyLD T/xqP85c+ZTVVWRCG204jL9GHooneQpn6z6rb2bnoakt88ah7tnixNy36FAPkfHm OhYbaU7OrZH43+ZIp6QeWIEEyIlCDZ2emjPdaWWOEpCC6a17l1zymo8NC/TISSqr i/7ds4Sd1lgxYpNrLHR9Vym2/YqSar+i3yTikEij7JSh78P0QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxg8UIpMNJ2lumkZgoFOYY13HCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODcyNDFhNGYtMGJiMi0z OGYzLWExNzktNDk1NTIxOTRmYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4tBPtbVEV/XyaDZ/mm5FSWYvsuCh8+UZLqrwAgTh0yYW7S1DYCpMuD Uk0G9abjkLd0+Xon4DjlxtP4JmRC3TCV6M2IvOhfbYDoRz+vtmQq2SFCjSkd0Nee jN5oLCP5c9bY1fUF6EKLrI4cxO+hPiT2s8JqiexBLEHffiCsGAQ64Aka/ZkoZ0jG pT53NQLzbEH4nXmjR2nDBbRgFQk8T13ezpuX94K13ZhbOMF6ZhzxYjZJhmzsFBFQ z8BahG2pPcVnnXOgCijgEGQL5h3cPR+MS60/DVNP54HntLcWJPT0/vjetzmj7GSY Jm7rvMHQMuanaSIm40uq40aB+aDOJ8w= -----END CERTIFICATE-----Generated at Mon Oct 20 05:32:00 2025 by rpki-client