$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa File: 887fc515-3ce9-3d60-8af5-17e30ab01b19.roa (raw, json) Hash identifier: pFKZx3CKhzK4Xfxmd0NBOFsE0StJ+hz2sdXUGMrWL2k= Subject key identifier: 15:6E:31:71:82:6C:E5:8F:97:69:DE:57:46:4A:C9:6E:0B:D7:84:9F Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F4984D7AC1886CC0D7F603900 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:d7:ac:18:86:cc:0d:7f:60:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3f7a9b0-61b8-4ae8-9dbe-cb84168512c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:bf:42:df:94:96:da:20:b7:b9:27:d7:20: f0:f0:e6:b1:24:25:e0:22:b0:b2:71:a2:77:8d:6b: 61:1a:43:65:cc:0f:5c:82:63:55:dd:2c:dc:93:d5: 49:7b:07:1f:f8:3f:a9:e1:96:99:ef:b0:f9:29:96: 67:91:29:58:fb:ce:03:a4:38:04:24:50:25:2d:31: 14:24:6c:c9:61:48:b0:30:68:25:0d:cc:4d:50:74: 36:de:0d:14:69:d2:8b:12:1d:ff:99:c5:6f:d5:87: 19:8d:08:d6:05:ed:9e:9d:ea:81:8b:74:d8:18:39: 5e:1c:b2:8b:39:b3:82:0d:f7:02:8b:55:d6:5f:4a: 14:7c:97:95:18:2a:d8:38:f8:32:a3:b1:ef:7c:39: 60:ee:5d:34:4c:a7:12:f7:80:13:eb:4f:f3:de:c5: 44:30:16:7d:02:7f:4f:b7:ea:e3:b0:d3:2e:87:49: c4:31:ed:cd:99:f7:5f:49:2a:bc:11:fb:03:a2:55: 71:f9:3a:d9:59:7f:e0:69:3a:9c:0f:4f:09:f0:ec: 4c:ed:9d:09:27:bd:af:69:a8:6a:d7:0a:d1:55:71: fa:34:bd:10:52:c5:04:6d:f4:c6:24:26:e6:c3:1e: e4:b9:f0:90:c4:ec:7d:09:91:1b:8a:f7:b2:ed:f5: 9a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6E:31:71:82:6C:E5:8F:97:69:DE:57:46:4A:C9:6E:0B:D7:84:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3f:80:24:6c:29:d8:5c:25:ae:64:38:4b:d3:e0:70:3a:27: a9:24:ba:eb:07:ae:e5:da:a0:a5:ed:f2:60:af:66:b4:cd:3a: 08:59:62:95:c5:56:70:87:b3:2b:d8:6c:0d:e3:6b:1f:69:84: 9e:4d:91:93:62:95:7a:ad:1a:87:50:0a:1b:a9:ea:64:41:d5: c5:ac:49:72:4c:c6:3d:a6:1f:bb:a6:10:9b:16:b6:d4:60:31: 56:c6:b1:a8:f5:77:2b:84:43:0e:74:1d:32:3e:9e:84:18:1d: 22:1c:32:dd:37:37:fa:9b:76:13:3e:fc:54:b2:cd:55:fb:0f: 98:df:1a:c9:a2:6b:a9:23:29:e7:4c:b0:94:54:a9:c1:ee:9f: 9c:76:ac:21:0f:4d:d6:24:71:ac:76:25:8d:5a:91:98:18:82: e8:da:90:6f:d1:5b:f9:2c:02:92:d4:3d:14:89:d9:1c:e9:ef: e8:ba:cd:47:08:c4:ae:71:d7:1a:5f:37:81:e3:5f:df:7d:20: 8a:b2:bf:20:f9:9a:d6:54:1c:c6:60:0e:f3:fb:ad:1d:b7:00: 47:0c:37:22:9f:22:8a:80:24:aa:e5:a8:76:28:a8:71:75:f7: f7:43:f2:5f:1c:97:26:c9:ad:51:7d:9f:44:86:f7:41:17:dc: 58:06:0f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhNesGIbMDX9gOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNmN2E5YjAtNjFiOC00YWU4LTlkYmUtY2I4NDE2ODUxMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBa/Qt+Ultogt7kn1yDw8OaxJCXgIrCycaJ3 jWthGkNlzA9cgmNV3Szck9VJewcf+D+p4ZaZ77D5KZZnkSlY+84DpDgEJFAlLTEU JGzJYUiwMGglDcxNUHQ23g0UadKLEh3/mcVv1YcZjQjWBe2eneqBi3TYGDleHLKL ObOCDfcCi1XWX0oUfJeVGCrYOPgyo7HvfDlg7l00TKcS94AT60/z3sVEMBZ9An9P t+rjsNMuh0nEMe3NmfdfSSq8EfsDolVx+TrZWX/gaTqcD08J8OxM7Z0JJ72vaahq 1wrRVXH6NL0QUsUEbfTGJCbmwx7kufCQxOx9CZEbivey7fWaUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVuMXGCbOWPl2neV0ZKyW4L14SfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODg3ZmM1MTUtM2NlOS0z ZDYwLThhZjUtMTdlMzBhYjAxYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw/gCRsKdhcJa5kOEvT4HA6J6kkuusHruXaoKXt8mCvZrTNOghZYpXF VnCHsyvYbA3jax9phJ5NkZNilXqtGodQChup6mRB1cWsSXJMxj2mH7umEJsWttRg MVbGsaj1dyuEQw50HTI+noQYHSIcMt03N/qbdhM+/FSyzVX7D5jfGsmia6kjKedM sJRUqcHun5x2rCEPTdYkcax2JY1akZgYgujakG/RW/ksApLUPRSJ2Rzp7+i6zUcI xK5x1xpfN4HjX999IIqyvyD5mtZUHMZgDvP7rR23AEcMNyKfIoqAJKrlqHYoqHF1 9/dD8l8clybJrVF9n0SG90EX3FgGD2o= -----END CERTIFICATE-----Generated at Fri Sep 25 05:52:42 2026 by rpki-client