$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa File: a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa (raw, json) Hash identifier: HNnPKSwvwYx5jIO1Io93t1+m5e6Xzgza63gtSxp9It0= Subject key identifier: 6B:9B:95:81:8B:E9:08:69:89:38:21:9F:F2:BE:1F:61:B0:8C:28:A3 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F37754A07DA88836F0E5E80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:75:4a:07:da:88:83:6f:0e:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=2d65a40a-411b-4fdb-8c68-2c2145be45aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:75:3b:ae:f5:05:fb:80:ab:7c:4e:31:15: 4c:af:e5:85:b0:4a:b7:0f:04:02:09:af:78:e5:4a: e9:86:06:06:12:3a:ef:a7:5c:17:a4:55:89:0b:50: a0:6f:19:75:68:54:70:e6:e5:19:74:45:23:85:cc: 1d:02:89:2b:ac:1f:f5:4f:aa:77:17:8a:88:f8:c1: f7:56:4f:0f:33:01:29:b9:91:ac:39:9f:a9:db:86: 70:9f:77:43:83:4b:a4:5f:44:39:01:33:ad:15:37: 27:a7:ef:ae:a1:77:62:64:dc:b2:da:47:c2:db:ce: e7:43:5f:a6:d1:69:3c:e8:24:74:cf:18:d9:bb:9b: b7:25:47:cd:b7:60:8c:9c:9c:f0:97:80:4d:c0:35: 97:c0:f5:1b:9a:3b:98:eb:9a:b5:0f:cc:ab:90:83: 12:8d:bc:32:69:00:3a:b4:0a:54:6e:34:c9:de:52: b9:74:25:d4:77:0b:a8:2a:d0:1e:db:f6:77:62:f5: 8c:4e:a6:3c:aa:0e:4c:7f:01:e7:10:00:3e:6d:69: 02:84:0e:a1:ac:20:09:6b:5f:ef:26:bf:67:d5:f9: d1:68:a6:44:9f:ee:92:78:25:7c:b0:85:3d:8e:0c: 5e:43:a7:3b:21:06:db:73:ed:92:26:66:08:5b:a1: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9B:95:81:8B:E9:08:69:89:38:21:9F:F2:BE:1F:61:B0:8C:28:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d6:24:b2:de:31:a5:55:02:71:e7:ff:c4:49:ec:8b:e3:d4: 33:d5:70:e6:72:f5:5a:c6:87:f8:d5:f7:0f:d2:2b:d1:82:51: f2:92:53:b6:4b:06:ae:6f:85:79:03:c1:81:12:f1:4b:bb:26: e5:b1:28:d4:51:b5:4b:9e:65:3b:50:6d:35:77:1b:1b:c0:78: ee:35:5d:ed:fa:ee:d5:7e:5f:b4:2b:27:51:06:25:ce:d9:bf: aa:19:20:ac:86:c8:f3:cf:68:6e:f4:6a:62:2a:1e:3f:0e:0c: 14:d6:81:ce:ba:4e:85:1d:53:55:da:db:8b:64:31:17:18:5e: e4:44:cc:e5:a6:57:5e:e1:ec:dd:f5:06:e9:82:02:b5:dd:0c: 42:09:18:f2:cc:09:4d:9c:78:38:ed:1b:c0:6b:fa:ac:f8:22: f4:33:0e:09:77:1e:ca:b5:04:9b:b1:b4:c2:fa:d3:7e:8f:78: 50:d1:c3:a0:ed:3f:97:2d:1a:c2:ff:f3:37:d9:1f:8b:b5:38: d5:0e:ba:80:fc:47:07:22:c0:3b:7e:58:ab:79:86:20:ba:76: c1:92:94:b9:d6:6a:21:4d:62:ea:86:fa:b5:d0:0e:64:4b:09: c9:3e:98:fb:da:cf:50:6c:16:c9:79:91:f4:28:62:49:81:8a: aa:54:61:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3VKB9qIg28OXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MmQ2NWE0MGEtNDExYi00ZmRiLThjNjgtMmMyMTQ1YmU0NWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+51O671BfuAq3xOMRVMr+WFsEq3DwQCCa94 5UrphgYGEjrvp1wXpFWJC1Cgbxl1aFRw5uUZdEUjhcwdAokrrB/1T6p3F4qI+MH3 Vk8PMwEpuZGsOZ+p24Zwn3dDg0ukX0Q5ATOtFTcnp++uoXdiZNyy2kfC287nQ1+m 0Wk86CR0zxjZu5u3JUfNt2CMnJzwl4BNwDWXwPUbmjuY65q1D8yrkIMSjbwyaQA6 tApUbjTJ3lK5dCXUdwuoKtAe2/Z3YvWMTqY8qg5MfwHnEAA+bWkChA6hrCAJa1/v Jr9n1fnRaKZEn+6SeCV8sIU9jgxeQ6c7IQbbc+2SJmYIW6F4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGublYGL6QhpiTghn/K+H2GwjCijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYTE3ZjkxNzgtMjE4MS0z YzMxLWIzOWItN2FhNmI5MWYwZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3WJLLeMaVVAnHn/8RJ7Ivj1DPVcOZy9VrGh/jV9w/SK9GCUfKSU7ZL Bq5vhXkDwYES8Uu7JuWxKNRRtUueZTtQbTV3GxvAeO41Xe367tV+X7QrJ1EGJc7Z v6oZIKyGyPPPaG70amIqHj8ODBTWgc66ToUdU1Xa24tkMRcYXuREzOWmV17h7N31 BumCArXdDEIJGPLMCU2ceDjtG8Br+qz4IvQzDgl3Hsq1BJuxtML6036PeFDRw6Dt P5ctGsL/8zfZH4u1ONUOuoD8RwciwDt+WKt5hiC6dsGSlLnWaiFNYuqG+rXQDmRL Cck+mPvaz1BsFsl5kfQoYkmBiqpUYfQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:33 2025 by rpki-client