$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa File: bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa (raw, json) Hash identifier: kOKdds2076y73CcfpLhcOBXzaGQ8frw0qw2VpKWYOLQ= Subject key identifier: 02:63:99:09:D0:A5:58:B3:2A:8C:F7:E1:4B:C3:21:BF:BC:E6:B5:AC Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F3741960EACBE870495B8A0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:41:96:0e:ac:be:87:04:95:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=f5445d64-dc31-4ca5-a0d3-d7b15173e3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:68:35:ff:9d:95:ac:e4:d9:df:0b:e4:21: 7e:fd:cb:31:83:c3:62:f5:79:73:dd:c6:3a:b0:18: e1:12:b8:fe:82:e9:ce:7c:bf:49:c1:2c:c8:1d:32: f1:7e:40:ea:10:30:87:22:19:ef:77:24:d2:01:03: 13:4f:d3:a1:16:aa:10:1f:03:d1:04:60:e9:c6:6d: a6:2e:30:bd:13:b6:d4:be:f9:c4:7b:e7:fa:07:f5: a0:50:3c:58:25:44:a9:f0:eb:09:c7:5b:46:01:69: 08:39:a3:12:11:c9:37:0c:41:e4:41:7e:e7:45:ca: 4c:7d:5d:c0:1d:02:54:c9:a7:95:f8:21:87:ae:e8: a0:a1:d6:4d:ba:40:73:98:0d:f8:ff:6a:35:78:18: 9a:ef:80:e0:e0:1a:97:54:bc:41:a6:d9:1a:8c:21: 3a:6e:84:8b:4e:88:16:4d:b7:fd:69:22:e7:70:bf: b6:c5:e8:7b:4d:56:7c:ff:e8:69:ef:9a:ac:b4:07: 58:b0:8b:53:a9:0e:cd:0c:4a:bc:46:ad:f9:cf:17: d3:c1:c2:3d:53:ed:d4:eb:02:63:ee:e2:c8:9d:e8: 2f:db:64:be:b3:1f:2f:df:03:08:dc:5f:36:2c:e2: 3d:a7:c6:7d:16:d4:de:62:c2:d9:df:60:0b:2b:2f: 26:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:63:99:09:D0:A5:58:B3:2A:8C:F7:E1:4B:C3:21:BF:BC:E6:B5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:bc:a3:ca:8c:54:ee:79:52:8e:14:5e:48:9f:0d:20:f1:98: 04:ca:6d:00:f2:37:62:61:28:b4:d0:06:c0:a3:b5:bd:eb:64: 7e:ca:21:ee:af:76:23:f9:fe:95:c7:84:f3:5b:66:a2:6c:13: b2:49:d7:68:44:f6:08:74:b8:86:04:59:5f:94:14:17:b8:88: 15:fc:a3:86:6e:48:85:3d:c7:64:92:0c:94:e4:a7:b1:ef:4e: 65:1d:eb:0c:bf:d8:10:b4:6e:bc:46:16:a0:b5:bb:62:f4:4f: bf:cc:12:9e:16:44:0d:fb:31:18:e3:6a:d4:35:26:d8:17:85: aa:99:1b:0c:02:d2:ec:8c:3d:d7:e5:c6:e3:7a:81:ab:5d:52: 1d:49:74:61:86:b1:33:04:88:89:c1:b2:da:19:13:bf:5a:e3: fa:ba:10:3c:7b:f9:9e:fb:87:14:f8:e3:90:d1:95:ef:00:20: c1:2b:27:c7:3b:53:3e:09:cd:44:e0:be:18:2a:10:20:42:8d: 21:fa:4e:30:9e:43:51:b3:a6:01:07:0e:ff:bd:5e:ba:69:0f: 6d:53:a6:65:f5:98:90:82:a7:ca:74:ba:e0:4d:96:44:8a:25: b5:e6:a9:fa:4c:7e:7b:fe:68:eb:93:1c:5d:41:f6:ba:76:a2: 43:c8:69:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0GWDqy+hwSVuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjU0NDVkNjQtZGMzMS00Y2E1LWEwZDMtZDdiMTUxNzNlM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sxoNf+dlazk2d8L5CF+/csxg8Ni9Xlz3cY6 sBjhErj+gunOfL9JwSzIHTLxfkDqEDCHIhnvdyTSAQMTT9OhFqoQHwPRBGDpxm2m LjC9E7bUvvnEe+f6B/WgUDxYJUSp8OsJx1tGAWkIOaMSEck3DEHkQX7nRcpMfV3A HQJUyaeV+CGHruigodZNukBzmA34/2o1eBia74Dg4BqXVLxBptkajCE6boSLTogW Tbf9aSLncL+2xeh7TVZ8/+hp75qstAdYsItTqQ7NDEq8Rq35zxfTwcI9U+3U6wJj 7uLInegv22S+sx8v3wMI3F82LOI9p8Z9FtTeYsLZ32ALKy8mEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJjmQnQpVizKoz34UvDIb+85rWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmZiYTEwNGMtYjUyNy0z NDg3LTliY2QtM2NkMTE3M2IxZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe8o8qMVO55Uo4UXkifDSDxmATKbQDyN2JhKLTQBsCjtb3rZH7KIe6v diP5/pXHhPNbZqJsE7JJ12hE9gh0uIYEWV+UFBe4iBX8o4ZuSIU9x2SSDJTkp7Hv TmUd6wy/2BC0brxGFqC1u2L0T7/MEp4WRA37MRjjatQ1JtgXhaqZGwwC0uyMPdfl xuN6gatdUh1JdGGGsTMEiInBstoZE79a4/q6EDx7+Z77hxT445DRle8AIMErJ8c7 Uz4JzUTgvhgqECBCjSH6TjCeQ1GzpgEHDv+9XrppD21TpmX1mJCCp8p0uuBNlkSK JbXmqfpMfnv+aOuTHF1B9rp2okPIaW4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:33:07 2025 by rpki-client