$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa File: bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa (raw, json) Hash identifier: Y3qdjfpFkXm6ezW1hQee30cYxjTposYzRMqDVFndHFc= Subject key identifier: FA:98:B6:4C:E1:6A:A4:33:86:53:1E:6D:0C:BB:4E:DF:32:8A:9C:93 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CC2EF144BC91DF315F160 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:c2:ef:14:4b:c9:1d:f3:15:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=65a68586-d49f-4bab-b5d7-4f5559380ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:46:81:97:21:99:31:90:6f:3d:de:04:81: 4d:ee:cb:ff:23:15:e8:ab:77:e8:33:e2:66:64:ed: 53:92:80:07:75:8e:a9:d2:9c:75:4f:6a:f0:a4:b6: 94:ee:41:16:bf:b8:20:25:20:73:c1:70:ed:23:17: 53:88:1c:79:de:59:90:15:84:74:ea:64:a5:b5:94: 24:cb:0b:2a:bc:c7:b1:33:35:d7:e2:e6:f8:74:16: 12:91:9f:b2:e6:57:06:5b:70:45:1e:8e:58:43:aa: 83:a1:32:42:90:a8:8f:d4:38:5a:c5:5b:04:af:94: 95:da:cd:09:2e:13:c5:40:c9:e6:50:71:70:f4:d6: a9:6f:e9:6e:c7:b0:e0:ec:c9:72:09:ee:d3:f0:db: 6f:fa:3a:46:5e:61:32:af:be:81:be:32:40:7d:99: a4:ed:6e:02:3d:51:06:ca:d2:5e:eb:e2:0c:f3:3a: 1b:ff:89:e1:62:4b:f5:b6:8d:8d:a0:89:d2:3d:1d: 86:e2:9a:11:2b:b8:07:18:c1:bb:d4:b4:1e:36:99: 7b:e0:22:d7:e2:5d:4a:ff:1d:5b:4f:a5:c4:b2:7c: ba:09:a2:24:91:e0:18:c8:99:f2:9e:a4:94:f7:18: af:2f:53:68:13:f6:93:63:35:16:e0:d3:11:5e:6d: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:98:B6:4C:E1:6A:A4:33:86:53:1E:6D:0C:BB:4E:DF:32:8A:9C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:68:48:53:2b:c2:0f:f7:ac:ec:a7:24:7f:7c:95:4c:ac:fa: 1e:d3:7b:7b:7c:de:b9:0a:f3:37:0a:00:92:5e:bc:30:1a:4a: 2f:a3:0f:96:8b:f2:e7:42:79:db:5d:1c:30:d0:c9:48:8d:bc: 69:c8:fd:d5:5d:28:74:26:61:6b:9f:c7:88:b1:46:fe:f3:56: 55:ff:db:cb:25:f1:50:cf:8e:e0:30:d8:21:70:3e:22:a2:90: 6b:0a:05:f1:7e:6d:38:b3:e9:aa:8c:da:13:df:24:09:d0:45: f4:3b:1f:35:52:0f:b7:6b:6f:b1:79:5a:7c:b9:31:e7:d7:8f: 72:18:f2:37:d4:c7:b2:c8:8c:07:7d:80:93:18:8c:d9:7f:09: ec:41:f1:62:2f:83:31:ee:69:50:1f:88:a0:6e:9e:a1:eb:27: a3:be:51:40:17:e9:b5:57:dd:72:83:b7:52:c3:7f:8f:e6:fc: 31:67:03:78:0b:94:f8:f9:a1:ee:f5:cb:76:71:15:4b:10:1b: d1:47:1c:bb:08:95:6e:03:12:54:8c:83:92:84:70:86:90:bc: dc:50:5c:fe:fc:56:8f:f1:fa:09:c8:9d:77:bf:9b:3b:0b:f7: ec:a4:15:28:0a:82:97:a2:49:2f:c7:82:60:f5:23:32:e2:0f: e7:dc:2a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMLvFEvJHfMV8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjVhNjg1ODYtZDQ5Zi00YmFiLWI1ZDctNGY1NTU5MzgwY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHVGgZchmTGQbz3eBIFN7sv/IxXoq3foM+Jm ZO1TkoAHdY6p0px1T2rwpLaU7kEWv7ggJSBzwXDtIxdTiBx53lmQFYR06mSltZQk ywsqvMexMzXX4ub4dBYSkZ+y5lcGW3BFHo5YQ6qDoTJCkKiP1DhaxVsEr5SV2s0J LhPFQMnmUHFw9Napb+lux7Dg7MlyCe7T8Ntv+jpGXmEyr76BvjJAfZmk7W4CPVEG ytJe6+IM8zob/4nhYkv1to2NoInSPR2G4poRK7gHGMG71LQeNpl74CLX4l1K/x1b T6XEsny6CaIkkeAYyJnynqSU9xivL1NoE/aTYzUW4NMRXm2IcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqYtkzhaqQzhlMebQy7Tt8yipyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmZiYTEwNGMtYjUyNy0z NDg3LTliY2QtM2NkMTE3M2IxZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1oSFMrwg/3rOynJH98lUys+h7Te3t83rkK8zcKAJJevDAaSi+jD5aL 8udCedtdHDDQyUiNvGnI/dVdKHQmYWufx4ixRv7zVlX/28sl8VDPjuAw2CFwPiKi kGsKBfF+bTiz6aqM2hPfJAnQRfQ7HzVSD7drb7F5Wny5MefXj3IY8jfUx7LIjAd9 gJMYjNl/CexB8WIvgzHuaVAfiKBunqHrJ6O+UUAX6bVX3XKDt1LDf4/m/DFnA3gL lPj5oe71y3ZxFUsQG9FHHLsIlW4DElSMg5KEcIaQvNxQXP78Vo/x+gnInXe/mzsL 9+ykFSgKgpeiSS/HgmD1IzLiD+fcKvk= -----END CERTIFICATE-----Generated at Sat Sep 26 16:43:37 2026 by rpki-client