$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa File: d68f8121-c948-33b4-a37c-8f46a2e590c6.roa (raw, json) Hash identifier: d02bQ/1m4tnpn+Iecjk4FWiSMWhOLmu6d4G+aqNHIqM= Subject key identifier: 0F:AE:97:94:DA:B9:12:9A:A7:C3:E3:FF:80:68:B1:8A:B9:DB:A2:53 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F37670E89FBF6BAA66A65A0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:67:0e:89:fb:f6:ba:a6:6a:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=dbf9ed13-06b8-4282-8a5d-3b2863dec5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3e:62:93:0e:13:4f:39:41:ba:5d:78:54:2b: bb:5e:94:44:58:e9:76:b0:51:b9:20:77:75:d8:c4: a0:27:67:a1:a3:3f:75:65:9d:a4:30:b0:b2:29:9e: 1d:cc:f3:52:21:f1:27:26:7d:ca:d1:e2:ea:3e:80: 70:7d:c9:3f:d3:88:e3:33:82:08:73:28:8b:4d:02: ec:c1:6e:8e:4c:db:14:a3:91:69:93:86:87:1c:22: d2:48:f9:ac:ac:b8:90:e8:0f:43:64:64:c4:9f:a0: c8:53:0f:40:c7:aa:82:8c:d3:60:d2:06:61:de:5b: e3:fc:b3:d6:20:80:19:d2:dc:d6:71:80:44:60:3d: 82:9d:88:ca:5b:df:23:ec:ed:0b:81:3d:fb:78:6a: 6a:b0:cc:f3:ca:e1:53:3c:2d:da:47:e9:46:30:ce: e0:a5:25:25:e0:e7:6f:b9:1e:54:2b:ee:c2:7f:3b: ca:f0:3e:05:84:33:c3:80:39:8a:6f:42:75:a9:21: 16:d4:b3:e5:06:af:94:0b:75:55:e2:a3:2a:8a:15: 94:f7:42:38:92:56:3e:28:57:89:2d:6f:2a:af:63: 58:f1:ba:f3:20:aa:7b:d4:29:79:78:e3:63:fc:66: 02:8e:48:0d:8c:c9:7d:9b:81:2b:9c:c2:58:e9:7a: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AE:97:94:DA:B9:12:9A:A7:C3:E3:FF:80:68:B1:8A:B9:DB:A2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d5:15:2f:29:a7:7c:0e:04:a1:49:70:4e:c6:ee:97:6e:63: dc:02:4e:87:27:e7:4c:0c:a2:57:90:80:a3:03:95:dc:6f:3d: ea:1e:ed:66:98:cc:f1:46:0a:ad:b5:7d:5d:f0:86:a0:aa:c5: 28:96:d8:16:fd:ff:f7:81:d0:4f:9d:1f:52:25:09:00:48:66: 9f:7a:35:fd:b3:6b:ee:0c:1c:8e:ba:ae:97:65:46:bf:03:01: 89:93:6b:8c:56:f1:ad:25:9a:09:3b:d9:d4:23:f9:d6:e2:9e: f7:39:63:54:6f:3b:bb:86:a4:47:0b:a9:72:e2:fb:7a:c8:75: d6:67:c4:c4:04:00:da:38:7b:8d:88:4b:e9:b7:12:8c:2a:4b: bd:2d:30:39:a6:b2:b3:b7:5e:93:6a:73:42:77:7b:e0:e6:48: c4:16:55:73:2b:19:10:6c:30:44:55:c5:37:27:2d:4d:5e:4c: 1c:20:e7:03:b1:17:79:07:19:60:c2:17:74:cc:de:f5:26:46: 8b:cd:a8:0a:7f:18:82:2e:5b:51:35:0d:1b:29:6a:b7:b7:70: ac:03:77:f3:61:9c:18:60:0d:55:25:bd:5e:de:8c:92:3b:3b: f1:8a:60:cc:c2:4a:79:75:a8:0b:a6:dc:c4:19:30:f5:0e:65: 78:f1:39:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2cOifv2uqZqZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGJmOWVkMTMtMDZiOC00MjgyLThhNWQtM2IyODYzZGVjNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9z5ikw4TTzlBul14VCu7XpREWOl2sFG5IHd1 2MSgJ2ehoz91ZZ2kMLCyKZ4dzPNSIfEnJn3K0eLqPoBwfck/04jjM4IIcyiLTQLs wW6OTNsUo5Fpk4aHHCLSSPmsrLiQ6A9DZGTEn6DIUw9Ax6qCjNNg0gZh3lvj/LPW IIAZ0tzWcYBEYD2CnYjKW98j7O0LgT37eGpqsMzzyuFTPC3aR+lGMM7gpSUl4Odv uR5UK+7CfzvK8D4FhDPDgDmKb0J1qSEW1LPlBq+UC3VV4qMqihWU90I4klY+KFeJ LW8qr2NY8brzIKp71Cl5eONj/GYCjkgNjMl9m4ErnMJY6XoUFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+ul5TauRKap8Pj/4BosYq526JTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZDY4ZjgxMjEtYzk0OC0z M2I0LWEzN2MtOGY0NmEyZTU5MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbVFS8pp3wOBKFJcE7G7pduY9wCTocn50wMoleQgKMDldxvPeoe7WaY zPFGCq21fV3whqCqxSiW2Bb9//eB0E+dH1IlCQBIZp96Nf2za+4MHI66rpdlRr8D AYmTa4xW8a0lmgk72dQj+dbinvc5Y1RvO7uGpEcLqXLi+3rIddZnxMQEANo4e42I S+m3EowqS70tMDmmsrO3XpNqc0J3e+DmSMQWVXMrGRBsMERVxTcnLU1eTBwg5wOx F3kHGWDCF3TM3vUmRovNqAp/GIIuW1E1DRspare3cKwDd/NhnBhgDVUlvV7ejJI7 O/GKYMzCSnl1qAum3MQZMPUOZXjxOb0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:51 2025 by rpki-client