$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa File: e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa (raw, json) Hash identifier: aC991kS+gHyTvHEfzCDZ3I88XeL4Ryk3sSn47ycyo6w= Subject key identifier: DF:BC:2C:F4:E8:E6:3B:32:DB:A8:C9:01:19:07:6E:D9:A7:7E:92:F4 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F373CE183D9D79FCE2D0400 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3c:e1:83:d9:d7:9f:ce:2d:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3f644851-8195-43a6-9a6f-04cc198aafa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:c9:1f:1a:81:27:d3:93:0c:70:d2:d3:80: 8c:9f:3d:01:b9:59:b2:4f:89:3a:10:99:5b:e3:09: 66:e0:f0:d7:5c:13:60:89:aa:32:64:dd:53:7d:f2: 55:c5:ff:23:1a:36:38:c0:04:2f:c7:4f:6f:b9:9a: 03:7e:21:82:1b:60:c2:29:cb:4b:78:66:52:ac:24: f5:91:bb:65:84:2e:f9:e0:c4:80:48:61:80:17:43: 3e:32:0b:32:9d:e2:c8:9b:1b:38:31:27:20:87:4a: b6:14:d6:03:9e:10:bb:7a:a9:76:48:c8:51:ed:49: b0:ef:95:b4:40:f4:40:b0:82:7c:59:ba:d3:dd:51: 0c:4c:1a:83:de:fd:a7:9c:88:e6:9a:35:01:0a:b2: 56:49:61:db:5d:03:cd:aa:1e:88:8a:13:e5:6c:7a: 0b:bd:90:92:47:20:a3:80:55:b5:24:d4:9c:2b:81: 73:e7:0e:00:9b:b3:6a:8f:4e:cc:82:6b:cc:ed:e3: 57:d8:5a:3f:59:62:7f:8c:fa:5b:78:f6:41:27:18: a6:08:d9:84:5b:12:11:2e:0d:e1:62:8d:3a:c0:53: b4:b8:25:3b:e6:cd:8b:2d:7d:ea:1d:51:e6:85:89: 57:27:3a:7c:02:c3:27:cc:5c:71:d6:c6:3e:31:98: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:2C:F4:E8:E6:3B:32:DB:A8:C9:01:19:07:6E:D9:A7:7E:92:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b9:f2:fb:e6:a5:ec:59:dd:87:5e:53:a9:ea:1e:d2:83:00: 43:56:d6:84:b3:b8:8c:32:0b:d3:c5:bb:4a:54:99:81:e2:11: 0a:a1:1b:88:cc:07:eb:ba:4e:a3:b2:3d:71:5c:90:44:2c:09: f3:72:52:4d:bd:17:cf:e2:69:00:6a:d3:03:ec:61:c8:fa:ca: 3e:8a:55:3a:56:a1:2a:8c:80:e1:61:5b:23:43:d2:b9:a4:30: 42:b6:db:68:a6:7f:c6:04:40:1a:e7:44:cb:ad:e3:37:34:44: 9f:90:e3:0c:c9:21:b0:74:70:40:8c:d4:1e:a5:31:4e:4d:a7: dc:15:d1:cf:ac:58:38:63:e9:d8:01:6d:16:2f:1b:e0:5f:f8: f5:a4:aa:12:fc:0e:ac:81:27:c3:09:c4:83:99:6e:99:57:7f: de:34:96:a4:a7:d7:52:a7:3d:97:f9:19:f7:7a:f6:c4:c6:5c: 5d:fd:6c:6f:7e:6a:d6:ef:41:dd:02:58:3f:6b:ad:b0:ff:18: b1:b4:e4:d5:f1:85:01:b6:6a:52:ec:8e:1d:97:86:fb:f6:65: 75:26:e7:b4:73:7d:d8:86:50:97:4c:1f:38:c2:c7:20:1e:5d: 94:35:59:ba:35:f5:67:76:5d:98:e4:15:d2:e4:84:f7:60:32: 2a:45:bd:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzzhg9nXn84tBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2Y2NDQ4NTEtODE5NS00M2E2LTlhNmYtMDRjYzE5OGFhZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPDJHxqBJ9OTDHDS04CMnz0BuVmyT4k6EJlb 4wlm4PDXXBNgiaoyZN1TffJVxf8jGjY4wAQvx09vuZoDfiGCG2DCKctLeGZSrCT1 kbtlhC754MSASGGAF0M+MgsyneLImxs4MScgh0q2FNYDnhC7eql2SMhR7Umw75W0 QPRAsIJ8WbrT3VEMTBqD3v2nnIjmmjUBCrJWSWHbXQPNqh6IihPlbHoLvZCSRyCj gFW1JNScK4Fz5w4Am7Nqj07MgmvM7eNX2Fo/WWJ/jPpbePZBJximCNmEWxIRLg3h Yo06wFO0uCU75s2LLX3qHVHmhYlXJzp8AsMnzFxx1sY+MZj3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+8LPTo5jsy26jJARkHbtmnfpL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZTUyZWMyYzktY2Y1OS0z YzdjLWExNTctYjhjYjM1NWY4ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC58vvmpexZ3YdeU6nqHtKDAENW1oSzuIwyC9PFu0pUmYHiEQqhG4jM B+u6TqOyPXFckEQsCfNyUk29F8/iaQBq0wPsYcj6yj6KVTpWoSqMgOFhWyND0rmk MEK222imf8YEQBrnRMut4zc0RJ+Q4wzJIbB0cECM1B6lMU5Np9wV0c+sWDhj6dgB bRYvG+Bf+PWkqhL8DqyBJ8MJxIOZbplXf940lqSn11KnPZf5Gfd69sTGXF39bG9+ atbvQd0CWD9rrbD/GLG05NXxhQG2alLsjh2Xhvv2ZXUm57RzfdiGUJdMHzjCxyAe XZQ1Wbo19Wd2XZjkFdLkhPdgMipFvc0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:52 2025 by rpki-client