$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa File: ecf5042d-a001-3491-a272-514979cae084.roa (raw, json) Hash identifier: kauWR26Lw7gYlyvYrHcYJ7WIpgX+5MO6Z7psFJXBfjk= Subject key identifier: 87:6A:21:F2:E1:1A:49:7E:89:A4:39:EB:ED:17:EF:C9:D5:CD:47:3C Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F37671F5769E6CEE8E71CA0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:67:1f:57:69:e6:ce:e8:e7:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=cc41cbc2-2a9c-420f-b8c7-b158863421f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:cd:f6:ed:f1:55:e0:39:ee:d2:3e:51:6b: af:18:09:15:37:ae:80:86:48:9a:df:09:ca:24:46: a1:b7:a8:7e:04:11:24:d9:4d:98:8f:fa:e4:6f:21: ad:6b:a8:37:b1:97:2d:43:76:c0:85:6d:11:13:a6: 25:58:4d:76:ab:08:75:c3:d3:ac:2e:9c:bb:cb:cb: 11:2d:bd:a7:2f:19:80:f0:11:03:20:39:91:7a:94: ca:c1:21:26:58:ca:82:88:5e:0f:b7:6f:1d:9f:30: f9:29:30:3d:c3:42:4a:1b:d7:72:19:59:fd:66:fc: f4:18:6e:54:91:a0:49:90:a4:d5:d0:1c:86:0a:55: d5:ca:6a:03:57:38:8e:31:21:0d:08:49:86:4d:3a: af:7a:34:f3:c5:b7:5f:1a:4b:91:49:bf:19:59:20: 4c:6e:1d:a4:89:21:f0:84:b2:bf:a0:a0:5b:13:ef: 4c:a3:18:4d:85:ce:bb:1f:00:6d:32:cb:e6:b2:eb: 28:ab:d2:4e:db:52:d5:1c:8c:fb:8d:d8:f5:9a:52: 7e:eb:f3:9d:3a:23:60:4f:f5:24:47:03:37:96:a5: b7:6a:d2:b1:a8:94:df:82:dc:a0:f5:f9:95:05:e0: 4a:ac:3a:bd:8a:25:eb:76:f5:f4:e9:15:26:6e:0b: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6A:21:F2:E1:1A:49:7E:89:A4:39:EB:ED:17:EF:C9:D5:CD:47:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:90:e2:6c:ab:a0:f8:6c:bd:90:1a:df:9b:e7:7d:a6:ea:ce: bd:86:ae:e1:22:9c:64:dd:f7:b5:b1:06:fc:45:6c:36:93:0c: e4:d7:1e:66:55:74:62:58:bc:7d:54:e5:24:df:3b:11:80:c3: 3b:d8:4c:d8:59:13:b9:24:59:e2:3a:4e:bd:4d:bd:d8:44:e8: 74:9c:7c:5b:d9:21:13:09:6a:1d:10:1b:ad:91:43:47:7c:70: 1a:5a:77:9b:eb:ac:df:59:3d:20:a7:35:6a:4e:29:3e:1c:8f: a5:b7:9c:96:d6:ae:b9:24:46:d1:de:ba:91:2f:8d:b5:d2:47: 37:8b:cd:f6:78:02:b1:58:ce:9a:31:6a:f9:34:96:1f:f1:c3: 11:e9:a8:ae:aa:cf:49:4e:40:3b:6e:13:fd:25:26:cb:63:47: 49:27:30:8f:d5:1b:87:97:9a:36:cb:05:56:f3:3f:1c:a8:75: e7:0b:cf:83:09:7e:12:e0:56:5d:b3:9a:a4:47:1e:c9:b2:16: 26:73:a9:32:dc:0f:0c:7d:45:35:13:7b:5f:82:c7:ce:cf:47: 87:47:9f:49:0c:61:2b:a2:19:27:7e:b9:39:59:5e:91:f5:9d: 1a:e8:16:2e:bf:52:8d:3d:28:07:6b:5a:2b:0b:1c:36:5d:63: 42:cb:d0:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2cfV2nmzujnHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2M0MWNiYzItMmE5Yy00MjBmLWI4YzctYjE1ODg2MzQyMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMDN9u3xVeA57tI+UWuvGAkVN66Ahkia3wnK JEaht6h+BBEk2U2Yj/rkbyGta6g3sZctQ3bAhW0RE6YlWE12qwh1w9OsLpy7y8sR Lb2nLxmA8BEDIDmRepTKwSEmWMqCiF4Pt28dnzD5KTA9w0JKG9dyGVn9Zvz0GG5U kaBJkKTV0ByGClXVymoDVziOMSENCEmGTTqvejTzxbdfGkuRSb8ZWSBMbh2kiSHw hLK/oKBbE+9MoxhNhc67HwBtMsvmsusoq9JO21LVHIz7jdj1mlJ+6/OdOiNgT/Uk RwM3lqW3atKxqJTfgtyg9fmVBeBKrDq9iiXrdvX06RUmbgvBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdqIfLhGkl+iaQ56+0X78nVzUc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNmNTA0MmQtYTAwMS0z NDkxLWEyNzItNTE0OTc5Y2FlMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiQ4myroPhsvZAa35vnfabqzr2GruEinGTd97WxBvxFbDaTDOTXHmZV dGJYvH1U5STfOxGAwzvYTNhZE7kkWeI6Tr1NvdhE6HScfFvZIRMJah0QG62RQ0d8 cBpad5vrrN9ZPSCnNWpOKT4cj6W3nJbWrrkkRtHeupEvjbXSRzeLzfZ4ArFYzpox avk0lh/xwxHpqK6qz0lOQDtuE/0lJstjR0knMI/VG4eXmjbLBVbzPxyodecLz4MJ fhLgVl2zmqRHHsmyFiZzqTLcDwx9RTUTe1+Cx87PR4dHn0kMYSuiGSd+uTlZXpH1 nRroFi6/Uo09KAdrWisLHDZdY0LL0C8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:29 2025 by rpki-client