$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa File: f529b062-9b30-3398-84a5-e7d5fad5abf1.roa (raw, json) Hash identifier: nmOLuATrIcxj3HuGG5jEc2Oq1d9HnyAScDkoiDLjvDc= Subject key identifier: C1:16:44:17:C7:35:3F:9D:B3:5A:AB:8F:D9:5F:D1:95:6A:75:85:A2 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F376C5B747AD205EB6C7100 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:6c:5b:74:7a:d2:05:eb:6c:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=cc577e47-f0f9-40cb-953d-c57c9f28b780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:26:a1:34:fb:6c:b3:53:3d:77:e5:93:0c: 01:d5:0a:09:76:5e:67:91:d9:fb:bb:5d:62:12:de: 9a:f5:fb:83:98:f2:c8:1b:9f:6c:c2:67:a3:a9:a3: 23:fe:de:88:97:71:ea:78:49:29:d6:8f:d2:fe:2d: 41:79:0c:39:f3:b3:f8:a9:1f:f6:75:aa:ab:8e:39: a9:9c:53:22:0d:d7:4e:20:fa:db:3e:86:f6:de:fc: d3:30:0f:01:b9:7a:19:77:81:ec:3a:56:35:ea:2b: 55:74:41:4f:da:6c:38:f6:88:0d:e7:6f:e4:ff:1b: 05:e3:7c:e5:87:93:1d:a2:ea:5c:02:aa:38:5f:da: 4c:84:4a:ed:96:17:f7:62:0c:51:0f:a3:41:db:7d: f0:f4:15:cd:05:91:ea:38:51:d9:db:16:d8:cf:9e: 87:79:df:d7:76:22:7a:4e:06:60:2c:50:b7:98:69: a6:b4:a8:c4:21:e7:6e:e1:52:af:53:a8:fd:28:4c: 00:4f:1a:d4:99:c4:c0:be:45:49:13:26:14:e8:46: 25:22:e1:b6:36:68:4b:df:af:2f:e8:4b:95:9b:1d: 78:3f:71:5d:da:d2:b9:82:06:9c:3e:7f:7a:84:09: 73:4c:9f:84:56:c9:35:ca:f5:35:43:7e:42:15:5a: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:44:17:C7:35:3F:9D:B3:5A:AB:8F:D9:5F:D1:95:6A:75:85:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:06:a6:03:b6:9e:5e:2b:2a:4b:a8:94:f6:7d:1a:fb:06:a2: 40:7d:7f:6c:c4:75:83:1a:d4:67:19:e3:17:ef:a6:89:75:61: 6e:b4:f1:1e:8c:f2:7e:83:7e:1e:72:6e:bb:43:da:ab:b0:f4: e8:e6:72:a7:d7:fe:51:51:7b:36:7b:aa:0e:b7:1c:f5:d6:f2: 8e:1d:31:54:c9:70:63:6e:a6:f8:e6:7d:95:fe:ee:8c:91:61: 54:b5:fd:76:5d:70:3c:44:1b:0f:7f:2f:f4:ab:09:0b:87:a1: de:ac:cc:c0:37:20:3d:73:96:d0:8b:ee:e2:d8:b5:b2:87:75: fb:06:ee:b5:03:ab:fb:ea:3e:d8:bb:f2:01:e4:c6:7f:46:fb: fb:36:70:fe:ec:f5:27:53:49:dc:98:05:29:c3:93:29:90:4a: c8:d5:ea:20:65:0e:d4:9d:34:36:b6:e7:92:14:35:4c:2d:8b: 24:41:97:06:7e:67:ac:ba:0b:e0:4f:c3:3d:2e:bc:52:f1:9c: 12:66:d8:80:6c:e7:31:1b:aa:cd:07:f3:d6:43:12:6c:fe:b3: 23:d6:58:b4:c6:b0:bf:94:d7:64:19:c7:fe:b8:79:5a:9f:d4: fd:bb:0c:93:a7:0f:44:71:4b:82:46:0d:6f:bc:e2:f3:84:4a: bd:ae:3a:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2xbdHrSBetscQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2M1NzdlNDctZjBmOS00MGNiLTk1M2QtYzU3YzlmMjhiNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEAmoTT7bLNTPXflkwwB1QoJdl5nkdn7u11i Et6a9fuDmPLIG59swmejqaMj/t6Il3HqeEkp1o/S/i1BeQw587P4qR/2daqrjjmp nFMiDddOIPrbPob23vzTMA8BuXoZd4HsOlY16itVdEFP2mw49ogN52/k/xsF43zl h5MdoupcAqo4X9pMhErtlhf3YgxRD6NB233w9BXNBZHqOFHZ2xbYz56Hed/XdiJ6 TgZgLFC3mGmmtKjEIedu4VKvU6j9KEwATxrUmcTAvkVJEyYU6EYlIuG2NmhL368v 6EuVmx14P3Fd2tK5ggacPn96hAlzTJ+EVsk1yvU1Q35CFVpZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEWRBfHNT+ds1qrj9lf0ZVqdYWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjUyOWIwNjItOWIzMC0z Mzk4LTg0YTUtZTdkNWZhZDVhYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQGpgO2nl4rKkuolPZ9GvsGokB9f2zEdYMa1GcZ4xfvpol1YW608R6M 8n6Dfh5ybrtD2quw9OjmcqfX/lFRezZ7qg63HPXW8o4dMVTJcGNupvjmfZX+7oyR YVS1/XZdcDxEGw9/L/SrCQuHod6szMA3ID1zltCL7uLYtbKHdfsG7rUDq/vqPti7 8gHkxn9G+/s2cP7s9SdTSdyYBSnDkymQSsjV6iBlDtSdNDa255IUNUwtiyRBlwZ+ Z6y6C+BPwz0uvFLxnBJm2IBs5zEbqs0H89ZDEmz+syPWWLTGsL+U12QZx/64eVqf 1P27DJOnD0RxS4JGDW+84vOESr2uOlI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:42:00 2025 by rpki-client