$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa File: f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa (raw, json) Hash identifier: Rzy7ag4R6GDanRzsZcWN8nG8bAMxruVLZG/aIiV5ZJI= Subject key identifier: 27:C0:6A:29:4F:2D:16:DA:BC:69:77:34:48:A2:60:37:94:50:5E:59 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F3767AA1DD193A1D0FE0560 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:67:aa:1d:d1:93:a1:d0:fe:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=a51c6531-f932-4b2f-b120-84ae55e0707d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:ae:4e:6a:c1:99:6e:58:dc:55:4e:ab:b2: 25:a7:01:6c:15:36:2e:45:65:fc:f0:5b:f4:a1:56: 17:b9:89:1e:3b:43:f8:3d:6f:70:c4:8b:aa:c9:dd: 67:73:04:38:69:96:f1:6e:88:c0:66:eb:78:95:1e: c3:59:df:18:53:c3:36:46:33:3b:fb:fe:58:32:49: 65:43:13:f0:85:72:1e:60:45:36:b9:a3:7f:f2:8a: 0f:d8:6c:47:de:9b:8d:33:c1:35:5e:27:88:52:00: dc:e1:41:63:23:d1:31:5f:ca:d6:af:87:47:fc:5b: 4d:99:33:f6:4e:26:81:36:96:89:5f:6e:ec:c3:ea: 93:15:1d:80:d6:0d:ec:17:ff:cd:43:42:fb:15:64: 1f:99:74:e4:70:93:4c:34:d0:57:50:d9:d0:9f:04: 85:5d:0b:56:16:b3:91:a1:3b:96:36:cf:c7:a7:76: 95:6a:5a:e6:5a:30:25:3c:aa:1b:45:df:39:a2:ed: 75:83:7d:e3:2f:01:bb:c0:e8:ce:ec:51:e8:d2:7f: 45:46:b9:9f:b9:cb:7c:c6:e2:7a:bf:84:b3:53:4e: 1e:39:77:2b:41:47:07:d9:de:7b:b4:84:52:16:28: ff:bc:d4:90:fc:a4:19:eb:e6:74:e5:fd:f1:a6:d2: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C0:6A:29:4F:2D:16:DA:BC:69:77:34:48:A2:60:37:94:50:5E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9a:c7:0a:c7:65:90:d3:0c:02:c0:3a:7c:93:8e:74:92:1f: 64:83:d3:61:1b:e8:fc:23:48:ef:39:77:c8:6b:9c:17:3a:15: 7c:73:de:89:cb:83:77:3e:5d:e6:6f:f4:71:04:23:eb:c9:32: bc:0c:ab:cc:0f:68:cc:91:91:2b:64:d9:86:09:ad:e8:b4:1e: 8a:a6:df:ca:8b:9f:f1:0c:49:34:61:03:80:5f:cb:8e:20:8a: 56:e3:45:93:50:5f:2f:43:ec:00:8c:34:20:6e:3f:78:7c:d0: 20:3f:56:c0:6f:09:2f:ea:ce:ab:d9:47:f7:6e:1e:54:d3:e2: 33:60:6e:67:9c:ef:d3:ff:94:53:0d:4a:78:55:23:49:4b:69: f7:94:a0:0e:88:1a:c9:00:85:aa:93:af:64:24:16:95:d4:bf: 90:a4:1a:f1:94:cb:2e:75:4d:81:2c:53:3c:2a:2c:c6:92:6d: c1:f3:bc:3a:41:f0:86:de:12:54:e1:88:e6:ed:1e:12:45:f8: 1a:3f:23:78:55:f5:da:5c:cb:de:10:04:f6:e2:a4:1f:91:31: 34:6a:91:d4:09:72:90:98:c6:ef:e6:2b:bd:67:3f:e4:d7:78: ce:c8:7a:d3:7c:a5:30:bf:0a:d5:02:7f:a2:7d:20:ea:e4:c7: cd:4b:3b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2eqHdGTodD+BWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YTUxYzY1MzEtZjkzMi00YjJmLWIxMjAtODRhZTU1ZTA3MDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUmuTmrBmW5Y3FVOq7IlpwFsFTYuRWX88Fv0 oVYXuYkeO0P4PW9wxIuqyd1ncwQ4aZbxbojAZut4lR7DWd8YU8M2RjM7+/5YMkll QxPwhXIeYEU2uaN/8ooP2GxH3puNM8E1XieIUgDc4UFjI9ExX8rWr4dH/FtNmTP2 TiaBNpaJX27sw+qTFR2A1g3sF//NQ0L7FWQfmXTkcJNMNNBXUNnQnwSFXQtWFrOR oTuWNs/Hp3aValrmWjAlPKobRd85ou11g33jLwG7wOjO7FHo0n9FRrmfuct8xuJ6 v4SzU04eOXcrQUcH2d57tIRSFij/vNSQ/KQZ6+Z05f3xptLo+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfAailPLRbavGl3NEiiYDeUUF5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjhmMDBkOTQtZmZmNy0z ODUyLTliZmItYWY5NmU0YWIwNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiaxwrHZZDTDALAOnyTjnSSH2SD02Eb6PwjSO85d8hrnBc6FXxz3onL g3c+XeZv9HEEI+vJMrwMq8wPaMyRkStk2YYJrei0Hoqm38qLn/EMSTRhA4Bfy44g ilbjRZNQXy9D7ACMNCBuP3h80CA/VsBvCS/qzqvZR/duHlTT4jNgbmec79P/lFMN SnhVI0lLafeUoA6IGskAhaqTr2QkFpXUv5CkGvGUyy51TYEsUzwqLMaSbcHzvDpB 8IbeElThiObtHhJF+Bo/I3hV9dpcy94QBPbipB+RMTRqkdQJcpCYxu/mK71nP+TX eM7IetN8pTC/CtUCf6J9IOrkx81LOxw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:06 2025 by rpki-client