$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cf7480b3-10dc-3490-bf3a-db5619371838.roa File: cf7480b3-10dc-3490-bf3a-db5619371838.roa (raw, json) Hash identifier: 7PYpk5OCnYC8iMHgJGMOY+rfA+N4259BsIcD/unTYuY= Subject key identifier: 86:F5:63:11:78:3A:16:A5:F5:B7:55:DE:4A:04:24:09:B0:B8:1A:80 Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422 Certificate serial: 010D0C9F4328584B6A61DFB63D816E861D3D5BA0 Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cf7480b3-10dc-3490-bf3a-db5619371838.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 401307 IP address blocks: 136.228.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:df:b6:3d:81:6e:86:1d:3d:5b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=fa0d161d-866e-4111-8150-f83a2381e728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:4e:3f:36:16:93:b8:93:51:8f:28:a2:0b: 87:c1:c2:22:51:3f:a3:a3:43:f0:17:1f:cc:ff:8d: ff:6d:f1:a3:93:9c:7d:ba:64:aa:e6:a0:4e:d5:9f: c0:57:a1:be:89:59:fc:e4:06:e5:6a:c7:51:68:e7: 03:a6:43:08:4c:c0:a1:0d:1a:f3:a1:50:fe:e4:f2: fb:8b:66:78:29:71:08:5d:20:d7:66:44:22:a5:c7: 05:6b:15:f1:f1:83:e8:da:a4:c2:01:0e:15:7f:a8: 59:30:f0:e2:81:c0:f4:92:1e:47:c1:a5:68:92:49: 8d:e6:36:a4:05:7c:70:7b:e3:b2:a6:a2:10:36:a9: 7d:e2:f6:95:34:62:30:13:c6:68:2d:63:61:90:16: 0a:fd:06:8f:6e:65:b1:c1:d4:52:16:5e:62:c8:85: 26:09:96:d6:fb:52:d9:c0:51:f2:6c:4d:4d:b7:53: 5a:8a:15:aa:25:d9:6b:2a:37:b7:ad:1c:c4:b0:63: 85:c6:52:43:36:92:de:b1:d1:ea:53:76:6c:7e:69: 20:f3:17:e5:b1:5e:14:73:37:ea:87:8f:89:55:20: 79:a9:7f:f9:01:05:2b:a9:e2:a0:67:4b:a8:f3:a7: ce:a0:0a:18:79:fa:ab:fb:39:46:df:77:4b:fd:99: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F5:63:11:78:3A:16:A5:F5:B7:55:DE:4A:04:24:09:B0:B8:1A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/cf7480b3-10dc-3490-bf3a-db5619371838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl X509v3 Authority Key Identifier: keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer sbgp-ipAddrBlock: critical IPv4: 136.228.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f6:27:22:71:19:6a:bd:2d:42:58:ad:9b:7d:d8:41:d8:c0: eb:c9:d1:98:1a:4b:f6:a7:37:c4:c8:6c:f2:63:e5:65:99:b3: e7:36:31:9a:c9:c8:3b:31:0d:0a:a1:90:bc:a2:e7:92:67:c6: c3:b0:18:c6:e9:87:00:32:ed:5b:bf:1a:91:10:b8:fb:28:06: c7:9d:d5:cc:18:42:13:57:4c:ce:b3:4c:fa:d8:95:ac:2a:9b: 8e:ce:2b:01:3c:b2:57:3b:53:2b:86:d0:fa:2b:88:1a:cd:47: d1:83:09:c0:3c:c8:bd:09:8a:a1:ef:84:f4:77:d9:51:ce:b9: e3:21:f0:fa:d0:f0:8e:1c:9d:38:14:0d:f5:1a:95:82:9a:a8: 3a:fc:3b:71:73:7e:9b:92:3c:ae:4a:92:e1:1a:90:2d:76:f3: 62:99:eb:7a:54:ae:2c:bb:2b:b9:27:46:8e:c2:30:26:d2:fc: 8d:25:f3:31:33:63:48:89:58:db:f2:7b:bf:07:71:5c:b6:8b: 67:d2:7e:ab:e6:cf:43:ad:d6:36:a3:31:0b:96:4f:f2:d8:34: af:bb:6b:b0:75:0d:55:8b:a0:4c:6c:ab:90:e6:ac:97:b3:4f: 78:33:60:92:be:4f:10:64:17:1d:0a:fb:dc:71:76:36:31:e7: c8:d2:2e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYd+2PYFuhh09W6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl NDIyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZmEwZDE2MWQtODY2ZS00MTExLTgxNTAtZjgzYTIzODFlNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbBOPzYWk7iTUY8ooguHwcIiUT+jo0PwFx/M /43/bfGjk5x9umSq5qBO1Z/AV6G+iVn85AblasdRaOcDpkMITMChDRrzoVD+5PL7 i2Z4KXEIXSDXZkQipccFaxXx8YPo2qTCAQ4Vf6hZMPDigcD0kh5HwaVokkmN5jak BXxwe+OypqIQNql94vaVNGIwE8ZoLWNhkBYK/QaPbmWxwdRSFl5iyIUmCZbW+1LZ wFHybE1Nt1NaihWqJdlrKje3rRzEsGOFxlJDNpLesdHqU3Zsfmkg8xflsV4Uczfq h4+JVSB5qX/5AQUrqeKgZ0uo86fOoAoYefqr+zlG33dL/Zm0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb1YxF4Ohal9bdV3koEJAmwuBqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvY2Y3NDgwYjMtMTBkYy0z NDkwLWJmM2EtZGI1NjE5MzcxODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH2JyJxGWq9LUJYrZt92EHYwOvJ0ZgaS/anN8TIbPJj5WWZs+c2MZrJ yDsxDQqhkLyi55JnxsOwGMbphwAy7Vu/GpEQuPsoBsed1cwYQhNXTM6zTPrYlawq m47OKwE8slc7UyuG0PoriBrNR9GDCcA8yL0JiqHvhPR32VHOueMh8PrQ8I4cnTgU DfUalYKaqDr8O3FzfpuSPK5KkuEakC1282KZ63pUriy7K7knRo7CMCbS/I0l8zEz Y0iJWNvye78HcVy2i2fSfqvmz0Ot1jajMQuWT/LYNK+7a7B1DVWLoExsq5DmrJez T3gzYJK+TxBkFx0K+9xxdjYx58jSLkk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:29 2025 by rpki-client