$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: uaLdGA1QLSnIKdWEKbgtCvQOgV4U/EWWrksmkvhBkl0= Subject key identifier: 7C:68:85:B9:8A:98:DE:25:79:E7:0E:9D:B4:3E:CD:6E:1C:B3:E0:59 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584BAEC7C3D2B165F63658711D40 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c3:d2:b1:65:f6:36:58:71:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=3f0f52d7-a2dd-455f-8038-4f9643c15f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:8b:8b:0a:cc:4e:54:2a:b1:20:30:21:6f: 3c:eb:73:d3:84:4a:d8:71:4e:10:0b:9e:a1:f9:0d: 49:67:55:31:ba:6e:a0:ec:90:7f:6c:31:d9:4e:dd: 1e:bc:bc:17:12:8b:89:b8:dc:33:35:fc:6d:f8:da: 75:ce:5e:e3:23:56:10:f3:81:1b:67:47:8f:eb:81: 5f:23:96:0b:93:2f:a3:8e:fb:a2:6d:2c:cd:6e:dc: 63:9e:75:f1:81:0c:84:04:58:71:62:09:b4:b9:6e: f7:8d:5c:bd:e9:89:1e:e4:9f:ce:51:1f:69:65:8c: 1f:ce:af:19:35:a9:8b:f0:cd:c0:23:e6:f4:19:c5: 79:e4:e0:79:cd:66:ad:52:16:a4:b2:97:06:0e:3a: 89:3b:b9:ce:eb:1c:2b:e3:70:20:bd:89:d2:d4:33: d3:91:10:87:dc:85:82:47:af:70:5a:52:65:36:f7: cf:31:e4:bb:12:85:f8:ca:be:46:8c:11:d4:93:6b: 0e:ea:b2:f7:55:45:cc:fb:42:0c:60:f6:26:fb:3c: 95:f0:56:66:c5:24:21:64:c1:fc:6a:73:03:a4:17: d0:21:61:02:ed:6e:a2:bf:7c:40:59:8b:f6:01:79: 44:97:32:e6:28:30:22:5d:a2:52:ff:4c:3a:f8:d1: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:85:B9:8A:98:DE:25:79:E7:0E:9D:B4:3E:CD:6E:1C:B3:E0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cb:83:14:8e:69:8c:14:f2:cf:41:48:12:9f:f1:74:ee:04: b9:47:7c:5e:61:ee:05:4d:a6:18:32:fe:e1:be:fa:b3:aa:64: 57:af:ef:e2:e3:ed:1c:49:4a:e1:0d:2e:d5:bf:5d:d3:6a:95: fe:cf:90:0c:b7:6a:ae:9a:f3:4e:01:54:b8:b3:b8:e7:2e:73: 68:a7:b7:74:0f:69:14:7a:65:31:14:a3:2e:01:eb:4d:71:62: 91:ee:3b:d5:be:76:a1:7c:6f:a2:99:1c:ca:37:68:a1:8a:f4: db:a8:02:c2:7b:f2:3b:5a:e5:97:01:22:c2:ec:43:e0:d6:30: fa:ea:f7:b2:89:67:a7:0d:96:af:e9:91:2b:c4:a5:42:82:79: 71:d6:e3:f3:c6:c8:63:a2:3d:50:d1:9b:e5:f7:31:30:f7:82: 2b:a8:b2:67:df:5e:1e:46:6f:71:23:c5:db:32:88:7c:2e:0c: 90:28:f3:0d:84:1c:64:2d:92:a9:98:9c:60:56:bf:f7:0f:7f: f6:25:7e:23:cb:99:cd:1c:cf:c6:82:40:8a:3d:ad:a4:1e:15: 52:f5:5a:2b:70:2f:26:61:ab:44:31:b1:7a:2e:cd:ae:4a:3a: d8:ac:d2:a5:2c:9a:e6:3d:47:d0:cf:f8:f3:15:7e:39:4f:90: 54:a3:2f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8PSsWX2NlhxHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk M2YwZjUyZDctYTJkZC00NTVmLTgwMzgtNGY5NjQzYzE1ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos2LiwrMTlQqsSAwIW8863PThErYcU4QC56h +Q1JZ1Uxum6g7JB/bDHZTt0evLwXEouJuNwzNfxt+Np1zl7jI1YQ84EbZ0eP64Ff I5YLky+jjvuibSzNbtxjnnXxgQyEBFhxYgm0uW73jVy96Yke5J/OUR9pZYwfzq8Z NamL8M3AI+b0GcV55OB5zWatUhakspcGDjqJO7nO6xwr43AgvYnS1DPTkRCH3IWC R69wWlJlNvfPMeS7EoX4yr5GjBHUk2sO6rL3VUXM+0IMYPYm+zyV8FZmxSQhZMH8 anMDpBfQIWEC7W6iv3xAWYv2AXlElzLmKDAiXaJS/0w6+NFXqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxohbmKmN4leecOnbQ+zW4cs+BZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfLgxSOaYwU8s9BSBKf8XTuBLlHfF5h7gVNphgy/uG++rOqZFev7+Lj 7RxJSuENLtW/XdNqlf7PkAy3aq6a804BVLizuOcuc2int3QPaRR6ZTEUoy4B601x YpHuO9W+dqF8b6KZHMo3aKGK9NuoAsJ78jta5ZcBIsLsQ+DWMPrq97KJZ6cNlq/p kSvEpUKCeXHW4/PGyGOiPVDRm+X3MTD3giuosmffXh5Gb3EjxdsyiHwuDJAo8w2E HGQtkqmYnGBWv/cPf/YlfiPLmc0cz8aCQIo9raQeFVL1WitwLyZhq0QxsXouza5K Otis0qUsmuY9R9DP+PMVfjlPkFSjL80= -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:22 2025 by rpki-client