$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ef25cc38-5ada-32f0-b285-b49d60197f2e.roa File: ef25cc38-5ada-32f0-b285-b49d60197f2e.roa (raw, json) Hash identifier: o2ScUHPyCKh/pwHWMhWDPT1vnjii1y8jEaY39LIP+fM= Subject key identifier: 9A:C0:57:28:DB:B1:FD:14:A1:FC:58:B7:73:46:E5:8F:05:39:9A:71 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584F497CCBFB822308E14786B180 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ef25cc38-5ada-32f0-b285-b49d60197f2e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36492 IP address blocks: 136.22.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:cb:fb:82:23:08:e1:47:86:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ff0f82b-10cd-41e7-92fc-80478ea1055e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:9a:17:13:db:f1:b9:89:77:98:dd:38:9d: 94:c4:22:ca:1d:2c:90:f4:b2:b5:37:88:0d:0d:6f: 99:05:df:53:a2:53:68:5d:3e:61:08:ac:47:c4:5a: 1a:bc:78:09:03:73:07:99:93:71:96:c8:df:6c:ea: 7d:21:31:c1:be:04:9a:5e:88:b4:38:df:d7:b4:e4: 67:50:91:de:26:81:c8:da:87:0d:98:16:1f:4a:b7: a1:82:b0:1a:b8:d5:ab:eb:81:2d:6e:29:e8:d7:77: f2:39:e6:c5:d1:03:19:a5:ad:aa:45:27:a5:65:94: 73:98:29:94:b1:d8:a3:07:f8:26:93:9f:9f:95:63: f2:68:91:77:15:6c:49:75:a3:77:5a:47:e0:a2:4c: 08:f4:ba:9b:99:33:7e:24:9f:b4:6e:46:b7:fa:58: a0:39:e8:17:ab:f0:58:3f:74:79:9f:03:be:76:78: b5:79:57:ea:24:6e:82:e9:02:fe:b5:9c:64:79:fb: f8:9f:b1:4d:83:0d:ae:94:5b:a0:f3:e3:e5:1e:ca: 42:65:7f:0c:b3:29:5f:48:77:21:2b:53:24:7b:93: ba:ae:f5:ee:a3:97:10:b3:a4:8a:43:ea:75:4d:d0: ae:da:76:dd:5d:b5:f1:44:ba:50:63:d4:6c:7e:80: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C0:57:28:DB:B1:FD:14:A1:FC:58:B7:73:46:E5:8F:05:39:9A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ef25cc38-5ada-32f0-b285-b49d60197f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e5:b0:81:9f:0e:88:1d:58:7b:fb:0e:5e:49:da:6d:ed:76: d6:ae:c7:1f:c7:ce:03:10:5f:e5:84:80:03:35:43:d4:06:a1: 18:7a:54:18:fb:92:32:51:68:7f:37:fa:ef:3d:5b:99:d9:dc: d6:2c:ec:ac:74:7b:47:57:1e:43:eb:eb:85:b3:63:9d:47:b5: 5f:bb:f3:d4:bc:eb:83:49:24:25:34:6d:29:44:14:99:ad:05: 9e:f0:ec:f8:9c:27:6c:af:4f:1c:68:70:10:79:3e:a1:53:88: 9e:3a:da:6d:68:4d:59:3d:13:8f:90:fb:9c:44:a6:76:e5:c5: 8b:93:17:18:39:12:d8:b0:7e:fb:14:af:15:7b:b7:55:6d:63: 1b:e2:5b:7d:bf:f1:b3:f5:78:a0:4a:eb:43:64:dc:7b:48:1b: 21:76:57:48:14:ae:e7:ed:df:16:91:54:57:d2:6a:95:e7:93: 04:c7:11:6d:bd:3b:62:8e:ef:ba:7e:6e:5e:0c:e7:79:9f:04: 1d:6f:a0:2a:e4:d9:95:5c:91:1c:c6:73:6a:47:7f:32:6d:66: 73:4a:2d:7a:1b:17:e2:4a:91:9c:25:81:e1:38:52:cc:7e:01: 6a:9c:3e:3e:63:50:33:f1:08:d7:6a:ce:33:e1:7f:4e:e1:83: 1e:82:1b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMv7giMI4UeGsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmZmMGY4MmItMTBjZC00MWU3LTkyZmMtODA0NzhlYTEwNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXuaFxPb8bmJd5jdOJ2UxCLKHSyQ9LK1N4gN DW+ZBd9TolNoXT5hCKxHxFoavHgJA3MHmZNxlsjfbOp9ITHBvgSaXoi0ON/XtORn UJHeJoHI2ocNmBYfSrehgrAauNWr64Etbino13fyOebF0QMZpa2qRSelZZRzmCmU sdijB/gmk5+flWPyaJF3FWxJdaN3WkfgokwI9LqbmTN+JJ+0bka3+ligOegXq/BY P3R5nwO+dni1eVfqJG6C6QL+tZxkefv4n7FNgw2ulFug8+PlHspCZX8MsylfSHch K1Mke5O6rvXuo5cQs6SKQ+p1TdCu2nbdXbXxRLpQY9RsfoCViwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrAVyjbsf0UofxYt3NG5Y8FOZpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZWYyNWNjMzgtNWFkYS0z MmYwLWIyODUtYjQ5ZDYwMTk3ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjlsIGfDogdWHv7Dl5J2m3tdtauxx/HzgMQX+WEgAM1Q9QGoRh6VBj7 kjJRaH83+u89W5nZ3NYs7Kx0e0dXHkPr64WzY51HtV+789S864NJJCU0bSlEFJmt BZ7w7PicJ2yvTxxocBB5PqFTiJ462m1oTVk9E4+Q+5xEpnblxYuTFxg5EtiwfvsU rxV7t1VtYxviW32/8bP1eKBK60Nk3HtIGyF2V0gUruft3xaRVFfSapXnkwTHEW29 O2KO77p+bl4M53mfBB1voCrk2ZVckRzGc2pHfzJtZnNKLXobF+JKkZwlgeE4Usx+ AWqcPj5jUDPxCNdqzjPhf07hgx6CG/o= -----END CERTIFICATE-----Generated at Mon Sep 28 12:33:36 2026 by rpki-client