$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f55040b7-64ec-3f07-8eda-64c7b515cec0.roa File: f55040b7-64ec-3f07-8eda-64c7b515cec0.roa (raw, json) Hash identifier: gK9lKsPQXbvl7wEhDlWDgNr0gJCJUHpW6mxVpEchn6o= Subject key identifier: 0A:6A:2A:68:2F:BD:EF:52:98:44:4D:82:7A:A5:1A:DD:02:5C:45:69 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584F497D24D83CA72A8D0A2FF600 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f55040b7-64ec-3f07-8eda-64c7b515cec0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36492 IP address blocks: 136.22.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:24:d8:3c:a7:2a:8d:0a:2f:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bcbe2dee-de79-4eec-832f-01f84e2b5f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:54:63:0b:ee:25:10:fd:ae:04:39:b8:24:36: 9a:1a:59:87:b6:41:0b:14:0f:4c:0d:69:99:96:b1: f2:64:d5:38:4c:2e:f5:e9:ae:4a:3d:5f:26:01:b4: 5d:e8:e3:a9:12:61:05:88:0c:df:32:32:23:d5:d1: a2:d5:f5:28:96:16:c3:85:cd:81:c9:72:f7:50:7a: 82:d8:a3:a5:52:30:cd:cf:0a:1c:0d:e3:d5:c7:fc: c8:98:20:05:3a:64:4c:64:fa:36:b3:5d:8d:98:cf: 7e:6e:ee:a6:7d:2e:0b:c6:1b:e5:34:97:84:86:ad: 8e:e0:da:cf:01:a9:e9:6d:df:45:b6:85:0a:db:64: 3e:f5:ea:cf:64:b9:c2:53:f8:6e:ee:3d:52:73:ef: 87:07:f7:a4:72:e5:16:77:c3:da:6a:60:a4:6d:6c: 57:e4:05:d5:9b:d8:9d:e7:60:40:b1:90:e1:da:a4: 29:16:01:85:9c:b4:63:aa:6e:66:27:c5:df:af:1d: 4d:fb:37:37:cd:5e:ff:36:de:9f:f8:09:37:74:16: c3:4c:9a:13:71:c0:5a:da:66:db:2a:b8:30:f1:43: f7:4f:0b:13:6f:1c:87:63:f9:9a:ec:f6:d5:ba:94: 93:0e:1f:63:ca:54:b5:8d:99:b8:41:f0:bc:90:85: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:2A:68:2F:BD:EF:52:98:44:4D:82:7A:A5:1A:DD:02:5C:45:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f55040b7-64ec-3f07-8eda-64c7b515cec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:45:94:2c:53:8a:93:28:b5:65:c3:35:57:1d:ce:b0:78:7b: 3c:b2:e4:8a:2d:d2:64:f6:57:64:87:60:17:e2:72:1c:ae:91: 32:c2:bd:59:09:b6:d9:4e:ed:3d:ea:61:9d:bd:7b:0c:5a:13: ed:2a:80:35:c3:8b:76:49:9d:9c:ae:ad:3e:3e:33:32:21:a7: 6a:0c:a2:51:2c:d5:77:a5:1e:6a:39:cd:b0:60:71:63:5d:41: a3:a2:2d:e8:5b:83:e9:66:8f:ef:55:6a:7a:c9:da:cb:6a:69: a3:d1:b4:5b:38:62:36:75:44:18:fb:8a:a7:6e:bb:23:67:67: 2a:34:ed:d6:13:5d:4d:4d:86:3e:58:4a:25:4b:1c:e5:d6:3f: 04:e5:ab:3b:41:db:aa:b8:86:1c:e5:3e:16:0d:eb:e8:b6:d6: bc:ec:72:d5:49:e7:cb:44:4d:a4:1a:f9:ea:55:b4:31:60:e9: 19:ff:eb:8e:c8:86:4b:6b:be:a0:c0:2a:40:3f:d5:c3:55:3c: 44:57:6e:0b:39:ae:88:8e:ed:c7:95:3a:18:68:66:ce:7a:18: cc:d5:d5:cc:65:a4:7d:3c:ca:88:c7:25:7c:f9:0d:6f:f2:87: 53:d4:a9:07:c7:52:d1:a9:db:f5:b5:02:dc:43:47:40:a2:9e: d5:42:5f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfSTYPKcqjQov9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmNiZTJkZWUtZGU3OS00ZWVjLTgzMmYtMDFmODRlMmI1ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FRjC+4lEP2uBDm4JDaaGlmHtkELFA9MDWmZ lrHyZNU4TC716a5KPV8mAbRd6OOpEmEFiAzfMjIj1dGi1fUolhbDhc2ByXL3UHqC 2KOlUjDNzwocDePVx/zImCAFOmRMZPo2s12NmM9+bu6mfS4LxhvlNJeEhq2O4NrP Aanpbd9FtoUK22Q+9erPZLnCU/hu7j1Sc++HB/ekcuUWd8PaamCkbWxX5AXVm9id 52BAsZDh2qQpFgGFnLRjqm5mJ8Xfrx1N+zc3zV7/Nt6f+Ak3dBbDTJoTccBa2mbb Krgw8UP3TwsTbxyHY/ma7PbVupSTDh9jylS1jZm4QfC8kIVR3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApqKmgvve9SmERNgnqlGt0CXEVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZjU1MDQwYjctNjRlYy0z ZjA3LThlZGEtNjRjN2I1MTVjZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxFlCxTipMotWXDNVcdzrB4ezyy5Iot0mT2V2SHYBfichyukTLCvVkJ ttlO7T3qYZ29ewxaE+0qgDXDi3ZJnZyurT4+MzIhp2oMolEs1XelHmo5zbBgcWNd QaOiLehbg+lmj+9VanrJ2stqaaPRtFs4YjZ1RBj7iqduuyNnZyo07dYTXU1Nhj5Y SiVLHOXWPwTlqztB26q4hhzlPhYN6+i21rzsctVJ58tETaQa+epVtDFg6Rn/647I hktrvqDAKkA/1cNVPERXbgs5roiO7ceVOhhoZs56GMzV1cxlpH08yojHJXz5DW/y h1PUqQfHUtGp2/W1AtxDR0CintVCX/k= -----END CERTIFICATE-----Generated at Mon Sep 28 21:21:46 2026 by rpki-client