$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3ed9587c-46fd-37f0-855b-950369c8d073.roa File: 3ed9587c-46fd-37f0-855b-950369c8d073.roa (raw, json) Hash identifier: Ujpl3j9wyKBTspfGgH1B+dPdWQLQAIS3lhxLh1IGKuk= Subject key identifier: A7:D1:44:1D:51:C9:DC:C4:7C:DF:9A:5A:70:C8:0C:64:1D:A6:76:EE Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F37682534B06BFB6AE5B000 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3ed9587c-46fd-37f0-855b-950369c8d073.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:68:25:34:b0:6b:fb:6a:e5:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=356d62c0-812b-439c-9295-97042ddfd73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:2a:a3:c6:d3:90:58:8a:1e:8b:9b:81:5f: 2f:52:4b:b1:48:5c:77:e7:cc:88:06:64:0d:31:f5: 53:9c:50:19:2b:e2:0f:c5:52:f6:44:49:63:34:7f: f4:42:bf:22:43:98:a2:44:1a:b8:06:ed:13:47:13: 73:13:63:fd:f1:a6:f6:93:3e:f5:a5:80:a9:e2:28: 5f:2c:bf:2c:85:fb:cd:9b:67:49:5a:8d:ce:1f:c1: 37:7e:cd:bf:70:fc:2b:a0:7c:01:01:e6:09:f6:ec: 60:43:27:01:64:1c:fe:94:f0:7b:f0:d9:4f:97:d9: ce:3c:6e:c6:1b:bf:41:4e:de:ad:21:4d:85:42:2d: 7b:d6:b9:25:8b:f7:d9:2c:2f:d3:5b:87:b7:94:97: 8b:ca:47:e8:45:57:ec:33:d9:8d:eb:51:0e:25:41: 1f:4a:3d:b8:77:20:8e:55:93:66:be:49:29:c4:97: fd:6d:0e:ba:c6:ae:36:bc:c7:b9:f3:a3:37:c7:ee: 25:9b:1a:ab:8e:7b:58:a6:94:e2:f2:a0:fd:4e:3d: a0:22:c7:ef:d4:92:d1:9c:d1:26:0a:70:0d:99:be: b8:33:b2:92:ac:4f:0c:8e:5b:78:22:97:92:9e:c6: 78:ee:04:3b:bd:36:c2:0c:ff:34:c8:62:78:32:2f: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D1:44:1D:51:C9:DC:C4:7C:DF:9A:5A:70:C8:0C:64:1D:A6:76:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3ed9587c-46fd-37f0-855b-950369c8d073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:93:e7:cc:43:5d:82:2f:62:6e:73:df:b3:39:2d:44:72:3d: 29:c5:a0:d5:b2:98:f7:5a:b2:7f:bd:ac:e1:01:4a:f4:03:1a: ac:ee:18:fe:1f:7b:c4:1c:51:e6:61:a6:bf:1b:bf:01:ff:57: 02:7c:4f:0a:bb:8e:54:c6:f2:69:e9:82:c3:51:d3:3b:4e:64: ad:05:b3:a7:f5:56:81:7f:c5:60:e5:ec:9b:11:7d:8f:d7:c3: 2c:78:58:b7:d5:7b:95:8e:96:f7:5e:e7:bf:ec:8b:1a:9c:a9: a2:49:fc:76:b3:ff:45:47:8e:af:de:fb:8c:7a:99:3f:94:bb: 76:76:7c:22:0b:93:2d:3f:be:86:44:47:81:d3:17:86:c3:0a: 4b:2c:86:ad:3d:28:55:12:a6:d9:6e:70:90:a1:eb:11:3c:d4: 27:7c:2d:30:36:d7:9b:6f:4e:59:7e:a6:fe:13:43:ad:67:49: d2:ea:60:9f:3a:82:94:2d:52:4d:d0:5b:d6:b9:c0:b1:f8:48: f4:29:cc:15:4c:3f:b8:ad:d0:e6:6f:f3:d7:82:24:6c:31:82: 04:fc:2c:d2:f1:dd:f7:aa:8d:1c:81:e6:d7:7e:9d:53:ac:07: 41:ea:a6:6c:02:28:78:36:04:84:33:57:61:82:5a:12:b0:43: 37:cd:e8:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2glNLBr+2rlsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MzU2ZDYyYzAtODEyYi00MzljLTkyOTUtOTcwNDJkZGZkNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf8qo8bTkFiKHoubgV8vUkuxSFx358yIBmQN MfVTnFAZK+IPxVL2REljNH/0Qr8iQ5iiRBq4Bu0TRxNzE2P98ab2kz71pYCp4ihf LL8shfvNm2dJWo3OH8E3fs2/cPwroHwBAeYJ9uxgQycBZBz+lPB78NlPl9nOPG7G G79BTt6tIU2FQi171rkli/fZLC/TW4e3lJeLykfoRVfsM9mN61EOJUEfSj24dyCO VZNmvkkpxJf9bQ66xq42vMe586M3x+4lmxqrjntYppTi8qD9Tj2gIsfv1JLRnNEm CnANmb64M7KSrE8Mjlt4IpeSnsZ47gQ7vTbCDP80yGJ4Mi89AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfRRB1RydzEfN+aWnDIDGQdpnbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvM2VkOTU4N2MtNDZmZC0z N2YwLTg1NWItOTUwMzY5YzhkMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaT58xDXYIvYm5z37M5LURyPSnFoNWymPdasn+9rOEBSvQDGqzuGP4f e8QcUeZhpr8bvwH/VwJ8Twq7jlTG8mnpgsNR0ztOZK0Fs6f1VoF/xWDl7JsRfY/X wyx4WLfVe5WOlvde57/sixqcqaJJ/Haz/0VHjq/e+4x6mT+Uu3Z2fCILky0/voZE R4HTF4bDCksshq09KFUSptlucJCh6xE81Cd8LTA215tvTll+pv4TQ61nSdLqYJ86 gpQtUk3QW9a5wLH4SPQpzBVMP7it0OZv89eCJGwxggT8LNLx3feqjRyB5td+nVOs B0HqpmwCKHg2BIQzV2GCWhKwQzfN6GA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:29 2025 by rpki-client