$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa File: 59a9d57b-4687-3a82-aa99-6cbe40465d13.roa (raw, json) Hash identifier: wNT81DBHut8gJdwoFWqzs9txtN4ewRD9K+cTEofwCF0= Subject key identifier: A6:12:88:DD:13:EC:E2:EB:45:45:DF:32:60:2E:28:ED:87:99:64:1F Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F373722D31C531C065E3600 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:37:22:d3:1c:53:1c:06:5e:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3a812d36-56f6-4344-ab3e-8c926df94e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:b6:e9:c5:87:7f:78:fa:41:1b:f8:38:bb: d1:71:73:00:73:56:4a:56:25:d4:08:9c:85:67:6c: 23:98:85:b1:d4:2e:a8:e6:46:ca:34:22:42:62:39: 93:63:ea:da:a9:db:32:d4:7d:2c:31:a1:e3:d8:2b: 47:a6:fb:1d:68:1e:2c:22:7a:81:f7:79:47:bd:81: 56:6f:02:9a:5b:e6:bb:56:d6:41:04:81:a6:43:e5: 1b:c4:63:fa:b0:23:85:09:78:d7:21:dc:e8:20:8d: e8:c9:9d:43:82:8d:e8:e1:49:f6:c2:c3:f9:81:b9: 50:67:07:98:4e:23:a4:22:d6:51:ea:a1:25:2e:96: 65:7d:d9:1b:be:f0:f7:ff:35:a2:93:2c:2d:75:8b: cc:33:9c:8b:ba:12:d9:fd:dd:5c:aa:79:f8:78:10: fa:9d:d0:3f:f4:ae:9f:bf:ce:a8:b9:f9:a5:b8:1f: 11:ed:90:4a:29:a9:07:c7:af:e8:dd:cd:b4:8c:cd: f2:2b:ca:b1:fb:67:83:43:93:12:c8:ef:aa:25:20: fc:64:62:1a:d8:cc:42:88:30:bc:9e:12:45:b5:21: bb:b0:2f:72:94:24:0d:78:c8:76:f0:d6:d2:73:8d: 46:12:56:c9:f8:38:4b:c9:92:21:87:64:89:ed:2c: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:12:88:DD:13:EC:E2:EB:45:45:DF:32:60:2E:28:ED:87:99:64:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:20:23:94:e3:aa:9b:d7:9b:fe:45:3e:8f:0a:0b:82:78:3b: 0f:0f:59:87:6a:e4:0c:5a:04:a9:b6:ab:6f:6f:17:aa:b2:08: cd:87:1f:ec:db:24:d3:3c:ef:b8:46:63:2d:33:0f:00:76:b1: 0d:98:74:e7:a8:c9:ee:cc:6d:2f:f4:90:34:ae:c9:32:27:db: 52:7d:41:11:22:96:57:ac:41:11:86:9f:8c:f0:52:56:10:03: 69:92:50:71:b4:26:4e:a9:1f:d4:43:8f:f0:a4:11:4f:83:4d: 24:2a:b7:0e:6c:ed:2f:a1:49:8e:56:72:f6:29:70:51:90:dc: 1b:e8:8c:30:09:04:60:55:c1:e1:d0:32:00:f0:18:0e:e0:d5: 58:cf:48:65:01:44:31:20:03:60:e7:dc:a8:97:60:b9:ac:0c: e9:4d:fb:bb:28:30:83:6a:0f:b5:4c:75:93:46:5c:fd:e5:72: 46:be:90:7b:d5:a8:ee:2f:69:0e:d1:55:e5:8e:8f:f4:0b:ad: e8:b9:31:e5:f6:a0:da:3f:b0:a0:19:d6:be:7f:2f:32:45:6b: 8a:aa:b7:e5:92:d3:9e:87:5d:8d:00:50:2c:a6:81:78:e7:ec: cd:b0:f5:97:cf:25:01:f3:72:cb:96:44:36:93:5a:e8:06:19: 81:f7:70:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNzci0xxTHAZeNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2E4MTJkMzYtNTZmNi00MzQ0LWFiM2UtOGM5MjZkZjk0ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ym26cWHf3j6QRv4OLvRcXMAc1ZKViXUCJyF Z2wjmIWx1C6o5kbKNCJCYjmTY+raqdsy1H0sMaHj2CtHpvsdaB4sInqB93lHvYFW bwKaW+a7VtZBBIGmQ+UbxGP6sCOFCXjXIdzoII3oyZ1Dgo3o4Un2wsP5gblQZweY TiOkItZR6qElLpZlfdkbvvD3/zWikywtdYvMM5yLuhLZ/d1cqnn4eBD6ndA/9K6f v86oufmluB8R7ZBKKakHx6/o3c20jM3yK8qx+2eDQ5MSyO+qJSD8ZGIa2MxCiDC8 nhJFtSG7sC9ylCQNeMh28NbSc41GElbJ+DhLyZIhh2SJ7SzWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYSiN0T7OLrRUXfMmAuKO2HmWQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNTlhOWQ1N2ItNDY4Ny0z YTgyLWFhOTktNmNiZTQwNDY1ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAgI5TjqpvXm/5FPo8KC4J4Ow8PWYdq5AxaBKm2q29vF6qyCM2HH+zb JNM877hGYy0zDwB2sQ2YdOeoye7MbS/0kDSuyTIn21J9QREillesQRGGn4zwUlYQ A2mSUHG0Jk6pH9RDj/CkEU+DTSQqtw5s7S+hSY5WcvYpcFGQ3BvojDAJBGBVweHQ MgDwGA7g1VjPSGUBRDEgA2Dn3KiXYLmsDOlN+7soMINqD7VMdZNGXP3lcka+kHvV qO4vaQ7RVeWOj/QLrei5MeX2oNo/sKAZ1r5/LzJFa4qqt+WS056HXY0AUCymgXjn 7M2w9ZfPJQHzcsuWRDaTWugGGYH3cNI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:27 2025 by rpki-client