$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa File: 619e354c-81d0-3a65-8f58-b153e3edfc38.roa (raw, json) Hash identifier: 5hgJVKV64xTUsTfn2bDcTm3+wrU7vVT5shdiBM+iIg4= Subject key identifier: 62:0B:1D:F4:2C:15:B0:67:87:A5:99:59:69:F8:F5:66:07:BD:2E:D9 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F3773866FCC6746783DA680 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:73:86:6f:cc:67:46:78:3d:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=409f6a0b-f1fe-48d0-9686-a151b9ba0fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:b5:ce:43:8a:5c:05:82:90:eb:4a:53:98: e8:7a:a7:13:b1:20:cd:d2:89:6c:81:7e:c3:26:d9: 27:0e:02:60:85:b2:32:5d:7d:7d:5f:85:9a:8d:6c: 6f:69:b5:64:c3:be:ab:85:96:41:99:fe:80:15:82: 76:ee:db:15:0d:e2:d4:07:fe:7b:19:91:b5:26:60: 22:96:12:69:9d:6a:94:e7:52:35:de:e6:4d:f8:23: 66:31:09:db:12:4a:93:17:39:f4:44:25:ad:24:ef: d5:ea:c8:6a:82:31:08:ee:c8:e7:04:9a:42:48:1d: 9d:32:85:30:13:be:0f:36:5d:7e:43:02:50:99:d9: a0:b1:18:72:5a:6a:df:0a:ae:f5:51:2c:af:5b:cf: 2f:30:40:25:38:94:91:c9:81:fa:6b:60:e1:40:92: 42:b7:2d:05:40:8b:a3:d0:51:75:1c:90:c6:cc:56: 14:31:4b:af:86:3f:07:83:30:f0:5e:16:6f:ea:1e: 91:f2:dd:6b:0a:34:68:1b:7a:64:f4:42:7e:6b:bc: c0:03:9c:29:8b:0b:ed:14:12:41:89:30:8a:26:f5: 9c:a4:d8:ff:ad:af:91:1e:2d:e6:d5:ad:00:53:78: 91:c0:1a:6b:0b:85:7f:bf:51:d4:6e:29:a9:3e:a5: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0B:1D:F4:2C:15:B0:67:87:A5:99:59:69:F8:F5:66:07:BD:2E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b4:33:2f:66:d1:32:26:d3:a9:4b:be:f8:94:16:16:37:96: 70:4e:62:e0:96:f8:9c:66:f8:4b:9a:e2:51:86:b8:64:c0:25: 79:82:62:2d:64:51:f0:b0:9a:3d:a5:e0:55:e5:bd:75:6f:a0: f2:6f:9c:0b:ee:07:fa:bd:03:77:1b:62:28:c0:e6:96:74:c1: a2:28:30:b9:4f:3a:a7:4c:d0:ab:d9:b0:86:35:16:b7:62:31: 01:19:cb:6a:6f:7f:72:b4:55:ca:4e:b5:1e:65:a4:1b:79:4f: aa:84:90:d0:46:79:55:d3:8e:d1:b5:44:87:9a:9a:a8:85:f8: 20:26:b2:aa:16:ba:3c:c4:d0:03:93:39:35:ac:a8:58:5a:d8: 32:85:93:ef:0c:d2:87:9e:c4:38:48:c4:e6:55:5e:bc:d2:fa: b7:d4:9b:0a:06:fc:48:1d:e5:e8:73:d6:b8:10:ec:07:0d:76: 85:5a:77:09:db:e4:b3:47:32:a2:6a:3d:42:a8:80:a3:e2:22: 51:3e:d5:39:40:e3:a2:29:8b:e1:a7:27:43:90:9e:1f:30:01: 25:2c:77:4e:17:81:9b:0e:5f:b0:e0:88:75:7c:05:f6:c3:fd: bd:c9:ef:0a:91:cf:61:1c:fb:07:4d:73:b7:e9:9b:fb:87:b3: 28:ea:1d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3OGb8xnRng9poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NDA5ZjZhMGItZjFmZS00OGQwLTk2ODYtYTE1MWI5YmEwZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphC1zkOKXAWCkOtKU5joeqcTsSDN0olsgX7D JtknDgJghbIyXX19X4WajWxvabVkw76rhZZBmf6AFYJ27tsVDeLUB/57GZG1JmAi lhJpnWqU51I13uZN+CNmMQnbEkqTFzn0RCWtJO/V6shqgjEI7sjnBJpCSB2dMoUw E74PNl1+QwJQmdmgsRhyWmrfCq71USyvW88vMEAlOJSRyYH6a2DhQJJCty0FQIuj 0FF1HJDGzFYUMUuvhj8HgzDwXhZv6h6R8t1rCjRoG3pk9EJ+a7zAA5wpiwvtFBJB iTCKJvWcpNj/ra+RHi3m1a0AU3iRwBprC4V/v1HUbimpPqWx5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGILHfQsFbBnh6WZWWn49WYHvS7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjE5ZTM1NGMtODFkMC0z YTY1LThmNTgtYjE1M2UzZWRmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy0My9m0TIm06lLvviUFhY3lnBOYuCW+Jxm+Eua4lGGuGTAJXmCYi1k UfCwmj2l4FXlvXVvoPJvnAvuB/q9A3cbYijA5pZ0waIoMLlPOqdM0KvZsIY1Frdi MQEZy2pvf3K0VcpOtR5lpBt5T6qEkNBGeVXTjtG1RIeamqiF+CAmsqoWujzE0AOT OTWsqFha2DKFk+8M0oeexDhIxOZVXrzS+rfUmwoG/Egd5ehz1rgQ7AcNdoVadwnb 5LNHMqJqPUKogKPiIlE+1TlA46Ipi+GnJ0OQnh8wASUsd04XgZsOX7DgiHV8BfbD /b3J7wqRz2Ec+wdNc7fpm/uHsyjqHcI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:41 2025 by rpki-client