$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: gSozTAUKLUVzBnQFYeAnzIycyR3Sqzs/CriOOWm/020= Subject key identifier: BF:A0:C0:07:B7:87:62:B1:D0:6D:86:8D:BD:09:4F:12:D2:35:B3:9D Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F376A36D55715B0CF205500 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:6a:36:d5:57:15:b0:cf:20:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=e32bea10-600d-40f1-9bd3-6dab166d3b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:5d:f0:cd:5f:08:99:e5:ef:fa:b6:88:ad: 0e:f4:52:8c:47:82:f0:64:c1:f1:07:d3:3e:88:64: 32:0b:83:02:5b:ac:c2:a6:aa:2d:a7:01:56:c8:28: fd:20:f8:82:22:fe:ff:10:60:53:d5:6a:3f:a4:36: 17:d0:a8:f3:45:b6:bf:21:ae:11:d6:6d:4f:2e:2a: 7b:6c:eb:f2:f6:62:22:55:fd:01:06:bf:53:a1:1b: 95:a3:7c:fe:d5:70:1a:1b:61:d7:ef:79:19:f2:7f: 11:f3:16:1c:83:2d:78:77:b6:13:45:ae:1d:08:a7: 9b:72:f4:f8:6f:55:67:cf:9d:5f:a3:47:bf:ff:99: eb:08:94:97:08:21:93:bf:41:b2:c9:80:24:b6:9e: 5f:38:4f:0d:19:04:d4:08:48:5f:1b:66:28:ef:4f: 31:b3:98:fa:2a:41:36:3d:e8:4d:0e:44:9d:68:bf: 0a:83:f0:41:08:39:67:6a:bb:1b:de:3a:f5:70:46: 97:41:b1:1e:27:5a:21:1e:cd:b5:7f:70:01:db:7f: c5:a6:24:9f:21:bf:d0:09:ec:80:ce:3a:4e:f9:b8: 32:d8:eb:a7:a3:16:05:63:2d:c4:19:7f:2c:47:5e: 78:d7:df:be:51:d7:09:6b:4c:aa:41:33:0c:ac:f9: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:C0:07:B7:87:62:B1:D0:6D:86:8D:BD:09:4F:12:D2:35:B3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9d:70:10:ae:ec:65:a4:02:df:c9:eb:56:b8:ce:c3:a0:d3: 0a:5c:ab:9c:6e:56:a2:a3:f4:b8:4e:f7:f0:9f:81:51:fd:00: 4a:24:cd:b1:92:af:76:2c:ee:0b:56:15:30:af:db:4d:bb:a8: f8:16:9b:3c:46:d3:1b:40:7f:92:ec:c7:e3:c0:5f:f6:a1:49: 47:48:88:df:33:36:37:77:ec:57:af:ad:9e:62:c9:29:8c:7d: ff:59:c0:74:e1:52:fe:6b:cd:2f:a6:c6:cb:60:2b:d1:19:bc: 0b:87:19:a5:4f:ff:33:54:bd:43:c6:96:57:2d:62:f7:9d:d6: 67:44:dd:de:c6:c9:62:1c:76:30:e3:90:1f:42:49:a0:7c:20: 32:33:7f:b0:94:e3:8c:d5:eb:0c:d3:93:1d:d9:e8:74:eb:af: a5:57:45:ae:3a:d1:f4:44:fc:d8:3a:10:aa:a5:d4:df:b9:08: ca:47:6f:b1:e0:1e:86:67:e6:19:20:a0:ae:9b:74:16:6d:91: 67:96:89:58:ea:b9:34:12:86:81:95:5c:98:81:b2:65:09:3f: 06:52:55:84:17:db:ec:02:f2:ac:4a:ee:c3:18:8d:72:e4:2d: c8:8d:d2:41:92:b9:d5:ff:26:02:40:48:c7:ae:19:f1:ab:66: 26:12:a8:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2o21VcVsM8gVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTMyYmVhMTAtNjAwZC00MGYxLTliZDMtNmRhYjE2NmQzYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAtd8M1fCJnl7/q2iK0O9FKMR4LwZMHxB9M+ iGQyC4MCW6zCpqotpwFWyCj9IPiCIv7/EGBT1Wo/pDYX0KjzRba/Ia4R1m1PLip7 bOvy9mIiVf0BBr9ToRuVo3z+1XAaG2HX73kZ8n8R8xYcgy14d7YTRa4dCKebcvT4 b1Vnz51fo0e//5nrCJSXCCGTv0GyyYAktp5fOE8NGQTUCEhfG2Yo708xs5j6KkE2 PehNDkSdaL8Kg/BBCDlnarsb3jr1cEaXQbEeJ1ohHs21f3AB23/FpiSfIb/QCeyA zjpO+bgy2OunoxYFYy3EGX8sR15419++UdcJa0yqQTMMrPnBHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+gwAe3h2Kx0G2Gjb0JTxLSNbOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEydcBCu7GWkAt/J61a4zsOg0wpcq5xuVqKj9LhO9/CfgVH9AEokzbGS r3Ys7gtWFTCv2027qPgWmzxG0xtAf5Lsx+PAX/ahSUdIiN8zNjd37FevrZ5iySmM ff9ZwHThUv5rzS+mxstgK9EZvAuHGaVP/zNUvUPGllctYved1mdE3d7GyWIcdjDj kB9CSaB8IDIzf7CU44zV6wzTkx3Z6HTrr6VXRa460fRE/Ng6EKql1N+5CMpHb7Hg HoZn5hkgoK6bdBZtkWeWiVjquTQShoGVXJiBsmUJPwZSVYQX2+wC8qxK7sMYjXLk LciN0kGSudX/JgJASMeuGfGrZiYSqKA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:17 2025 by rpki-client