$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa File: f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa (raw, json) Hash identifier: xHGllytmz0B5qGvfQNQzU2phu9ZsBMZWuRhz0Ay4SMM= Subject key identifier: 8D:0F:43:CB:3A:86:A4:77:68:C6:2F:47:CE:BD:14:B6:C2:07:82:1D Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584B5F373DF6854D4848B728B980 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 36040 IP address blocks: 136.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:3d:f6:85:4d:48:48:b7:28:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=5f26d856-6811-4c46-ae7a-cfa2dd3bc626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0a:f2:81:5a:0f:6e:44:35:1d:1b:32:4f:5e: 58:c5:e0:c1:93:b4:85:c2:e7:88:29:05:bf:f7:48: 8a:d5:9a:81:98:72:06:d5:4b:96:04:82:6d:db:ac: fe:c3:c5:8e:c5:7d:d5:0c:41:d9:6b:e4:06:3d:6a: 63:e7:78:f0:fc:06:6e:dd:bc:b5:73:58:29:c7:96: 4c:7a:06:81:20:80:05:88:1c:ee:0e:2d:9b:df:9a: d6:c9:5f:07:bf:b0:0b:7b:62:de:23:e2:a0:fc:e2: fe:c4:c9:63:74:35:7c:2b:37:24:2c:34:78:36:f5: dd:d4:40:6e:4e:1a:24:ef:cc:32:63:11:f2:4e:e5: a2:08:0f:fe:c8:7b:9b:98:28:ed:ea:4a:52:3d:75: ac:36:9f:49:3f:e7:48:80:65:1e:98:36:62:23:55: dd:b9:7e:08:74:2f:94:cb:a9:da:5b:57:48:23:70: 0d:f0:ea:4c:98:de:c3:9e:12:e3:fd:aa:c0:d4:37: 52:eb:9c:1d:65:8f:b3:55:e3:68:e1:01:9c:92:a9: ba:df:3b:d5:f5:54:2d:0e:76:21:21:56:fa:51:4e: df:dc:bf:8c:42:03:f3:7d:11:91:57:6f:26:59:e5: 19:e4:35:db:e7:61:30:0c:23:87:76:3b:38:e0:db: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0F:43:CB:3A:86:A4:77:68:C6:2F:47:CE:BD:14:B6:C2:07:82:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1c:ed:c2:19:f7:d2:f7:6f:77:c9:7e:cf:78:e5:1e:b4:ce: da:ef:e3:b8:42:57:22:53:5e:1b:f3:3b:ba:3c:da:3d:8c:44: df:8e:72:c0:85:8f:b9:4f:0b:1b:6e:ad:22:c2:71:63:0d:e3: d9:93:a4:78:2f:32:23:58:00:6f:3c:09:ab:a4:97:83:b5:1f: be:32:09:cc:05:fd:3b:41:a9:20:86:bd:70:14:98:45:ce:d8: 0a:0b:6f:51:71:2a:79:d5:07:b1:08:7b:59:83:92:36:55:9b: 06:83:cd:cd:f3:7a:67:2a:b6:a1:79:c9:4f:98:44:6a:7b:d2: d9:4d:83:f2:43:32:5b:41:db:97:4c:fd:7e:00:b5:b0:16:90: a7:c5:ab:2f:fd:93:87:4c:14:ea:ad:60:ae:84:3d:06:ae:ec: fa:02:57:28:79:78:76:4e:1b:09:1b:9a:ad:d0:df:7a:2b:cb: fe:a8:26:24:26:f2:64:5c:c3:25:63:2c:b2:96:56:dc:7f:bd: 55:65:fb:93:e0:ba:8a:4d:a1:b3:c9:73:1c:a9:98:a8:24:f5: 20:09:9d:0a:83:b0:b1:f6:18:f4:ae:74:cd:58:5e:7a:13:1f: 99:4b:73:ae:88:1a:0a:22:a9:19:10:d2:55:45:73:a0:e0:e2: 0a:1c:32:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz32hU1ISLcouYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NWYyNmQ4NTYtNjgxMS00YzQ2LWFlN2EtY2ZhMmRkM2JjNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4grygVoPbkQ1HRsyT15YxeDBk7SFwueIKQW/ 90iK1ZqBmHIG1UuWBIJt26z+w8WOxX3VDEHZa+QGPWpj53jw/AZu3by1c1gpx5ZM egaBIIAFiBzuDi2b35rWyV8Hv7ALe2LeI+Kg/OL+xMljdDV8KzckLDR4NvXd1EBu Thok78wyYxHyTuWiCA/+yHubmCjt6kpSPXWsNp9JP+dIgGUemDZiI1XduX4IdC+U y6naW1dII3AN8OpMmN7DnhLj/arA1DdS65wdZY+zVeNo4QGckqm63zvV9VQtDnYh IVb6UU7f3L+MQgPzfRGRV28mWeUZ5DXb52EwDCOHdjs44NsqdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0PQ8s6hqR3aMYvR869FLbCB4IdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjIwYjIzNDMtM2JmZC0z YTNmLWI4MzUtM2VjZDRkYTllNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwc7cIZ99L3b3fJfs945R60ztrv47hCVyJTXhvzO7o82j2MRN+OcsCF j7lPCxturSLCcWMN49mTpHgvMiNYAG88Caukl4O1H74yCcwF/TtBqSCGvXAUmEXO 2AoLb1FxKnnVB7EIe1mDkjZVmwaDzc3zemcqtqF5yU+YRGp70tlNg/JDMltB25dM /X4AtbAWkKfFqy/9k4dMFOqtYK6EPQau7PoCVyh5eHZOGwkbmq3Q33ory/6oJiQm 8mRcwyVjLLKWVtx/vVVl+5PguopNobPJcxypmKgk9SAJnQqDsLH2GPSudM1YXnoT H5lLc66IGgoiqRkQ0lVFc6Dg4gocMn4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:27 2025 by rpki-client