$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa File: 21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa (raw, json) Hash identifier: Kt7BAWFGr5AACn7Ax2l3uQXXrtzoQrdQHnbWF3HA8Jo= Subject key identifier: CA:58:31:D9:DD:CD:AC:6A:AD:32:78:73:EB:80:38:97:5C:56:F3:2D Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CB09D61B442E2FA4C4F00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:b0:9d:61:b4:42:e2:fa:4c:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=94d27c9f-7975-4545-a38a-cae6b8b61495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:af:12:50:74:d7:63:e5:93:48:56:84:7e: f6:ba:6a:07:36:f6:27:8b:55:1a:a4:1b:73:7e:e6: 49:e0:5c:6f:55:59:95:03:f4:d6:d1:b9:3c:52:7d: 66:30:52:91:63:86:b9:49:5f:23:e8:66:5f:19:43: 13:77:80:bb:b9:25:d0:68:78:96:dc:cc:19:7d:20: 3a:66:dc:5f:2d:72:68:31:78:8c:01:3c:85:a1:6e: 55:68:29:88:aa:4a:2e:3d:24:ca:99:3b:a3:89:33: df:54:52:02:37:2d:ce:04:50:4f:4b:b7:88:62:f4: 68:67:e0:98:1b:d1:87:50:54:36:6d:2b:bb:66:c9: 9f:8a:ba:f1:03:e9:92:24:6b:d5:d9:b9:69:50:a8: ab:72:90:f4:df:3a:0f:4e:2d:df:33:5a:07:09:d8: c0:af:4f:6a:0d:ad:0f:c8:0d:7b:0e:c5:fc:21:73: 7d:7f:da:ee:0f:ac:93:07:e9:28:5e:3f:3b:79:d3: 81:23:e9:d4:5c:c8:7a:0b:20:d7:fe:87:a5:f7:63: 48:a4:34:01:97:66:83:f8:8c:17:5c:5b:a6:39:5b: 9d:d5:60:79:4a:49:04:0d:70:45:07:ba:ce:05:4c: 60:30:a8:c2:30:a2:15:ec:74:45:cf:57:e1:37:a1: a0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:58:31:D9:DD:CD:AC:6A:AD:32:78:73:EB:80:38:97:5C:56:F3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d4:cc:ab:ea:33:cd:0e:ca:7c:be:1f:9e:5f:80:ee:ba:69: 5e:cd:29:b8:3c:1b:44:25:78:2a:82:2e:2c:6f:18:a1:93:3c: fd:af:f1:31:bc:bb:50:8e:b9:6f:62:aa:94:a5:2d:41:38:95: 1e:2d:39:fa:03:41:22:40:ef:d0:cf:19:f1:c0:9f:de:85:91: fd:84:69:ec:d1:f4:0f:84:f7:64:bd:68:01:62:fa:a3:ac:11: d4:15:c3:6f:01:dc:ec:db:72:09:6f:10:e8:4b:02:24:d8:7f: d7:bc:f6:2f:35:3d:bd:e3:ce:2b:3b:d5:aa:4d:1d:75:1c:30: 27:eb:24:0a:69:c6:b0:60:c3:eb:fc:2a:4f:68:95:ed:f4:0a: da:e9:3f:d6:f5:b7:7b:4a:df:3b:8f:46:d9:91:d2:65:78:af: 1b:07:22:ab:4e:85:31:1f:37:87:ae:4f:6c:94:35:08:f1:38: e7:b0:61:f0:06:ec:6b:9c:c0:46:7d:66:69:67:75:68:f2:72: 67:46:87:58:22:df:7e:66:8d:cb:ca:f9:29:27:c4:c9:27:38: a1:b2:43:86:1f:94:e2:af:28:b1:2f:8e:f2:5d:6f:26:31:76: b2:cf:1e:91:07:3c:32:b5:89:f3:4d:c4:fb:44:87:06:58:7e: 70:cf:a6:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLCdYbRC4vpMTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTRkMjdjOWYtNzk3NS00NTQ1LWEzOGEtY2FlNmI4YjYxNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWvElB012Plk0hWhH72umoHNvYni1UapBtz fuZJ4FxvVVmVA/TW0bk8Un1mMFKRY4a5SV8j6GZfGUMTd4C7uSXQaHiW3MwZfSA6 ZtxfLXJoMXiMATyFoW5VaCmIqkouPSTKmTujiTPfVFICNy3OBFBPS7eIYvRoZ+CY G9GHUFQ2bSu7ZsmfirrxA+mSJGvV2blpUKircpD03zoPTi3fM1oHCdjAr09qDa0P yA17DsX8IXN9f9ruD6yTB+koXj87edOBI+nUXMh6CyDX/oel92NIpDQBl2aD+IwX XFumOVud1WB5SkkEDXBFB7rOBUxgMKjCMKIV7HRFz1fhN6GgjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpYMdndzaxqrTJ4c+uAOJdcVvMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMjFiY2NlMWEtMmYwZS0z OWRhLWIwYzYtYzJiMjA0MDJjYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDUzKvqM80Oyny+H55fgO66aV7NKbg8G0QleCqCLixvGKGTPP2v8TG8 u1COuW9iqpSlLUE4lR4tOfoDQSJA79DPGfHAn96Fkf2EaezR9A+E92S9aAFi+qOs EdQVw28B3OzbcglvEOhLAiTYf9e89i81Pb3jzis71apNHXUcMCfrJAppxrBgw+v8 Kk9ole30CtrpP9b1t3tK3zuPRtmR0mV4rxsHIqtOhTEfN4euT2yUNQjxOOewYfAG 7GucwEZ9ZmlndWjycmdGh1gi335mjcvK+SknxMknOKGyQ4YflOKvKLEvjvJdbyYx drLPHpEHPDK1ifNNxPtEhwZYfnDPprI= -----END CERTIFICATE-----Generated at Wed Oct 28 16:32:41 2026 by rpki-client