$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json) Hash identifier: 3rkvahgwJsTRFpvzs1OY1Al63iXkz/YvjHzxqn2Rqsw= Subject key identifier: 06:97:4B:0F:4B:6D:63:43:B8:18:E6:94:53:1C:FA:6B:FE:AD:2E:68 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CC73C1C988BAD12001F00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:c7:3c:1c:98:8b:ad:12:00:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b92ddcc0-d863-43fa-8d8e-9e6a291e97e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:ef:94:f2:4a:bf:a3:a0:6a:eb:3f:e9:44: e3:32:1a:36:4c:72:dd:f2:05:76:94:17:c7:d9:86: 2a:ce:42:77:f6:8c:78:e8:04:bc:b5:c4:7e:62:55: bb:2f:c4:2e:ab:44:d3:fa:bb:3d:74:48:7b:db:08: 4c:42:7c:a7:06:87:cb:22:65:30:2b:79:02:c3:1c: 6d:37:6a:b8:1a:17:e7:e2:40:f7:e3:28:a6:bc:99: 89:52:97:1e:09:f3:8a:4b:aa:5f:d1:94:23:be:fe: 57:49:8b:8d:e4:ce:c4:ad:67:0d:24:c6:9b:ec:e9: df:ff:c8:d8:02:bf:80:0c:7f:db:95:1d:f4:19:af: 9f:f0:ec:ac:18:d2:ad:85:76:93:65:46:61:4c:2e: da:d0:0c:06:80:bd:97:9e:66:9d:11:06:d4:d5:02: e6:e8:cb:39:1f:e8:dd:86:29:5b:a7:d6:6e:84:81: 7b:fe:48:90:22:8b:53:5f:f1:bd:e7:1b:6f:5d:62: 37:5c:38:9d:b0:0d:14:21:9a:59:17:be:55:78:ab: 7e:6a:db:fc:90:ee:f3:82:36:e6:b7:6f:59:c1:13: 8f:44:5e:a5:84:fe:63:00:73:40:2f:be:95:3b:3a: 7f:f6:eb:ea:61:f1:2c:3f:40:a3:85:ed:a5:f0:4a: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:4B:0F:4B:6D:63:43:B8:18:E6:94:53:1C:FA:6B:FE:AD:2E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4e:5f:62:b9:0f:50:0c:c6:ab:20:ce:6d:e9:d4:5c:b4:8e: 25:ff:98:9c:f9:b9:f8:6c:77:6b:b3:6f:79:8a:b4:33:62:d4: 88:d8:23:d6:9e:5c:f6:b8:5e:b9:f5:8d:16:09:b4:f3:19:74: 1c:05:d6:fb:3b:87:6b:61:6d:29:39:a1:5b:66:98:6c:05:31: c1:5c:ef:ae:82:d5:bc:b5:ae:90:3e:de:96:a0:36:49:23:b9: bb:1f:94:85:a3:7f:f4:4c:9f:a8:72:be:67:66:56:cb:f5:71: f0:53:7a:86:3c:74:d7:b8:2d:c8:e2:df:6d:07:5d:1d:7b:d0: c5:68:ef:92:75:16:cc:ee:9f:d4:fb:f3:4f:73:78:47:f8:36: 49:20:d7:99:7c:6b:9e:69:b6:90:1b:09:c8:24:6a:77:0a:1a: 23:fb:48:50:61:99:c1:6f:64:83:be:a9:78:7d:23:13:92:c5: 33:03:03:96:d6:96:29:49:af:2a:b8:3d:5f:f6:ba:3a:dd:af: d8:83:a0:94:0d:70:bb:7f:2b:56:82:66:98:d0:11:1e:cc:a9: be:1a:7d:26:2c:e0:a3:d6:57:f6:c6:4c:6b:cc:de:61:2b:54: e4:3b:ad:87:d0:27:da:23:4a:2d:72:79:64:20:43:cc:e0:dd: 2a:27:c8:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMc8HJiLrRIAHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjkyZGRjYzAtZDg2My00M2ZhLThkOGUtOWU2YTI5MWU5N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34HvlPJKv6Ogaus/6UTjMho2THLd8gV2lBfH 2YYqzkJ39ox46AS8tcR+YlW7L8Quq0TT+rs9dEh72whMQnynBofLImUwK3kCwxxt N2q4Ghfn4kD34yimvJmJUpceCfOKS6pf0ZQjvv5XSYuN5M7ErWcNJMab7Onf/8jY Ar+ADH/blR30Ga+f8OysGNKthXaTZUZhTC7a0AwGgL2XnmadEQbU1QLm6Ms5H+jd hilbp9ZuhIF7/kiQIotTX/G95xtvXWI3XDidsA0UIZpZF75VeKt+atv8kO7zgjbm t29ZwROPRF6lhP5jAHNAL76VOzp/9uvqYfEsP0Cjhe2l8EqfHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaXSw9LbWNDuBjmlFMc+mv+rS5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzNhZjZhMzgtMDJiNi0z ZjkyLWJmMjItNDBmNzNjNDM2Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABROX2K5D1AMxqsgzm3p1Fy0jiX/mJz5ufhsd2uzb3mKtDNi1IjYI9ae XPa4Xrn1jRYJtPMZdBwF1vs7h2thbSk5oVtmmGwFMcFc766C1by1rpA+3pagNkkj ubsflIWjf/RMn6hyvmdmVsv1cfBTeoY8dNe4Lcji320HXR170MVo75J1Fszun9T7 809zeEf4Nkkg15l8a55ptpAbCcgkancKGiP7SFBhmcFvZIO+qXh9IxOSxTMDA5bW lilJryq4PV/2ujrdr9iDoJQNcLt/K1aCZpjQER7Mqb4afSYs4KPWV/bGTGvM3mEr VOQ7rYfQJ9ojSi1yeWQgQ8zg3SonyCE= -----END CERTIFICATE-----Generated at Wed Oct 28 16:36:14 2026 by rpki-client