$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa File: 631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa (raw, json) Hash identifier: nwzu9PbXPUXB821UHpsJcrz2asn2N5u4tXiaNMC7LZc= Subject key identifier: A4:3A:12:1D:54:3A:6B:B1:CD:59:0A:3C:DE:CB:ED:DB:07:88:C5:41 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F85786C5AF796C85963A69B80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 3320 IP address blocks: 136.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:6c:5a:f7:96:c8:59:63:a6:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=0f2d9de0-c29a-4919-93ac-f4070d540ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:4f:6e:e4:4f:15:cd:9e:54:8e:18:54:30: a3:0f:82:cb:ec:03:a7:f9:78:44:c3:5c:03:86:a8: 94:f2:fc:01:d9:f1:27:2c:30:85:99:13:0e:35:43: 02:f5:48:17:58:f5:8a:c7:58:8f:4e:8f:05:8d:fa: 73:57:9e:b4:eb:c3:46:1a:59:50:5a:e9:96:04:2f: c1:9c:f1:5e:91:1b:79:25:55:c3:d0:04:5f:6b:28: f4:f9:c0:85:7d:db:87:e7:0e:f7:ed:7d:f9:76:ee: 85:86:ee:76:85:3d:08:b3:06:ce:3b:19:f9:11:ea: 9e:cc:8d:8d:6f:54:6a:45:09:3e:b3:57:27:e1:21: e9:c1:fc:5d:1c:4e:e2:57:a9:66:f7:5d:06:0b:47: 7c:f7:51:5d:b2:f0:11:1f:cb:35:48:d3:76:3a:a7: 1e:dd:1d:72:5d:04:64:b0:1d:fa:a9:07:d3:8a:1c: e5:45:d6:86:c2:d5:bb:0d:0f:fd:ce:50:a2:5e:50: 48:8f:55:3f:45:ef:df:4a:97:b9:90:f1:28:0b:d2: 45:f0:68:e3:59:16:f7:6a:d7:0e:a4:98:f7:d4:37: 80:1f:88:04:46:ec:3e:3b:5c:5f:22:1b:28:3b:c9: e5:fd:08:1b:93:3d:39:2a:9d:fb:c5:b9:88:80:61: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3A:12:1D:54:3A:6B:B1:CD:59:0A:3C:DE:CB:ED:DB:07:88:C5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:07:72:65:16:de:25:0f:eb:45:13:02:d5:62:66:5e:40:e3: 4c:28:e7:e5:0e:12:02:51:b0:1d:04:5d:86:63:07:9b:a9:57: 5e:a6:23:12:94:98:7d:a4:8b:38:22:6d:59:55:2c:7d:20:f6: d2:58:9f:f4:e9:d1:92:7d:71:b4:fc:40:d3:96:25:9d:52:31: cc:c9:1e:5a:d0:a5:33:73:72:f8:86:cc:97:33:28:2d:0d:de: 65:a5:3d:5b:76:2b:ea:63:e6:f0:23:28:c9:25:61:70:d2:6d: 23:7e:40:02:57:47:fb:f4:77:b7:da:51:9f:aa:51:48:18:6f: 33:61:b5:1c:00:13:df:d8:67:66:76:62:99:a4:94:56:0a:31: 0c:1e:e8:1c:05:fa:df:b0:eb:8d:f5:83:40:a7:3d:2b:60:84: b1:7d:e3:8d:c6:bd:71:eb:9e:c7:41:72:93:54:ee:a0:03:9a: 32:71:a3:68:8c:8a:68:8e:1f:69:c1:d1:cf:11:68:39:fa:3a: 7c:fb:ae:63:2d:23:ba:fc:9c:19:9d:ef:1b:15:07:ee:fa:8d: 35:f4:f1:6a:8f:c6:cf:da:6b:37:6a:4a:b3:a4:ad:1d:02:6d: 58:fe:c2:37:10:c8:20:55:dc:49:ab:46:9c:1f:73:6b:99:67: d7:07:29:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeGxa95bIWWOmm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MGYyZDlkZTAtYzI5YS00OTE5LTkzYWMtZjQwNzBkNTQwZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu01PbuRPFc2eVI4YVDCjD4LL7AOn+XhEw1wD hqiU8vwB2fEnLDCFmRMONUMC9UgXWPWKx1iPTo8FjfpzV56068NGGllQWumWBC/B nPFekRt5JVXD0ARfayj0+cCFfduH5w737X35du6Fhu52hT0IswbOOxn5EeqezI2N b1RqRQk+s1cn4SHpwfxdHE7iV6lm910GC0d891FdsvARH8s1SNN2Oqce3R1yXQRk sB36qQfTihzlRdaGwtW7DQ/9zlCiXlBIj1U/Re/fSpe5kPEoC9JF8GjjWRb3atcO pJj31DeAH4gERuw+O1xfIhsoO8nl/Qgbkz05Kp37xbmIgGEBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ6Eh1UOmuxzVkKPN7L7dsHiMVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjMxMjkyZjEtMzNkNy0z YjZiLWE2YzgtYTlkZmJiOGZiNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0HcmUW3iUP60UTAtViZl5A40wo5+UOEgJRsB0EXYZjB5upV16mIxKU mH2kizgibVlVLH0g9tJYn/Tp0ZJ9cbT8QNOWJZ1SMczJHlrQpTNzcviGzJczKC0N 3mWlPVt2K+pj5vAjKMklYXDSbSN+QAJXR/v0d7faUZ+qUUgYbzNhtRwAE9/YZ2Z2 YpmklFYKMQwe6BwF+t+w6431g0CnPStghLF9443GvXHrnsdBcpNU7qADmjJxo2iM imiOH2nB0c8RaDn6Onz7rmMtI7r8nBmd7xsVB+76jTX08WqPxs/aazdqSrOkrR0C bVj+wjcQyCBV3EmrRpwfc2uZZ9cHKUg= -----END CERTIFICATE-----Generated at Wed Oct 28 04:49:48 2026 by rpki-client