$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa File: 89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa (raw, json) Hash identifier: jZ2xas4m+Sf7H+QedYwVadVBNGwf08kH44DSaxaARZw= Subject key identifier: 97:74:29:1B:62:42:B8:E8:80:BF:09:BE:27:FF:46:81:1D:32:D4:84 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CB223218D0D80E8DE8B60 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:b2:23:21:8d:0d:80:e8:de:8b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4de6b30c-0d7d-41e3-9d36-b49a5261eb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:66:bd:0a:da:2a:3d:e4:ec:aa:53:df:76: 8b:2c:c6:0b:d6:95:41:00:1d:a6:96:41:7f:76:e3: b8:99:d2:63:aa:2c:ce:ea:89:5e:9d:14:18:a6:43: 85:74:32:ef:3b:32:4d:f0:ae:78:cc:bc:2d:d2:b9: 16:7d:5d:63:21:59:e7:07:45:dc:4c:4e:6b:c1:ab: d1:18:26:35:26:99:c4:43:1f:ba:a8:0c:d1:e7:21: 8c:f8:30:cb:30:50:78:79:b6:d0:bd:06:8b:4e:24: da:57:2a:74:ab:b8:d4:c3:60:ee:42:5d:d1:ae:e4: d7:3b:41:41:40:18:bd:e4:12:0b:21:52:82:48:b9: 86:eb:82:94:c5:98:5c:58:34:ba:1a:af:be:95:33: 69:d2:c3:05:49:1c:d4:b9:8e:0c:61:d6:d7:a4:4a: 81:82:9f:e5:22:63:89:3f:53:14:8d:ba:dc:8d:45: 2d:8a:14:f2:71:a6:3a:7b:4e:0a:b8:6f:7a:ab:af: fd:f6:3b:56:c5:19:ba:ce:d0:e2:23:73:7a:99:56: 50:7b:95:1d:94:91:a7:1f:67:c3:15:97:c8:98:95: e5:3d:e8:ff:6d:b2:20:1e:f3:34:38:1c:67:af:ec: 9b:fa:38:15:36:ab:12:6e:1f:6d:e3:9d:c2:04:c5: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:29:1B:62:42:B8:E8:80:BF:09:BE:27:FF:46:81:1D:32:D4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:db:4a:ef:36:24:ba:80:05:74:94:35:ed:52:6c:d7:d9:56: 24:03:f9:fd:7c:4f:e2:39:af:5e:49:14:96:eb:5b:9d:4e:a6: b5:68:aa:e6:74:9c:51:1a:0a:8c:5b:76:6a:9e:67:e5:97:b3: 1c:fe:6e:55:78:a0:a3:4d:21:14:89:52:3d:9b:1e:bd:05:a2: 5b:b4:fc:99:40:9e:d8:cc:0d:2e:4f:b9:66:f0:c6:be:37:9c: 58:e9:51:0f:d7:a5:fd:87:de:40:41:dd:15:9f:31:a5:f3:c6: fd:26:1c:1f:ec:53:0a:b8:8f:eb:57:e4:7d:c7:64:e8:50:01: e7:d8:8d:64:46:b7:fc:2e:b5:bf:a0:e6:ca:d9:35:2b:c0:3e: 5b:65:8d:f9:35:eb:9f:b6:df:1a:ce:6a:2f:d3:20:07:1c:e2: 14:f3:8e:f9:ac:0a:86:cb:1a:d5:12:0e:2b:0b:22:b6:1c:05: ec:90:e1:78:94:45:44:57:c7:21:8f:37:ef:e7:5d:28:35:47: 22:90:e1:b0:3a:f0:78:df:fd:5a:e3:87:16:5d:26:d5:7b:07: 8a:c5:58:6b:d1:f9:3e:fb:83:3c:fc:89:02:6f:a4:06:a2:9a: 14:7b:00:3b:ea:9a:ad:4d:77:44:b5:43:9d:e9:48:d6:49:78: bb:61:f9:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLIjIY0NgOjei2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGRlNmIzMGMtMGQ3ZC00MWUzLTlkMzYtYjQ5YTUyNjFlYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqttmvQraKj3k7KpT33aLLMYL1pVBAB2mlkF/ duO4mdJjqizO6olenRQYpkOFdDLvOzJN8K54zLwt0rkWfV1jIVnnB0XcTE5rwavR GCY1JpnEQx+6qAzR5yGM+DDLMFB4ebbQvQaLTiTaVyp0q7jUw2DuQl3RruTXO0FB QBi95BILIVKCSLmG64KUxZhcWDS6Gq++lTNp0sMFSRzUuY4MYdbXpEqBgp/lImOJ P1MUjbrcjUUtihTycaY6e04KuG96q6/99jtWxRm6ztDiI3N6mVZQe5UdlJGnH2fD FZfImJXlPej/bbIgHvM0OBxnr+yb+jgVNqsSbh9t453CBMXYDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd0KRtiQrjogL8Jvif/RoEdMtSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODlkY2ZkNTQtNDgxYy0z YTU3LWI1ZTAtOTNkYzc2ZWE4N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7bSu82JLqABXSUNe1SbNfZViQD+f18T+I5r15JFJbrW51OprVoquZ0 nFEaCoxbdmqeZ+WXsxz+blV4oKNNIRSJUj2bHr0Folu0/JlAntjMDS5PuWbwxr43 nFjpUQ/Xpf2H3kBB3RWfMaXzxv0mHB/sUwq4j+tX5H3HZOhQAefYjWRGt/wutb+g 5srZNSvAPltljfk165+23xrOai/TIAcc4hTzjvmsCobLGtUSDisLIrYcBeyQ4XiU RURXxyGPN+/nXSg1RyKQ4bA68Hjf/VrjhxZdJtV7B4rFWGvR+T77gzz8iQJvpAai mhR7ADvqmq1Nd0S1Q53pSNZJeLth+QM= -----END CERTIFICATE-----Generated at Wed Oct 28 16:32:09 2026 by rpki-client