$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: GB4fzPfpoOE8lrcPPp6hXzFabTN7zLUL5/kV5siwiEc= Subject key identifier: 64:5B:F6:94:56:F9:28:3F:D2:7F:2D:32:B3:18:33:82:1D:12:64:B1 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F4984CF447B1FB46C14C855C0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:cf:44:7b:1f:b4:6c:14:c8:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a812cce-e9ea-4111-ba5f-b115d02a5c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:b7:f9:21:69:2d:49:1c:7a:3c:ef:0b:ee: 63:e4:fa:50:55:51:9e:19:a6:b4:fc:90:45:7e:aa: ac:77:c2:3f:0e:21:ea:84:00:73:7e:0c:76:ab:06: 7e:04:7f:40:61:b7:f6:9f:f5:e4:cd:32:c2:ca:e3: e3:45:37:a6:03:cd:98:1c:01:2c:aa:2c:30:dd:58: e1:be:b4:cb:cc:ca:81:94:53:25:95:c9:cc:b4:f2: 4c:bc:30:be:af:e4:09:e7:3c:e5:cd:39:70:7b:68: 01:9f:14:2b:3a:62:31:32:d3:70:49:48:9e:71:e5: 32:28:38:e5:34:aa:eb:81:3e:4b:ce:a2:cd:b6:f4: 57:94:08:09:bb:de:6c:e7:c1:14:09:81:40:c4:cc: d7:03:aa:99:24:8e:51:11:35:f6:2d:be:db:68:93: 12:d0:97:45:69:cc:75:bb:aa:9b:4f:7c:dc:b9:71: 02:a0:e1:ce:5f:95:57:b2:ed:b7:61:cc:c7:81:2e: 6a:82:8e:2e:e5:e9:ef:93:6f:43:57:0c:65:19:4d: ca:d8:d3:77:ac:8f:9a:c3:10:27:71:44:65:ea:88: 8a:a8:45:78:44:6a:6a:bf:23:06:81:1f:b9:2c:dd: ba:b6:27:93:60:43:1d:be:12:20:dc:8c:4f:f5:30: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:F6:94:56:F9:28:3F:D2:7F:2D:32:B3:18:33:82:1D:12:64:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5c:6c:71:a1:a2:45:68:5f:04:28:e9:d7:b9:dd:eb:61:f4: 47:5b:e4:39:e0:c8:45:bf:eb:7a:b9:c9:9a:a7:5a:5b:c5:ce: 50:a5:23:8b:c0:0a:8b:fb:71:8a:24:83:7e:fe:b5:f6:32:88: a4:c6:6e:8e:d1:e9:26:4e:af:2e:18:d1:62:02:3f:a9:fc:b4: 5b:1c:26:37:50:c2:19:72:17:bf:5b:66:af:d2:b6:03:26:aa: b8:94:8a:f5:03:3a:d6:47:6f:14:00:41:f5:d7:a8:40:7c:03: 12:0e:6a:22:04:07:3a:84:36:e2:71:94:a0:9a:ab:5c:6b:ba: 22:65:23:05:b7:06:f3:1e:08:d3:3b:d2:4c:35:e7:23:2d:c8: b0:1a:7e:fa:fb:04:3c:7e:fc:84:34:01:c9:ca:4d:19:00:2b: 7e:ce:32:17:2e:b0:63:ab:52:23:59:06:81:09:9a:f0:e7:11: 07:f1:9d:2d:93:65:65:3b:5d:0c:b7:e1:3e:23:e3:b9:8b:64: da:b4:dc:28:5f:ce:83:6d:43:c1:05:40:9c:6f:54:70:cc:f9: 87:c3:97:b1:98:48:ba:e5:c6:48:3f:6d:fd:5b:34:a3:cd:8b: f5:bc:5d:65:a2:c5:c5:3a:8e:70:6e:a8:f9:f9:6c:f7:ad:42: 97:cc:44:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhM9Eex+0bBTIVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGE4MTJjY2UtZTllYS00MTExLWJhNWYtYjExNWQwMmE1Yzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSa3+SFpLUkcejzvC+5j5PpQVVGeGaa0/JBF fqqsd8I/DiHqhABzfgx2qwZ+BH9AYbf2n/XkzTLCyuPjRTemA82YHAEsqiww3Vjh vrTLzMqBlFMllcnMtPJMvDC+r+QJ5zzlzTlwe2gBnxQrOmIxMtNwSUieceUyKDjl NKrrgT5LzqLNtvRXlAgJu95s58EUCYFAxMzXA6qZJI5RETX2Lb7baJMS0JdFacx1 u6qbT3zcuXECoOHOX5VXsu23YczHgS5qgo4u5envk29DVwxlGU3K2NN3rI+awxAn cURl6oiKqEV4RGpqvyMGgR+5LN26tieTYEMdvhIg3IxP9TCJlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRb9pRW+Sg/0n8tMrMYM4IdEmSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxcbHGhokVoXwQo6de53eth9Edb5DngyEW/63q5yZqnWlvFzlClI4vA Cov7cYokg37+tfYyiKTGbo7R6SZOry4Y0WICP6n8tFscJjdQwhlyF79bZq/StgMm qriUivUDOtZHbxQAQfXXqEB8AxIOaiIEBzqENuJxlKCaq1xruiJlIwW3BvMeCNM7 0kw15yMtyLAafvr7BDx+/IQ0AcnKTRkAK37OMhcusGOrUiNZBoEJmvDnEQfxnS2T ZWU7XQy34T4j47mLZNq03ChfzoNtQ8EFQJxvVHDM+YfDl7GYSLrlxkg/bf1bNKPN i/W8XWWixcU6jnBuqPn5bPetQpfMRJg= -----END CERTIFICATE-----Generated at Wed Oct 28 22:53:11 2026 by rpki-client