$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa File: b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa (raw, json) Hash identifier: CtAkS3HxD1NxBRJrVFekep8wlJXls/USVSThFWY0eQM= Subject key identifier: 92:3A:A5:9D:F2:49:51:7C:7F:A3:FD:AE:33:1A:75:6F:FD:67:63:41 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CA1629CFB6C3BF7E28000 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:a1:62:9c:fb:6c:3b:f7:e2:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=660feba5-c4d3-42fb-8343-fe20dba2af15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:13:48:ac:aa:e2:0a:25:ff:e0:d5:3c:93: a2:09:a1:e0:a1:a6:41:70:bb:0a:53:ef:af:30:e1: ec:ea:fc:1a:f7:d3:dc:f7:ef:67:fe:21:68:43:cd: f5:ea:54:09:0f:82:f5:64:01:7d:56:a0:6a:95:80: 5b:67:71:b1:45:d1:c7:6e:a3:d4:e1:6a:2d:da:b5: 88:40:a5:12:00:74:7d:60:b9:26:96:98:2b:f9:15: e9:3f:c7:6f:b5:90:c6:d3:2e:14:f1:27:f0:56:94: c4:4c:97:b3:eb:80:2e:01:e0:e5:ce:35:03:c6:0d: 31:02:77:87:35:aa:10:d5:f5:7b:41:1e:76:fb:6c: 40:dd:4b:9e:6c:7e:1c:a1:61:6e:64:9d:1c:e7:05: 80:c3:a0:29:92:bb:73:f9:e0:3e:4a:bd:31:6f:ec: 75:d4:2f:f6:4b:f9:36:72:83:96:9c:7d:ad:b9:3f: bd:a5:69:3b:4c:10:3e:87:e9:d5:80:d1:56:5e:bb: f6:2b:0b:7a:b7:f4:89:19:ed:bd:da:0d:ed:18:b7: 98:d8:bb:d9:f0:16:1b:37:75:51:c1:de:a3:41:5a: 8f:c6:3e:54:fb:b2:89:24:96:60:77:f9:99:30:f0: 21:65:c7:31:72:c4:08:00:67:1e:11:6b:cc:44:13: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:A5:9D:F2:49:51:7C:7F:A3:FD:AE:33:1A:75:6F:FD:67:63:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:08:b4:72:d4:77:0f:a3:e4:7d:ac:ba:d8:ec:39:e0:f9:9d: 44:18:2f:bd:dc:4a:ed:72:59:42:f5:7c:c8:3f:40:64:52:ea: 8f:6f:5d:13:90:14:d7:39:b3:b4:2c:73:cd:dd:71:ba:6f:41: ea:d2:af:5e:06:3c:03:87:ed:48:76:a2:e9:24:11:e4:27:a8: a2:87:c4:7e:81:0f:2a:9b:4f:a8:7f:d1:9b:73:7c:9e:1f:d6: 8f:98:b3:1b:31:fb:bd:22:48:9d:a1:50:ac:66:1c:ab:6f:73: 1f:f7:5c:29:24:df:a0:f4:85:9b:d5:13:99:1a:cb:2b:13:ab: 74:5c:96:ae:b5:7c:e0:5e:1f:1b:26:ad:66:08:0d:cc:59:28: fd:37:6b:d8:78:19:05:0f:9f:3b:79:97:28:b9:70:99:40:a0: ab:c0:f4:95:14:f2:dc:1a:bb:d1:96:85:13:98:f3:ab:c7:38: 7e:aa:40:6a:ce:f9:77:fd:fa:3d:93:d1:39:97:fa:d2:e0:cb: a4:aa:26:32:30:0a:c2:51:4f:7e:40:a2:0b:34:9d:d4:4b:ca: e9:f3:b6:ee:d0:dd:30:60:7b:4a:97:f3:dd:bc:75:fb:8d:da: 92:0a:d5:a5:fb:08:34:f3:2b:36:12:1b:44:d1:be:4f:3d:61: ea:a0:42:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfKFinPtsO/figAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjYwZmViYTUtYzRkMy00MmZiLTgzNDMtZmUyMGRiYTJhZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNkTSKyq4gol/+DVPJOiCaHgoaZBcLsKU++v MOHs6vwa99Pc9+9n/iFoQ8316lQJD4L1ZAF9VqBqlYBbZ3GxRdHHbqPU4Wot2rWI QKUSAHR9YLkmlpgr+RXpP8dvtZDG0y4U8SfwVpTETJez64AuAeDlzjUDxg0xAneH NaoQ1fV7QR52+2xA3UuebH4coWFuZJ0c5wWAw6Apkrtz+eA+Sr0xb+x11C/2S/k2 coOWnH2tuT+9pWk7TBA+h+nVgNFWXrv2Kwt6t/SJGe292g3tGLeY2LvZ8BYbN3VR wd6jQVqPxj5U+7KJJJZgd/mZMPAhZccxcsQIAGceEWvMRBMdvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI6pZ3ySVF8f6P9rjMadW/9Z2NBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjY0NGMwZGItY2ZlMi0z MThhLTljODktMmE3YmVmNWU1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIItHLUdw+j5H2sutjsOeD5nUQYL73cSu1yWUL1fMg/QGRS6o9vXROQ FNc5s7Qsc83dcbpvQerSr14GPAOH7Uh2oukkEeQnqKKHxH6BDyqbT6h/0ZtzfJ4f 1o+Ysxsx+70iSJ2hUKxmHKtvcx/3XCkk36D0hZvVE5kayysTq3Rclq61fOBeHxsm rWYIDcxZKP03a9h4GQUPnzt5lyi5cJlAoKvA9JUU8twau9GWhROY86vHOH6qQGrO +Xf9+j2T0TmX+tLgy6SqJjIwCsJRT35Aogs0ndRLyunztu7Q3TBge0qX8928dfuN 2pIK1aX7CDTzKzYSG0TRvk89YeqgQpE= -----END CERTIFICATE-----Generated at Thu Oct 29 05:49:49 2026 by rpki-client