$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa File: bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa (raw, json) Hash identifier: Z+rSd/1FBk+AyfQzseeyjXMkNXRaGo47mbFYVsgbwqI= Subject key identifier: 23:DC:7C:8A:34:CB:7F:AF:B1:A6:4F:EE:5A:8E:3C:76:EE:3B:83:AE Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CC777BDDFA2BAC4C1C780 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:c7:77:bd:df:a2:ba:c4:c1:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=166a1d8e-d5d1-418b-a485-ad51a05dcedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:a8:a4:37:79:f9:e0:da:56:a4:03:f9:c2: d9:dd:21:d0:ad:01:b8:0a:84:66:b6:f8:05:0c:bd: 08:b0:6b:f2:31:7e:1c:4c:d4:8d:8a:a8:09:e7:31: b5:d8:86:bb:9d:98:8e:76:9c:74:6a:a0:9b:56:0b: 7b:a5:d4:f0:7f:ae:b6:04:ca:fe:c1:c6:c3:76:c9: 3d:86:0f:1b:29:65:c3:4c:f4:5a:43:81:a7:1d:f6: 27:2a:3d:95:6f:67:b9:03:1e:9e:a0:c4:c7:cc:79: c4:e4:17:86:25:27:96:c7:cb:63:a3:ad:e0:4a:0c: 7b:e3:5f:9c:bc:60:7b:80:92:06:f1:64:7b:50:ce: 04:c0:6c:2d:a0:8d:75:6e:60:7c:75:2b:89:d8:82: 28:f3:62:17:c9:57:57:2a:40:89:99:36:fd:70:f3: db:05:0b:30:11:03:e5:4d:00:17:b3:27:fd:cb:34: 1a:62:42:ca:1a:97:ae:82:a4:f0:30:8e:6b:85:52: f5:9e:93:94:5e:1d:36:57:21:bf:b7:cf:45:c8:3e: 26:ba:1c:42:7b:bf:e6:43:44:0b:45:99:a2:ac:e4: 6a:a5:19:b9:9e:1e:3b:fd:ef:09:22:86:a3:fa:61: c4:94:56:ae:27:47:5a:c2:33:c8:ef:1a:8d:e6:a3: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DC:7C:8A:34:CB:7F:AF:B1:A6:4F:EE:5A:8E:3C:76:EE:3B:83:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:29:8e:bc:8a:46:c8:b2:57:75:6a:24:49:83:c6:bc:c3:1b: 7c:ea:e4:82:87:5e:46:b0:b6:bf:62:b7:04:e1:1b:9b:bc:04: 0b:ab:9a:22:e6:23:f2:8b:b7:f2:d8:29:85:86:3a:db:0d:94: 25:ad:75:ed:39:61:40:b0:b9:c8:17:b5:b1:6a:ed:88:82:4b: d0:f5:a4:90:71:e9:d4:32:f6:ac:93:ab:a2:65:9b:96:7a:1c: e2:d6:b8:e4:5c:96:53:4c:1a:71:0d:cb:29:06:84:38:bf:e7: 36:6c:7a:ed:e7:08:3a:6f:a5:b6:7b:09:8d:bb:67:57:09:4e: 89:f6:dd:5f:b3:3b:79:6d:78:35:58:e6:ac:15:ce:11:09:69: 35:2c:8b:20:8b:dd:51:a9:3f:e3:1a:50:5b:e1:e4:4c:5c:75: e4:f5:c2:7f:cd:b8:43:81:16:55:49:c3:a1:de:34:21:f6:54: 2e:43:ee:3e:4d:3a:f5:af:e1:0d:0c:19:92:63:2c:5c:f9:b4: 28:2b:86:fe:70:f6:44:d3:12:cc:00:6b:1d:b7:9e:eb:09:d0: 35:60:15:59:b0:f9:6e:f4:ed:34:cd:a0:90:9f:f6:3e:31:37: a6:55:80:d2:0f:bb:9a:05:72:a3:9a:52:ac:69:41:0b:50:20: 9b:ee:d0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMd3vd+iusTBx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTY2YTFkOGUtZDVkMS00MThiLWE0ODUtYWQ1MWEwNWRjZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvCopDd5+eDaVqQD+cLZ3SHQrQG4CoRmtvgF DL0IsGvyMX4cTNSNiqgJ5zG12Ia7nZiOdpx0aqCbVgt7pdTwf662BMr+wcbDdsk9 hg8bKWXDTPRaQ4GnHfYnKj2Vb2e5Ax6eoMTHzHnE5BeGJSeWx8tjo63gSgx741+c vGB7gJIG8WR7UM4EwGwtoI11bmB8dSuJ2IIo82IXyVdXKkCJmTb9cPPbBQswEQPl TQAXsyf9yzQaYkLKGpeugqTwMI5rhVL1npOUXh02VyG/t89FyD4muhxCe7/mQ0QL RZmirORqpRm5nh47/e8JIoaj+mHElFauJ0dawjPI7xqN5qO/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPcfIo0y3+vsaZP7lqOPHbuO4OuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmQ3ZWEzM2ItMGU5Ny0z M2VhLWI1YjYtNGQwMmE3NTE2ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwpjryKRsiyV3VqJEmDxrzDG3zq5IKHXkawtr9itwThG5u8BAurmiLm I/KLt/LYKYWGOtsNlCWtde05YUCwucgXtbFq7YiCS9D1pJBx6dQy9qyTq6Jlm5Z6 HOLWuORcllNMGnENyykGhDi/5zZseu3nCDpvpbZ7CY27Z1cJTon23V+zO3lteDVY 5qwVzhEJaTUsiyCL3VGpP+MaUFvh5ExcdeT1wn/NuEOBFlVJw6HeNCH2VC5D7j5N OvWv4Q0MGZJjLFz5tCgrhv5w9kTTEswAax23nusJ0DVgFVmw+W707TTNoJCf9j4x N6ZVgNIPu5oFcqOaUqxpQQtQIJvu0M0= -----END CERTIFICATE-----Generated at Wed Oct 28 06:16:42 2026 by rpki-client