$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa File: cfa83893-71b6-3e5f-84ca-567698627079.roa (raw, json) Hash identifier: IJrXAamDaiem1yb6ipPVmmMXbOU7salP0T8KxouC0Uw= Subject key identifier: 23:17:C6:8F:D1:37:2F:05:7C:24:77:3A:13:5F:73:DA:20:4B:68:D7 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F497CB17527CC179C58044800 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:b1:75:27:cc:17:9c:58:04:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c708aa1-418f-4db0-bf1f-813732740830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:26:10:e0:98:64:d7:fe:aa:67:75:99:b7: ea:84:87:7f:3e:8a:57:d6:60:b5:18:76:6f:c1:28: 0f:1b:e7:ec:8b:3d:03:e0:4b:aa:69:a8:b6:af:37: 94:5b:0b:c8:f3:34:e6:36:e4:76:e0:75:d9:1f:d9: 31:18:8f:9e:dc:7e:3e:46:93:ea:f1:fe:c1:12:a9: 8a:99:c2:2d:02:5c:52:81:e2:bb:e9:6c:fb:61:07: e0:3a:35:1d:88:ac:ed:61:0f:22:3c:c3:37:50:51: 6e:a6:b4:33:74:02:04:8d:e0:93:ba:e3:79:6a:fc: 14:3b:df:8d:64:ff:ce:08:99:8a:73:ee:bd:2b:f8: 12:a8:89:0c:04:9b:14:7a:60:8e:bf:98:11:a8:d1: a5:47:0d:5d:7c:f0:68:63:4a:ac:87:66:74:f0:60: 28:3a:3e:6b:22:6a:c1:93:ae:b9:f4:d4:44:bf:e5: 3b:a7:62:96:f2:c7:4d:e5:94:22:9f:ea:7a:26:55: 6a:fe:a2:9c:b7:89:0f:f7:05:bf:95:a6:f7:d9:ae: 17:d0:22:37:22:7f:fa:9c:7f:12:44:f9:34:84:3c: 0e:3d:e5:91:ee:cc:90:7a:f1:8a:39:14:83:2e:da: ac:9c:36:8d:af:79:47:f6:b0:f5:ea:2f:12:3d:e6: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:17:C6:8F:D1:37:2F:05:7C:24:77:3A:13:5F:73:DA:20:4B:68:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:62:2a:14:3c:76:b6:16:0c:71:4a:7d:1a:72:e9:9a:70:e3: 39:60:e8:fd:b5:8c:72:50:6d:4f:a6:9a:95:32:7a:27:c6:bf: 82:27:54:0b:69:65:fe:cc:b0:ca:7a:3a:86:44:1f:f7:01:91: 67:35:03:8b:36:a7:20:b1:65:6e:75:bc:19:6e:5e:23:38:fa: 32:68:ab:ed:24:6d:77:58:9d:3c:6c:c6:05:f8:18:1e:45:7a: 7a:b9:72:70:7f:8b:02:99:b6:bf:0a:f0:d0:21:84:c5:87:0b: 61:98:c4:e5:85:fc:b9:9e:11:82:dd:a9:5c:4e:bd:d1:ea:7c: 1d:96:cd:1f:22:d1:4c:60:88:e1:4d:4e:da:f5:e7:9a:8a:2e: d8:9e:34:f2:d6:d5:ea:dd:b6:ff:3b:01:60:a5:1b:b3:68:e2: 26:06:0b:2e:85:62:13:f9:fc:16:80:fd:d2:68:fb:74:7c:79: a9:52:2e:0f:9f:34:dd:36:dc:7b:c3:50:7a:9d:11:be:6b:df: ee:73:9c:ea:e3:0a:b6:5c:af:8c:2c:9e:13:5f:a0:e6:54:56: 6f:52:4b:b5:e5:5d:0e:43:db:8e:c0:46:fd:2c:9b:20:50:ed: f1:cd:ef:8a:85:22:af:c1:4a:de:6f:57:2e:7c:cb:ef:55:1e: 80:67:bb:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLF1J8wXnFgESAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM3MDhhYTEtNDE4Zi00ZGIwLWJmMWYtODEzNzMyNzQwODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6AmEOCYZNf+qmd1mbfqhId/PopX1mC1GHZv wSgPG+fsiz0D4Euqaai2rzeUWwvI8zTmNuR24HXZH9kxGI+e3H4+RpPq8f7BEqmK mcItAlxSgeK76Wz7YQfgOjUdiKztYQ8iPMM3UFFuprQzdAIEjeCTuuN5avwUO9+N ZP/OCJmKc+69K/gSqIkMBJsUemCOv5gRqNGlRw1dfPBoY0qsh2Z08GAoOj5rImrB k6659NREv+U7p2KW8sdN5ZQin+p6JlVq/qKct4kP9wW/lab32a4X0CI3In/6nH8S RPk0hDwOPeWR7syQevGKORSDLtqsnDaNr3lH9rD16i8SPeahRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMXxo/RNy8FfCR3OhNfc9ogS2jXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvY2ZhODM4OTMtNzFiNi0z ZTVmLTg0Y2EtNTY3Njk4NjI3MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBiKhQ8drYWDHFKfRpy6Zpw4zlg6P21jHJQbU+mmpUyeifGv4InVAtp Zf7MsMp6OoZEH/cBkWc1A4s2pyCxZW51vBluXiM4+jJoq+0kbXdYnTxsxgX4GB5F enq5cnB/iwKZtr8K8NAhhMWHC2GYxOWF/LmeEYLdqVxOvdHqfB2WzR8i0UxgiOFN Ttr155qKLtieNPLW1erdtv87AWClG7No4iYGCy6FYhP5/BaA/dJo+3R8ealSLg+f NN023HvDUHqdEb5r3+5znOrjCrZcr4wsnhNfoOZUVm9SS7XlXQ5D247ARv0smyBQ 7fHN74qFIq/BSt5vVy58y+9VHoBnu/k= -----END CERTIFICATE-----Generated at Wed Oct 28 11:36:44 2026 by rpki-client