$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa File: e4352b8d-f0be-3577-958a-9d3589216547.roa (raw, json) Hash identifier: iLlKIIaGbUo9XU9gGzPGGtTxHR7Tww2OUK8IfVUAseY= Subject key identifier: 3F:39:8A:2A:5A:D8:EA:69:5C:5D:B2:89:42:71:CD:C5:FE:9C:AB:A4 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F85787A20CB829E7AF6158DC0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 3320 IP address blocks: 136.22.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:7a:20:cb:82:9e:7a:f6:15:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=21dc0041-d89d-4437-b5d7-017f1d6dd727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c1:ed:db:25:40:c8:53:8b:d4:f2:ae:8d:d0: c1:ef:d8:9a:55:de:26:96:79:73:1e:1b:dc:f0:f9: 9d:07:b9:1c:6c:3a:24:fe:bc:64:bd:11:8e:da:83: c8:5e:67:45:71:6e:60:18:92:f7:e1:d5:71:af:08: 41:8f:00:f5:2f:0b:d0:2c:fb:18:ae:b0:9b:dd:7a: 6e:90:6d:29:a3:b3:48:27:a4:7a:d5:7d:6a:2a:de: c2:ed:99:4d:89:68:19:51:82:bc:68:44:d6:c3:c8: 24:7a:d2:a2:fe:68:d4:7d:13:4e:2a:77:76:cc:c5: 64:12:17:29:86:ac:5e:c0:d9:99:ed:c8:f3:99:2c: 2b:ae:47:16:f9:6f:1d:4d:cb:07:3e:5c:1e:f6:05: 08:c6:cc:36:2e:8a:c6:fa:79:13:79:4a:82:f3:61: be:ff:4f:cf:29:4c:30:3d:c0:0f:64:17:29:90:d9: 72:40:8c:9e:23:43:b3:e7:43:4d:83:79:6e:5c:4b: 5b:d3:f5:13:a5:5f:98:f7:15:c6:38:fb:0b:ca:d6: 46:44:b5:29:09:70:2c:b5:74:4a:ef:b1:5f:8f:83: e9:b9:2b:fc:7e:d4:b0:81:e2:d3:fe:4c:28:21:a9: 41:c3:a1:86:bd:40:5d:56:15:03:e2:3e:46:ed:5d: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:8A:2A:5A:D8:EA:69:5C:5D:B2:89:42:71:CD:C5:FE:9C:AB:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e4352b8d-f0be-3577-958a-9d3589216547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:72:69:7f:3e:87:63:93:0a:fe:f8:53:ae:cc:14:f7:d2:b3: 35:36:25:1c:a4:e5:e2:7d:53:1c:ec:4a:77:15:28:87:f1:43: 81:ac:01:cc:a1:ac:01:4c:9d:44:25:f3:f1:98:c3:cd:62:87: 7c:18:2c:4a:9c:78:87:05:ba:33:fa:e1:55:1b:0d:93:f0:49: f1:e1:e5:f1:44:79:53:ed:b2:41:8b:1e:8c:f2:68:32:32:bb: 61:32:45:ee:40:15:d8:44:4d:47:6c:5f:96:22:3b:08:5f:7b: 16:d6:6e:b8:8e:43:c2:34:ce:33:fb:3b:fb:a7:e5:38:31:a7: 64:cb:31:96:e9:4e:e2:01:f5:45:ee:74:31:87:e5:10:9c:1a: 62:c7:98:5c:8e:bd:f8:25:4e:42:81:dc:45:88:27:86:95:22: 40:2b:e5:2a:bf:e6:33:32:4c:c5:ae:73:d5:cf:13:e8:ed:f7: f7:d4:c0:6d:46:1b:38:5a:94:74:34:b2:16:09:f8:31:51:77: 22:d3:2a:b7:09:6a:cf:15:a7:9f:73:44:f8:60:8d:bb:6e:b5: 24:11:5e:59:f4:72:05:33:4f:57:9c:12:db:7a:01:49:6b:40: 38:ab:2d:07:e3:35:44:f7:32:1a:4e:00:cf:b3:13:00:bb:ee: 78:56:2c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHogy4KeevYVjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MjFkYzAwNDEtZDg5ZC00NDM3LWI1ZDctMDE3ZjFkNmRkNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMHt2yVAyFOL1PKujdDB79iaVd4mlnlzHhvc 8PmdB7kcbDok/rxkvRGO2oPIXmdFcW5gGJL34dVxrwhBjwD1LwvQLPsYrrCb3Xpu kG0po7NIJ6R61X1qKt7C7ZlNiWgZUYK8aETWw8gketKi/mjUfRNOKnd2zMVkEhcp hqxewNmZ7cjzmSwrrkcW+W8dTcsHPlwe9gUIxsw2LorG+nkTeUqC82G+/0/PKUww PcAPZBcpkNlyQIyeI0Oz50NNg3luXEtb0/UTpV+Y9xXGOPsLytZGRLUpCXAstXRK 77Ffj4PpuSv8ftSwgeLT/kwoIalBw6GGvUBdVhUD4j5G7V22NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD85iipa2OppXF2yiUJxzcX+nKukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZTQzNTJiOGQtZjBiZS0z NTc3LTk1OGEtOWQzNTg5MjE2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1yaX8+h2OTCv74U67MFPfSszU2JRyk5eJ9UxzsSncVKIfxQ4GsAcyh rAFMnUQl8/GYw81ih3wYLEqceIcFujP64VUbDZPwSfHh5fFEeVPtskGLHozyaDIy u2EyRe5AFdhETUdsX5YiOwhfexbWbriOQ8I0zjP7O/un5Tgxp2TLMZbpTuIB9UXu dDGH5RCcGmLHmFyOvfglTkKB3EWIJ4aVIkAr5Sq/5jMyTMWuc9XPE+jt9/fUwG1G GzhalHQ0shYJ+DFRdyLTKrcJas8Vp59zRPhgjbtutSQRXln0cgUzT1ecEtt6AUlr QDirLQfjNUT3MhpOAM+zEwC77nhWLO8= -----END CERTIFICATE-----Generated at Wed Oct 28 04:53:39 2026 by rpki-client