$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json) Hash identifier: p+kurwCHY9QNF15kx3qkQ/XzqFq5aXs3sYKQUSChxZc= Subject key identifier: 85:D6:6E:B9:4C:B3:99:5B:A1:21:71:E0:B0:67:E0:0D:ED:12:F8:9C Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584F4984DD607DC2F186363E2300 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.22.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:dd:60:7d:c2:f1:86:36:3e:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d83f3d44-dfd6-42d9-8db2-aee0345607da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:2f:d3:d7:2e:3e:fb:7b:1a:4a:7a:a4:b9: 76:42:6f:a4:f7:00:a7:66:2d:43:51:6f:77:d3:7d: 5d:af:45:a0:8f:a3:c9:41:6c:ef:d6:06:fa:63:12: ac:ee:89:a9:fd:98:4c:25:52:d0:75:89:8c:35:05: e0:0f:90:8f:82:be:1c:3e:bc:6c:55:9a:33:e2:a0: 7a:93:c7:f0:c2:2e:ab:de:6d:4e:8c:5d:19:27:f8: d6:84:17:4b:7a:dc:f3:85:19:06:25:3b:95:c3:c3: b9:c4:8c:37:a6:e5:f3:68:8c:7e:b9:00:b1:b8:42: 4e:7a:b8:58:78:42:40:d8:b9:21:1e:f9:39:17:d3: fc:4e:6f:a3:35:64:c5:79:5d:ff:46:20:cc:a5:38: 0f:49:7f:95:85:42:b6:ce:87:dd:a2:bf:ac:3e:50: ea:1a:30:42:df:35:64:95:38:7d:45:87:e8:28:67: 4c:47:21:df:d7:65:89:d1:5b:cb:8c:5c:50:c9:7a: c6:3d:06:d1:f9:aa:62:cf:eb:d5:60:48:8f:0a:31: 60:73:2c:22:09:70:87:78:e3:95:c4:b0:e4:54:e8: 62:93:a9:e4:df:1f:32:83:32:a3:79:a9:5d:bd:0f: 02:df:00:10:7f:64:be:ca:33:28:1f:f1:73:63:b8: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:6E:B9:4C:B3:99:5B:A1:21:71:E0:B0:67:E0:0D:ED:12:F8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3a:54:c8:c3:e3:0e:c4:1b:2f:26:b1:6f:90:71:07:53:70: 84:a8:ce:15:18:c9:41:1b:d1:e1:87:3c:70:91:32:af:b4:50: 86:46:57:0a:da:b7:4a:f4:e9:49:7d:61:67:c2:cc:64:70:ae: 81:05:e0:44:94:6d:26:42:34:37:58:a7:49:98:44:82:ad:5c: cd:4e:6c:2c:5e:f3:b5:b5:ad:c6:cd:bd:23:a8:2f:68:60:b1: 7f:57:49:28:ca:cf:ed:1f:d7:a4:eb:a7:80:8a:a3:99:37:09: a2:42:2b:64:40:16:d3:cf:d0:8f:b5:fa:13:c2:4f:99:10:54: 44:a5:99:8e:06:ea:86:7b:ad:5e:9d:ac:4e:f7:f6:63:17:75: 44:eb:85:a4:fb:b7:a2:19:b9:1d:c4:66:44:66:9d:7b:26:42: 5a:e1:24:88:f0:4c:db:49:42:4c:83:65:e7:50:44:85:fa:2a: e4:85:82:3e:9c:c2:bd:e1:14:e2:66:1b:dd:6f:9e:7f:34:bf: bf:69:84:67:0f:4d:de:91:15:eb:4b:d5:3a:b6:34:62:e4:fc: ab:eb:a9:a8:af:19:9e:a4:b3:fe:6a:fe:ba:55:7c:23:b5:73: 9d:0f:29:e3:11:1b:38:3d:ef:f5:e8:39:9c:aa:63:46:cf:e7: c0:28:0e:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhN1gfcLxhjY+IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDgzZjNkNDQtZGZkNi00MmQ5LThkYjItYWVlMDM0NTYwN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaEv09cuPvt7Gkp6pLl2Qm+k9wCnZi1DUW93 031dr0Wgj6PJQWzv1gb6YxKs7omp/ZhMJVLQdYmMNQXgD5CPgr4cPrxsVZoz4qB6 k8fwwi6r3m1OjF0ZJ/jWhBdLetzzhRkGJTuVw8O5xIw3puXzaIx+uQCxuEJOerhY eEJA2LkhHvk5F9P8Tm+jNWTFeV3/RiDMpTgPSX+VhUK2zofdor+sPlDqGjBC3zVk lTh9RYfoKGdMRyHf12WJ0VvLjFxQyXrGPQbR+apiz+vVYEiPCjFgcywiCXCHeOOV xLDkVOhik6nk3x8ygzKjealdvQ8C3wAQf2S+yjMoH/FzY7h93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXWbrlMs5lboSFx4LBn4A3tEvicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs6VMjD4w7EGy8msW+QcQdTcISozhUYyUEb0eGHPHCRMq+0UIZGVwra t0r06Ul9YWfCzGRwroEF4ESUbSZCNDdYp0mYRIKtXM1ObCxe87W1rcbNvSOoL2hg sX9XSSjKz+0f16Trp4CKo5k3CaJCK2RAFtPP0I+1+hPCT5kQVESlmY4G6oZ7rV6d rE739mMXdUTrhaT7t6IZuR3EZkRmnXsmQlrhJIjwTNtJQkyDZedQRIX6KuSFgj6c wr3hFOJmG91vnn80v79phGcPTd6RFetL1Tq2NGLk/KvrqaivGZ6ks/5q/rpVfCO1 c50PKeMRGzg97/XoOZyqY0bP58AoDhw= -----END CERTIFICATE-----Generated at Wed Oct 28 18:16:56 2026 by rpki-client