$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa File: 42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa (raw, json) Hash identifier: HFkKPHPe+q34/H9E5DbY0VqxlfDp/OY9csfxjcESohQ= Subject key identifier: E3:80:5D:F3:75:95:EB:14:91:C2:0D:8D:F5:02:E5:2D:EA:8A:21:23 Certificate issuer: /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c Certificate serial: 010D0C9F4328584B84E7768F635016D2296D9660 Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 136.184.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:76:8f:63:50:16:d2:29:6d:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=4998bbc7-4c45-4d1d-9d4d-67e7ca0f23e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:83:cf:b3:f8:34:2d:90:92:6b:7d:8d:bd: 9c:a6:fa:36:d7:6e:8c:08:78:b4:2a:d0:e0:f6:48: 83:fd:e0:f1:e8:fa:ef:69:a0:9e:07:7f:af:9b:fb: 1c:6e:39:ba:b2:1a:95:cc:1e:89:55:9c:5f:0a:77: 5d:72:dd:02:c4:3c:66:83:24:8c:49:cf:2c:ec:3d: f8:63:30:ef:bf:03:78:41:df:74:fe:f7:e9:9d:cc: d1:a7:7c:25:e7:de:ce:e5:74:1c:13:03:37:9d:ef: 07:dd:89:c8:de:30:ab:a2:66:99:19:38:da:53:17: 05:e1:9e:aa:84:fa:62:7f:9e:82:69:14:bd:38:62: 1f:55:f5:d2:e7:4e:1a:00:f0:0d:4d:8d:5d:8c:79: fe:05:8b:ad:8e:b3:a7:f6:ee:49:65:ad:d4:89:06: 19:88:46:ad:c2:0a:2a:7e:7d:94:06:f1:f2:08:b8: aa:13:6b:5b:2d:89:e2:14:22:1b:61:8d:a5:41:e2: df:9a:fe:9e:92:ed:24:e1:a5:ed:e2:24:70:63:cb: 7e:7c:b0:5e:b4:b5:78:94:c7:3c:06:36:86:66:db: 99:f7:de:d9:23:42:e0:77:94:03:a8:a4:52:15:56: 8d:a3:41:f6:d3:f6:27:36:c3:16:90:26:bf:ec:22: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:5D:F3:75:95:EB:14:91:C2:0D:8D:F5:02:E5:2D:EA:8A:21:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl X509v3 Authority Key Identifier: keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer sbgp-ipAddrBlock: critical IPv4: 136.184.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:90:4c:93:a7:81:bd:90:6a:8a:ef:54:ec:d5:0d:0b:8c:31: fe:85:fa:7d:16:a1:80:c8:9f:58:65:ed:f0:7e:eb:c2:d4:53: 35:cd:dd:69:8b:78:61:bf:e0:b4:28:1d:dd:ca:4b:4a:75:ba: f3:b3:99:64:65:8f:ff:15:ae:1d:c1:ae:5d:63:74:bf:9a:ba: 61:c1:9b:ab:0a:02:a0:f4:3e:ba:49:24:b6:da:26:15:c3:da: 20:b1:71:a0:f0:03:0e:1f:1d:a7:62:f1:47:37:2b:e3:3d:4d: 0d:3d:18:d7:ba:74:57:f1:92:42:46:22:a7:1e:d2:56:59:81: d0:39:0c:0c:44:9e:83:c6:ca:7a:19:14:7a:d1:80:f6:55:c8: 1a:47:ba:30:81:b1:12:25:a9:03:52:63:65:b3:0f:0e:76:eb: 00:85:9e:ed:f7:67:33:a9:74:13:06:55:c6:f8:ed:9e:33:2c: 18:12:aa:d1:e2:37:9d:65:bc:b4:52:8c:35:dd:6b:c8:22:e4: b5:9e:cf:e0:5f:eb:63:58:f3:55:fd:99:76:5d:c1:cd:89:38: aa:a9:73:82:1b:7c:f3:62:14:e1:08:97:45:64:85:67:af:9c: a5:67:df:dc:bd:b6:62:a7:ea:5c:a8:da:8d:94:5c:2e:ac:8d: c2:7e:37:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53aPY1AW0iltlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk NTRjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NDk5OGJiYzctNGM0NS00ZDFkLTlkNGQtNjdlN2NhMGYyM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRmDz7P4NC2Qkmt9jb2cpvo2126MCHi0KtDg 9kiD/eDx6PrvaaCeB3+vm/scbjm6shqVzB6JVZxfCnddct0CxDxmgySMSc8s7D34 YzDvvwN4Qd90/vfpnczRp3wl597O5XQcEwM3ne8H3YnI3jCromaZGTjaUxcF4Z6q hPpif56CaRS9OGIfVfXS504aAPANTY1djHn+BYutjrOn9u5JZa3UiQYZiEatwgoq fn2UBvHyCLiqE2tbLYniFCIbYY2lQeLfmv6eku0k4aXt4iRwY8t+fLBetLV4lMc8 BjaGZtuZ997ZI0Lgd5QDqKRSFVaNo0H20/YnNsMWkCa/7CIjiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOAXfN1lesUkcINjfUC5S3qiiEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvNDI3ODFiYjctY2I1Yi0z MWY4LTk4NDEtYjM5YmZkNTJjNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2 NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyQTJOngb2QaorvVOzVDQuMMf6F+n0WoYDIn1hl7fB+68LUUzXN3WmL eGG/4LQoHd3KS0p1uvOzmWRlj/8Vrh3Brl1jdL+aumHBm6sKAqD0PrpJJLbaJhXD 2iCxcaDwAw4fHadi8Uc3K+M9TQ09GNe6dFfxkkJGIqce0lZZgdA5DAxEnoPGynoZ FHrRgPZVyBpHujCBsRIlqQNSY2WzDw526wCFnu33ZzOpdBMGVcb47Z4zLBgSqtHi N51lvLRSjDXda8gi5LWez+Bf62NY81X9mXZdwc2JOKqpc4IbfPNiFOEIl0VkhWev nKVn39y9tmKn6lyo2o2UXC6sjcJ+N4U= -----END CERTIFICATE-----Generated at Sun Oct 19 08:04:56 2025 by rpki-client