$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa File: e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa (raw, json) Hash identifier: qnlSJpv1BhaBDrwJZN7+Qdf53oL2M90gVNKfEUApGfA= Subject key identifier: 19:21:B2:9C:1C:D8:2F:CE:00:C9:2D:93:FC:7D:73:46:25:62:2C:E1 Certificate issuer: /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c Certificate serial: 010D0C9F4328584B153C193D49E58E3ABC7B4840 Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 136.184.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:19:3d:49:e5:8e:3a:bc:7b:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=dc7bad98-4ec5-4466-8a23-03d59363b074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:84:dd:1f:53:cb:18:a9:47:4c:c5:1c:db: 05:5a:a8:75:ef:7b:83:fd:4a:c9:f4:f8:56:11:91: 3b:0b:62:cc:de:7e:de:67:16:ef:3e:e6:c0:80:15: 87:56:9e:d6:6e:8a:10:5a:af:19:f1:50:f7:41:7c: 41:ce:17:c0:93:86:a1:11:81:26:6a:9b:12:a1:57: 39:db:a0:bc:ac:9d:d0:3b:6a:84:16:4b:e5:f1:38: 6f:a1:33:3d:80:9a:44:4a:82:b9:61:51:56:9e:7f: d9:e4:3e:f1:ef:bb:c8:9a:61:bf:f8:37:c6:bd:d0: e1:66:45:3b:ee:48:55:c3:d1:f1:51:9f:ea:3d:a4: aa:8a:a8:04:df:74:68:9b:f1:2c:81:a4:99:a4:d3: e8:81:4e:d9:58:ca:66:ca:18:62:e4:3a:29:c4:cb: 8d:cb:b4:5e:12:91:21:4a:32:ee:85:b4:fc:c4:2f: e7:76:e8:5a:4b:72:dd:0c:fb:08:fd:a0:e4:1f:59: bb:45:c3:db:08:29:31:1e:c9:f0:9b:3c:a2:f4:1c: 3d:23:22:a8:f1:1f:ce:32:1d:ba:7b:3f:d3:c5:bf: ba:d1:01:da:c3:04:03:74:20:9f:fa:3a:a4:69:64: dc:43:4a:8b:d2:a0:ae:7a:38:f7:ba:b5:c7:4d:38: 97:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:21:B2:9C:1C:D8:2F:CE:00:C9:2D:93:FC:7D:73:46:25:62:2C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl X509v3 Authority Key Identifier: keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer sbgp-ipAddrBlock: critical IPv4: 136.184.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7d:d5:11:5f:f2:27:e9:ee:2e:fd:ac:f8:72:36:5a:ee:75: a3:d0:52:07:0c:97:0d:d2:3f:fc:f4:bf:aa:bb:38:4b:af:ab: 88:d1:d1:ae:3c:00:04:9f:99:28:3f:51:b0:7e:84:df:d8:7f: d2:ff:4d:37:3e:df:b8:af:a3:1a:c0:b3:ee:2d:6a:e3:bb:4c: 8e:39:c3:34:d3:cf:b9:af:eb:9c:99:16:03:1b:a4:66:c2:e2: 78:02:db:44:d6:74:95:6a:d2:8e:32:dc:09:85:86:0f:3c:0a: 78:d3:98:a8:10:1a:63:bf:f4:23:ff:63:7d:7e:05:74:de:6c: 18:ef:fb:c1:50:43:b3:52:ed:87:3a:02:69:0f:db:3c:da:68: d0:ab:bf:63:16:aa:1b:65:0f:6b:8f:3f:e2:cf:cd:8d:f1:aa: 62:57:fb:d1:74:cd:09:5d:05:62:f4:cf:72:01:d4:3f:2a:9c: d5:09:75:9c:16:21:f9:3f:ee:8b:d2:c5:60:84:c7:de:8f:02: 55:c1:18:3a:b4:22:63:7b:3b:6a:9a:ed:d5:29:8d:27:54:b4: 0a:ce:9e:e0:1e:e4:b4:e2:e0:07:8e:e6:77:89:23:13:32:4c: c6:26:4a:7a:f6:be:07:5e:1a:77:a9:17:3a:b3:1d:cc:5e:99: c2:a5:02:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBk9SeWOOrx7SEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk NTRjMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGM3YmFkOTgtNGVjNS00NDY2LThhMjMtMDNkNTkzNjNiMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyiE3R9TyxipR0zFHNsFWqh173uD/UrJ9PhW EZE7C2LM3n7eZxbvPubAgBWHVp7WbooQWq8Z8VD3QXxBzhfAk4ahEYEmapsSoVc5 26C8rJ3QO2qEFkvl8ThvoTM9gJpESoK5YVFWnn/Z5D7x77vImmG/+DfGvdDhZkU7 7khVw9HxUZ/qPaSqiqgE33Rom/EsgaSZpNPogU7ZWMpmyhhi5DopxMuNy7ReEpEh SjLuhbT8xC/nduhaS3LdDPsI/aDkH1m7RcPbCCkxHsnwmzyi9Bw9IyKo8R/OMh26 ez/Txb+60QHawwQDdCCf+jqkaWTcQ0qL0qCuejj3urXHTTiX5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkhspwc2C/OAMktk/x9c0YlYizhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvZTliNjFkMTctNDNmNC0z NTJmLWJlYWEtNmMyYjk5ZWE5Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2 NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp91RFf8ifp7i79rPhyNlrudaPQUgcMlw3SP/z0v6q7OEuvq4jR0a48 AASfmSg/UbB+hN/Yf9L/TTc+37ivoxrAs+4tauO7TI45wzTTz7mv65yZFgMbpGbC 4ngC20TWdJVq0o4y3AmFhg88CnjTmKgQGmO/9CP/Y31+BXTebBjv+8FQQ7NS7Yc6 AmkP2zzaaNCrv2MWqhtlD2uPP+LPzY3xqmJX+9F0zQldBWL0z3IB1D8qnNUJdZwW Ifk/7ovSxWCEx96PAlXBGDq0ImN7O2qa7dUpjSdUtArOnuAe5LTi4AeO5neJIxMy TMYmSnr2vgdeGnepFzqzHcxemcKlAr0= -----END CERTIFICATE-----Generated at Sun Oct 19 08:10:48 2025 by rpki-client