$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/36e09f69-776d-39f7-a19d-ae914f03ad45.roa File: 36e09f69-776d-39f7-a19d-ae914f03ad45.roa (raw, json) Hash identifier: GPgFHCBtYdyzlLnpEzaBoAHM+OJp9ktcnU7I8JjroRM= Subject key identifier: 2E:55:0A:B8:5D:E3:56:BE:7A:D4:59:92:75:F2:1D:EB:56:E4:BB:17 Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Certificate serial: 010D0C9F4328584B21CC3458ED7A58CD63F3AC8C Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/36e09f69-776d-39f7-a19d-ae914f03ad45.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 40124 IP address blocks: 130.51.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:34:58:ed:7a:58:cd:63:f3:ac:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=18b3c76d-23ca-42ce-97f0-e0e47b90b80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:80:4e:0e:a7:1e:07:23:ff:3d:b7:84:78: ec:b9:aa:e2:a3:d1:f8:a7:e1:b6:61:fa:73:5b:07: 9b:65:fe:8b:52:42:fe:68:05:e6:55:e6:85:1d:89: e8:c6:6f:7a:eb:93:87:7a:fb:d0:1b:c1:40:4f:96: 40:22:3b:ee:9c:70:bb:f2:ff:2a:da:0c:bb:de:b5: 55:2d:84:28:0e:ff:6d:c0:50:aa:51:0f:21:92:9f: 7b:de:f9:bf:4a:28:0b:e5:eb:f7:2f:48:34:99:47: 52:fa:3c:75:d6:24:77:a1:84:b9:8a:1a:6c:a2:ae: 91:6c:d2:ec:6b:c0:28:4c:cb:e2:d7:d7:d8:dc:7c: 17:d5:a1:54:9b:fd:71:f7:35:20:05:9b:8a:c9:59: d5:74:08:47:9c:37:d7:1d:8f:35:f2:62:68:94:01: 4c:79:69:0f:82:83:1e:6e:90:8e:0d:bc:c0:a1:4c: d6:0c:9e:b1:ae:16:ec:86:aa:c3:31:df:1e:d2:4c: 37:29:c2:61:c5:3d:36:f5:7c:f2:d7:c3:be:92:96: 82:e3:19:14:fc:5e:96:64:5a:6d:25:13:e7:fa:ba: bf:ab:f7:93:3e:e5:4d:08:6c:b4:f7:4f:81:aa:3b: 02:a0:6f:47:10:74:8e:fa:9a:93:10:74:90:83:82: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:0A:B8:5D:E3:56:BE:7A:D4:59:92:75:F2:1D:EB:56:E4:BB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/36e09f69-776d-39f7-a19d-ae914f03ad45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl X509v3 Authority Key Identifier: keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer sbgp-ipAddrBlock: critical IPv4: 130.51.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:75:58:06:57:09:90:70:05:7e:b6:b6:1b:31:8d:ab:16:06: f5:95:53:e3:cf:ad:66:e2:b9:a2:0e:1b:e4:a6:36:b1:ae:05: 7d:13:bb:6e:f9:aa:71:84:f0:4b:7a:5e:67:a1:53:5e:fd:aa: 4f:47:df:72:56:5c:1d:2b:65:3b:23:15:b1:8c:8c:37:e8:c8: b3:11:9a:c6:8f:49:06:5d:f5:e7:5a:64:1b:8f:57:85:fe:6e: 4f:ab:e2:31:b6:da:ea:3f:94:bf:bd:f0:39:37:0f:97:85:71: 7e:f3:17:cd:5c:4b:48:ff:21:cf:d2:a4:c2:d0:45:a9:a4:6a: 4a:5c:17:7c:1c:86:7f:93:5c:4d:ad:50:7e:a6:57:26:20:c5: 71:0f:44:7b:83:66:33:2a:ea:5c:a4:26:58:79:14:5d:25:98: 4b:2b:b5:b1:48:b4:3b:94:3d:17:65:97:48:86:3f:0d:41:76: 38:b6:89:df:a7:7c:9d:f7:4d:2b:ef:5c:84:2f:5d:bb:1b:8e: dc:4f:90:9e:fb:fa:fb:4c:47:27:c2:63:86:dc:57:2d:b3:3b: 00:4d:1a:27:df:83:1c:db:a4:2a:ca:2e:87:63:e2:a3:0d:ef: 8f:c1:ad:2e:34:63:a9:f3:54:d3:f7:47:f5:53:e4:a4:12:d6: 6c:26:1d:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzDRY7XpYzWPzrIwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl NmEwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MThiM2M3NmQtMjNjYS00MmNlLTk3ZjAtZTBlNDdiOTBiODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SGATg6nHgcj/z23hHjsuario9H4p+G2Yfpz WwebZf6LUkL+aAXmVeaFHYnoxm9665OHevvQG8FAT5ZAIjvunHC78v8q2gy73rVV LYQoDv9twFCqUQ8hkp973vm/SigL5ev3L0g0mUdS+jx11iR3oYS5ihpsoq6RbNLs a8AoTMvi19fY3HwX1aFUm/1x9zUgBZuKyVnVdAhHnDfXHY818mJolAFMeWkPgoMe bpCODbzAoUzWDJ6xrhbshqrDMd8e0kw3KcJhxT029Xzy18O+kpaC4xkU/F6WZFpt JRPn+rq/q/eTPuVNCGy090+BqjsCoG9HEHSO+pqTEHSQg4KBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5VCrhd41a+etRZknXyHetW5LsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvMzZlMDlmNjktNzc2ZC0z OWY3LWExOWQtYWU5MTRmMDNhZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw ZjkzZmU2YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjNeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ1WAZXCZBwBX62thsxjasWBvWVU+PPrWbiuaIOG+SmNrGuBX0Tu275 qnGE8Et6XmehU179qk9H33JWXB0rZTsjFbGMjDfoyLMRmsaPSQZd9edaZBuPV4X+ bk+r4jG22uo/lL+98Dk3D5eFcX7zF81cS0j/Ic/SpMLQRamkakpcF3wchn+TXE2t UH6mVyYgxXEPRHuDZjMq6lykJlh5FF0lmEsrtbFItDuUPRdll0iGPw1Bdji2id+n fJ33TSvvXIQvXbsbjtxPkJ77+vtMRyfCY4bcVy2zOwBNGiffgxzbpCrKLodj4qMN 74/BrS40Y6nzVNP3R/VT5KQS1mwmHX0= -----END CERTIFICATE-----Generated at Tue Sep 9 07:26:15 2025 by rpki-client