$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa File: 09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa (raw, json) Hash identifier: GFc0KGuPX+kGJfRRbqPNR3owJZQ4GHgWqwKZMzJUAFo= Subject key identifier: E0:76:F4:20:E2:A1:55:D6:E5:6C:E9:73:8A:64:D4:6C:AB:93:3F:40 Certificate issuer: /CN=e17c5b31-fd63-45db-b2a5-ab4ec50bbede Certificate serial: 010D0C9F4328584AFEE6CDD742D056A9D36B21C0 Authority key identifier: 2A:CB:91:AA:05:82:05:C9:C1:BC:8D:2F:37:01:26:BD:65:08:EB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 399890 IP address blocks: 198.136.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cd:d7:42:d0:56:a9:d3:6b:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17c5b31-fd63-45db-b2a5-ab4ec50bbede Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=c1be6a6c-a0d6-494e-a768-4877894de27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f7:67:db:38:e3:4a:5e:86:25:ce:50:97:fa: 7b:30:74:56:90:95:46:a5:17:3a:a8:5c:3c:41:1e: 0c:da:07:91:87:ca:e8:e9:41:0d:01:af:92:9e:05: 2a:cd:e3:62:d9:46:27:04:f6:25:5c:03:9d:f0:d2: a8:ec:9a:6c:ea:f0:7a:5d:7f:90:10:37:00:54:d0: 26:b7:58:5f:48:6f:97:2f:4b:8a:4f:74:4a:27:a1: 6b:b4:9e:64:85:23:8f:6a:bb:df:85:3f:0b:2d:51: 4a:52:94:17:ff:58:90:88:df:14:9f:71:45:09:d9: db:5c:79:7a:31:b1:50:a8:65:ef:d5:6b:fd:74:e5: c8:2e:bc:bc:24:9e:b3:6a:e1:96:ff:66:75:7b:ad: c2:2f:60:b1:a7:60:db:ca:d0:56:04:3d:a6:6c:50: 55:0e:1f:18:87:3a:04:cf:f5:a6:b9:e3:5a:89:79: 1b:65:7b:e4:c8:5f:b3:4b:4d:65:1e:a6:c7:34:c0: 87:cb:8b:b6:05:25:3e:b9:62:66:26:27:fa:5a:1c: 4f:a3:11:f7:8e:0a:4c:0a:bf:81:c3:b7:7b:90:eb: 26:6c:41:20:6a:07:27:f4:78:e3:17:bd:d4:8c:be: 34:65:c8:5f:c1:9b:7e:3b:42:00:94:1d:b1:e0:a7: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:F4:20:E2:A1:55:D6:E5:6C:E9:73:8A:64:D4:6C:AB:93:3F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.crl X509v3 Authority Key Identifier: keyid:2A:CB:91:AA:05:82:05:C9:C1:BC:8D:2F:37:01:26:BD:65:08:EB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer sbgp-ipAddrBlock: critical IPv4: 198.136.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:64:31:b5:8e:2c:10:1e:45:91:63:24:34:eb:99:84:f1:2c: c8:6a:f6:0d:e7:b3:6c:ce:62:07:42:d9:1a:b4:d8:af:c6:95: 0c:4c:ce:7e:ff:b5:a8:2d:7e:a6:4c:90:18:9b:ec:e6:ec:2a: 21:9b:57:f5:8b:3d:1f:b4:80:3c:c8:80:8e:84:77:cf:ab:ad: 3f:af:5c:15:4c:7d:b8:43:01:c2:96:e0:fa:a0:97:9b:ce:41: 8d:85:53:a1:61:a6:ea:e0:e1:10:d3:0e:b3:c0:36:eb:e6:56: 05:66:64:1d:d5:30:15:aa:83:13:bc:0d:a2:4a:97:fb:44:dd: a6:05:67:7d:7b:04:8b:b3:e4:43:52:82:0e:b7:8d:57:e1:45: 25:9a:1e:db:8b:e4:66:18:4e:b6:f3:d3:cd:50:23:b2:3d:33: 74:dd:00:76:1e:c6:02:42:d2:76:77:f7:9a:21:c1:4f:b4:b2: e3:67:2e:af:65:9c:63:4c:2e:c1:5e:cd:c1:17:17:6d:c5:4b: db:84:3c:21:94:1a:c7:d6:9c:b7:b1:cc:58:3d:81:04:cb:2e: 01:02:d7:b7:5f:64:e4:c6:ee:90:a5:0f:92:0e:13:87:e8:99: 68:bc:70:a7:fb:41:6e:88:76:3d:23:f7:8c:d8:35:3f:42:a0: c3:4a:ee:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5s3XQtBWqdNrIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE3YzViMzEtZmQ2My00NWRiLWIyYTUtYWI0ZWM1MGJi ZWRlMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YzFiZTZhNmMtYTBkNi00OTRlLWE3NjgtNDg3Nzg5NGRlMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vdn2zjjSl6GJc5Ql/p7MHRWkJVGpRc6qFw8 QR4M2geRh8ro6UENAa+SngUqzeNi2UYnBPYlXAOd8NKo7Jps6vB6XX+QEDcAVNAm t1hfSG+XL0uKT3RKJ6FrtJ5khSOParvfhT8LLVFKUpQX/1iQiN8Un3FFCdnbXHl6 MbFQqGXv1Wv9dOXILry8JJ6zauGW/2Z1e63CL2Cxp2DbytBWBD2mbFBVDh8YhzoE z/WmueNaiXkbZXvkyF+zS01lHqbHNMCHy4u2BSU+uWJmJif6WhxPoxH3jgpMCr+B w7d7kOsmbEEgagcn9HjjF73UjL40ZchfwZt+O0IAlB2x4KdpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB29CDioVXW5Wzpc4pk1Gyrkz9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMTdj NWIzMS1mZDYzLTQ1ZGItYjJhNS1hYjRlYzUwYmJlZGUvMDllMGVhNWQtZjIwOC0z Yjk2LWE2NDgtZjQwMWNmMGEwYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTE3YzViMzEtZmQ2My00NWRiLWIy YTUtYWI0ZWM1MGJiZWRlL2UxN2M1YjMxLWZkNjMtNDVkYi1iMmE1LWFiNGVjNTBi YmVkZS5jcmwwHwYDVR0jBBgwFoAUKsuRqgWCBcnBvI0vNwEmvWUI64owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMTdjNWIzMS1mZDYzLTQ1ZGItYjJhNS1hYjRl YzUwYmJlZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoi6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9kMbWOLBAeRZFjJDTrmYTxLMhq9g3ns2zOYgdC2Rq02K/GlQxMzn7/ tagtfqZMkBib7ObsKiGbV/WLPR+0gDzIgI6Ed8+rrT+vXBVMfbhDAcKW4Pqgl5vO QY2FU6Fhpurg4RDTDrPANuvmVgVmZB3VMBWqgxO8DaJKl/tE3aYFZ317BIuz5ENS gg63jVfhRSWaHtuL5GYYTrbz081QI7I9M3TdAHYexgJC0nZ395ohwU+0suNnLq9l nGNMLsFezcEXF23FS9uEPCGUGsfWnLexzFg9gQTLLgEC17dfZOTG7pClD5IOE4fo mWi8cKf7QW6Idj0j94zYNT9CoMNK7sI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:33:57 2025 by rpki-client