$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa File: 09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa (raw, json) Hash identifier: xuwJdA/LROC3NTuQ9zA6cj6nq9TYNcZfFhdeWAVn4DE= Subject key identifier: 08:C8:A5:D7:4C:73:69:2F:71:0F:90:35:E0:B1:1D:C7:88:76:22:AC Certificate issuer: /CN=e17c5b31-fd63-45db-b2a5-ab4ec50bbede Certificate serial: 010D0C9F4328584A1EF6011D52757947102A3B40 Authority key identifier: 2A:CB:91:AA:05:82:05:C9:C1:BC:8D:2F:37:01:26:BD:65:08:EB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa Signing time: Sun 08 Jun 2025 07:50:41 +0000 ROA not before: Sun 08 Jun 2025 07:50:41 +0000 ROA not after: Sat 06 Sep 2025 07:50:41 +0000 asID: 399890 IP address blocks: 198.136.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:f6:01:1d:52:75:79:47:10:2a:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17c5b31-fd63-45db-b2a5-ab4ec50bbede Validity Not Before: Jun 8 07:50:41 2025 GMT Not After : Sep 6 07:50:41 2025 GMT Subject: CN=2b5b2ea6-ceaf-40c4-9acd-97a4e29dfa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:03:16:48:33:7d:c2:87:f9:cf:e6:23:29: 84:7a:10:b6:1d:b3:c3:d4:0f:58:3c:86:a3:10:99: 0e:36:11:ce:1c:bb:ab:30:f4:59:c1:4b:0e:06:87: c5:88:ee:a8:e6:02:8e:31:21:d4:43:f6:8e:3e:5e: 93:66:78:1f:01:32:8c:e0:df:ec:11:09:a6:ac:ad: e2:25:3a:dd:03:a8:ca:4e:db:07:51:f3:91:cb:d4: a1:ed:66:7d:ea:38:e3:d4:c2:84:b4:06:b1:6c:45: 74:bc:18:88:4f:db:ad:43:9e:64:df:00:14:8b:54: 7f:27:1b:f6:d4:28:b4:67:6e:8a:2e:75:41:23:6d: dc:4f:fa:e0:60:ad:98:51:21:bd:03:97:ef:2a:84: d8:fc:1e:b8:5e:d2:3c:7b:f2:a4:5f:b3:76:2d:a2: 6d:45:4d:69:e4:1f:28:8c:d6:d5:de:bb:26:fe:3c: 8d:bb:07:17:02:64:56:56:67:5b:86:db:f1:66:1b: 16:1a:96:fd:52:db:d7:39:42:8a:9d:92:ac:9b:4d: 0d:e3:74:35:db:a3:2c:32:f6:fb:2e:d3:26:31:02: 9f:3f:66:ae:37:fc:93:29:a3:5a:9a:92:cd:1b:6f: 2a:50:8b:2f:3e:af:0a:16:9c:ea:dd:0a:99:69:72: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C8:A5:D7:4C:73:69:2F:71:0F:90:35:E0:B1:1D:C7:88:76:22:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.crl X509v3 Authority Key Identifier: keyid:2A:CB:91:AA:05:82:05:C9:C1:BC:8D:2F:37:01:26:BD:65:08:EB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer sbgp-ipAddrBlock: critical IPv4: 198.136.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:10:a1:04:58:87:ac:38:49:80:29:22:c3:12:57:8d:cf: db:f2:f1:46:d4:cc:6e:d8:f5:60:3f:7e:86:ad:51:81:70:04: 22:03:fc:da:c9:e0:1c:f3:90:84:af:0c:ed:2b:1b:55:67:fd: 01:8e:39:a5:27:a4:5e:e2:62:a2:fb:b3:61:66:07:ea:d3:82: ec:b2:d6:ae:33:24:d2:b9:d1:fd:45:07:8c:02:0e:e9:f0:85: 35:7f:c4:cf:85:9c:e9:b5:3a:0f:7e:fe:f1:75:3f:bc:2c:43: d0:ac:c1:99:96:05:41:7c:97:c1:27:31:e6:3d:47:5e:0d:19: fa:be:ca:19:c5:e7:50:98:8a:7b:a0:34:37:97:c3:e1:21:f6: 9c:6a:fb:b7:bd:db:28:3e:5f:0f:2d:47:78:be:5c:51:b9:5f: ee:ac:6e:f6:97:1b:d9:97:e0:ad:02:3a:3d:9e:1d:4c:2e:28: fd:4d:20:2b:81:d4:d6:bc:fd:40:0b:d4:72:e2:04:f9:10:d7: e3:71:0a:bc:cd:dc:71:17:0b:fc:99:47:35:51:d9:ad:1c:c2: 33:81:32:95:91:51:d8:17:8e:c7:ea:fe:dc:b7:7e:18:32:d9: e4:ff:14:c4:2c:64:0b:75:46:0b:67:4d:19:a3:d5:84:20:81: eb:8c:49:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoe9gEdUnV5RxAqO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE3YzViMzEtZmQ2My00NWRiLWIyYTUtYWI0ZWM1MGJi ZWRlMB4XDTI1MDYwODA3NTA0MVoXDTI1MDkwNjA3NTA0MVowLzEtMCsGA1UEAxMk MmI1YjJlYTYtY2VhZi00MGM0LTlhY2QtOTdhNGUyOWRmYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ikDFkgzfcKH+c/mIymEehC2HbPD1A9YPIaj EJkONhHOHLurMPRZwUsOBofFiO6o5gKOMSHUQ/aOPl6TZngfATKM4N/sEQmmrK3i JTrdA6jKTtsHUfORy9Sh7WZ96jjj1MKEtAaxbEV0vBiIT9utQ55k3wAUi1R/Jxv2 1Ci0Z26KLnVBI23cT/rgYK2YUSG9A5fvKoTY/B64XtI8e/KkX7N2LaJtRU1p5B8o jNbV3rsm/jyNuwcXAmRWVmdbhtvxZhsWGpb9UtvXOUKKnZKsm00N43Q126MsMvb7 LtMmMQKfP2auN/yTKaNampLNG28qUIsvPq8KFpzq3QqZaXL4pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjIpddMc2kvcQ+QNeCxHceIdiKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMTdj NWIzMS1mZDYzLTQ1ZGItYjJhNS1hYjRlYzUwYmJlZGUvMDllMGVhNWQtZjIwOC0z Yjk2LWE2NDgtZjQwMWNmMGEwYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTE3YzViMzEtZmQ2My00NWRiLWIy YTUtYWI0ZWM1MGJiZWRlL2UxN2M1YjMxLWZkNjMtNDVkYi1iMmE1LWFiNGVjNTBi YmVkZS5jcmwwHwYDVR0jBBgwFoAUKsuRqgWCBcnBvI0vNwEmvWUI64owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMTdjNWIzMS1mZDYzLTQ1ZGItYjJhNS1hYjRl YzUwYmJlZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoi6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK3EKEEWIesOEmAKSLDEleNz9vy8UbUzG7Y9WA/foatUYFwBCID/NrJ 4BzzkISvDO0rG1Vn/QGOOaUnpF7iYqL7s2FmB+rTguyy1q4zJNK50f1FB4wCDunw hTV/xM+FnOm1Og9+/vF1P7wsQ9CswZmWBUF8l8EnMeY9R14NGfq+yhnF51CYinug NDeXw+Eh9pxq+7e92yg+Xw8tR3i+XFG5X+6sbvaXG9mX4K0COj2eHUwuKP1NICuB 1Na8/UAL1HLiBPkQ1+NxCrzN3HEXC/yZRzVR2a0cwjOBMpWRUdgXjsfq/ty3fhgy 2eT/FMQsZAt1RgtnTRmj1YQggeuMSUE= -----END CERTIFICATE-----Generated at Thu Jul 3 22:49:36 2025 by rpki-client