$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json) Hash identifier: 7ZDC9JARIHMJfOdWeJ9neMaH6LvdH3QcJ0aTWvHd44g= Subject key identifier: 62:18:89:B6:43:C2:06:EF:84:E4:AB:4B:8F:FC:5F:65:E9:AA:4F:00 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584B6367410229A0A0F8895FB780 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 2153 IP address blocks: 137.164.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:41:02:29:a0:a0:f8:89:5f:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=cc0057fb-ccbf-4517-b41c-c0ba378b6c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:26:8e:07:a6:85:2e:63:dd:a7:d7:38:e7: 14:ff:d1:34:10:77:77:46:ed:a8:3a:7c:ce:30:be: 90:39:b0:80:c3:a4:7e:01:7d:18:fa:6f:92:ed:41: b0:ac:0c:91:44:da:d7:30:ee:b4:50:9b:94:63:6d: 6d:32:9f:3d:ad:4c:ac:ea:01:d8:cb:36:0e:c0:06: 4d:a5:2b:c3:54:69:bd:44:f7:4c:6d:e6:df:30:70: 98:fc:43:8e:84:5e:62:6f:92:2c:26:8b:bc:16:65: c1:ea:c3:70:dd:53:e7:e4:3b:d7:53:7d:54:4b:f5: 55:c4:91:dc:ee:c7:9e:e2:71:52:80:42:26:2a:6b: 9b:f1:43:4b:61:b6:a2:fb:d6:b6:9b:a8:9f:33:45: bb:c4:40:ab:9e:ee:2c:9c:b2:29:68:cb:bf:06:88: 0e:f8:6f:5c:b9:24:3a:59:07:04:06:66:ad:99:f3: 48:57:fb:5e:4d:90:77:6f:a7:58:0e:d8:02:af:a1: a3:c8:e3:1d:9f:da:c5:eb:83:cc:41:62:28:96:4d: 41:5e:30:3e:af:ac:57:d5:18:35:9a:14:31:71:9a: 99:89:6c:6c:e9:96:99:84:3b:a7:66:bd:0a:38:48: 2d:b7:5d:55:de:7b:e8:38:03:20:ba:b7:8c:63:35: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:18:89:B6:43:C2:06:EF:84:E4:AB:4B:8F:FC:5F:65:E9:AA:4F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9e:ff:1f:4e:dd:5d:7d:3d:a5:48:d9:d1:cc:69:f2:6b:b7: 38:ca:c1:97:ab:97:92:a8:16:2b:74:f3:ff:1e:96:70:c9:b1: 93:a4:21:91:27:cb:97:85:3f:4f:6f:3e:e4:cb:5e:5a:53:f0: 9a:b3:36:d1:1b:18:24:f7:02:1d:62:84:52:e4:e5:b8:71:d8: 4b:43:11:67:b8:f3:6d:2e:c6:98:24:6f:90:ab:5e:11:0c:6b: 48:a3:48:9c:e8:88:89:73:ea:e1:c0:2d:c8:e6:09:ba:bc:cb: d0:6d:a7:c9:00:eb:64:e7:a7:24:78:7a:03:da:46:59:3d:b7: 3a:6e:92:10:93:91:4e:72:1b:20:d7:16:55:64:5b:25:96:f6: 0d:01:0e:27:57:c8:d0:b2:d3:3e:8f:e9:ac:9c:3a:f6:f8:04: d1:eb:ae:5b:16:db:a3:74:e5:3f:08:0b:e8:22:18:0d:32:06: 73:88:4b:ef:04:2d:a0:21:01:36:3a:cd:42:d0:29:24:9f:25: 20:2b:f7:bd:e5:b8:48:95:9c:54:b9:61:3d:b8:a1:7a:49:45: ec:b5:e3:8e:60:4c:a8:d1:e8:a9:3b:f6:98:c9:63:b3:34:e7: 1a:ac:c5:f1:58:49:c3:41:39:c0:d9:93:3e:10:b5:84:30:e8: b0:d8:1e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0ECKaCg+Ilft4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk Y2MwMDU3ZmItY2NiZi00NTE3LWI0MWMtYzBiYTM3OGI2YzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTUmjgemhS5j3afXOOcU/9E0EHd3Ru2oOnzO ML6QObCAw6R+AX0Y+m+S7UGwrAyRRNrXMO60UJuUY21tMp89rUys6gHYyzYOwAZN pSvDVGm9RPdMbebfMHCY/EOOhF5ib5IsJou8FmXB6sNw3VPn5DvXU31US/VVxJHc 7see4nFSgEImKmub8UNLYbai+9a2m6ifM0W7xECrnu4snLIpaMu/BogO+G9cuSQ6 WQcEBmatmfNIV/teTZB3b6dYDtgCr6GjyOMdn9rF64PMQWIolk1BXjA+r6xX1Rg1 mhQxcZqZiWxs6ZaZhDunZr0KOEgtt11V3nvoOAMgureMYzX5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIYibZDwgbvhOSrS4/8X2Xpqk8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzMzN2U3ZjEtOTliZC0z NWRiLWE3MDgtYWEwMDcyY2EwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWe/x9O3V19PaVI2dHMafJrtzjKwZerl5KoFit08/8elnDJsZOkIZEn y5eFP09vPuTLXlpT8JqzNtEbGCT3Ah1ihFLk5bhx2EtDEWe4820uxpgkb5CrXhEM a0ijSJzoiIlz6uHALcjmCbq8y9Btp8kA62TnpyR4egPaRlk9tzpukhCTkU5yGyDX FlVkWyWW9g0BDidXyNCy0z6P6aycOvb4BNHrrlsW26N05T8IC+giGA0yBnOIS+8E LaAhATY6zULQKSSfJSAr973luEiVnFS5YT24oXpJRey1445gTKjR6Kk79pjJY7M0 5xqsxfFYScNBOcDZkz4QtYQw6LDYHr8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:05 2025 by rpki-client