
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36d13d5b-dd9e-3759-96c1-741f44376448.roa
File: 36d13d5b-dd9e-3759-96c1-741f44376448.roa (raw, json)
Hash identifier: ErySrEp361gKUr3OtByZeFif7XboNHWe0eurGsbrU+w=
Subject key identifier: BB:9D:E3:A9:6C:D2:F7:4F:96:EC:6E:37:98:68:BF:B9:01:6B:10:23
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584B73BD495B3A8844F557D9B0C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36d13d5b-dd9e-3759-96c1-741f44376448.roa
Signing time: Wed 08 Oct 2025 09:27:03 +0000
ROA not before: Wed 08 Oct 2025 09:27:03 +0000
ROA not after: Tue 06 Jan 2026 10:27:03 +0000
asID: 23473
IP address blocks: 153.33.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:73:bd:49:5b:3a:88:44:f5:57:d9:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Oct 8 09:27:03 2025 GMT
Not After : Jan 6 10:27:03 2026 GMT
Subject: CN=3a755cc7-95c3-43b7-98f0-2039b7901731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:bd:ce:61:29:cb:f5:39:b1:74:b2:e3:9d:
e9:2d:1d:65:b3:51:dc:1d:23:1e:92:69:a3:fa:ce:
dd:52:be:3e:a9:04:5b:89:98:49:03:38:6b:76:4d:
65:d4:b9:17:a1:b3:65:50:0c:96:c9:34:99:7d:f0:
55:38:07:dd:e0:64:38:97:ff:31:55:94:b1:a6:aa:
50:71:0f:fc:55:0c:cf:76:ba:1e:05:a3:2e:73:e4:
17:f5:b9:47:d1:89:3e:2b:b5:bb:a3:e3:8d:85:7d:
a8:5f:39:1b:11:ca:70:d6:60:0e:b1:97:2b:dc:f4:
da:43:13:f2:ca:af:e8:e0:af:98:9c:ce:44:db:40:
b7:b6:54:25:0b:9d:7e:08:45:6f:95:b4:e9:3a:5d:
74:26:cd:99:24:8f:ce:77:8e:90:35:22:97:5a:35:
b4:af:df:45:03:d6:6c:f3:f2:30:4e:c7:c2:45:74:
07:f0:4d:4a:f5:b7:67:0e:a0:74:e4:16:0e:42:cd:
cf:ae:0c:86:5f:94:41:fa:94:6c:e8:62:3d:48:83:
7d:b8:e6:4d:ac:1e:b5:61:16:2a:48:61:5c:9e:08:
49:c9:87:9d:de:40:9e:a6:9b:a8:e3:9e:b8:42:99:
c8:3e:25:91:bf:c3:49:db:30:f2:f9:a7:0c:c5:3d:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:E3:A9:6C:D2:F7:4F:96:EC:6E:37:98:68:BF:B9:01:6B:10:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36d13d5b-dd9e-3759-96c1-741f44376448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
153.33.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:92:a7:53:8b:e2:a7:15:c8:a8:db:9e:ef:22:10:6a:4c:22:
c0:3e:25:48:fd:d5:7e:f1:ba:b2:8f:fa:17:24:56:77:4d:f3:
8b:01:c3:92:5a:95:d9:56:fd:c4:36:6f:cb:03:ae:28:b9:8d:
f5:8b:12:de:bf:e1:2c:e2:bf:c7:ea:6d:26:80:c0:97:0b:3d:
47:f0:cf:be:ca:d6:08:fc:78:17:84:f8:cb:c6:75:86:ad:b9:
a1:55:7e:f2:5e:4e:13:88:a0:ae:d6:c1:e4:07:f1:49:d2:64:
d7:39:c8:de:0c:fd:13:21:87:76:41:e4:80:4c:40:cd:c4:20:
50:39:2c:7e:8e:a2:56:19:13:48:8a:3e:0f:b2:f6:50:9a:35:
a1:95:73:15:85:fd:71:eb:59:c2:39:e6:e8:bc:78:9a:f8:f5:
2e:3a:84:0a:bb:87:ec:d8:05:72:91:c2:00:33:57:43:69:a5:
5b:f9:db:98:60:4e:73:28:a6:e0:68:6c:a2:2c:0c:fc:a3:48:
72:dd:f5:68:35:82:0e:56:7c:56:d9:70:de:3e:c4:c7:d0:c4:
de:51:41:6b:89:3c:98:15:b6:c0:a7:c1:c0:ae:b1:b4:b7:59:
57:68:d7:32:14:c3:a0:5f:d5:1c:ad:0a:41:72:bf:37:41:ed:
75:0a:a3:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtzvUlbOohE9VfZsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTAwODA5MjcwM1oXDTI2MDEwNjEwMjcwM1owLzEtMCsGA1UEAxMk
M2E3NTVjYzctOTVjMy00M2I3LTk4ZjAtMjAzOWI3OTAxNzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhq9zmEpy/U5sXSy453pLR1ls1HcHSMekmmj
+s7dUr4+qQRbiZhJAzhrdk1l1LkXobNlUAyWyTSZffBVOAfd4GQ4l/8xVZSxpqpQ
cQ/8VQzPdroeBaMuc+QX9blH0Yk+K7W7o+ONhX2oXzkbEcpw1mAOsZcr3PTaQxPy
yq/o4K+YnM5E20C3tlQlC51+CEVvlbTpOl10Js2ZJI/Od46QNSKXWjW0r99FA9Zs
8/IwTsfCRXQH8E1K9bdnDqB05BYOQs3PrgyGX5RB+pRs6GI9SIN9uOZNrB61YRYq
SGFcnghJyYed3kCeppuo4564QpnIPiWRv8NJ2zDy+acMxT0zeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLud46ls0vdPluxuN5hov7kBaxAjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzZkMTNkNWItZGQ5ZS0z
NzU5LTk2YzEtNzQxZjQ0Mzc2NDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+Sp1OL4qcVyKjbnu8iEGpMIsA+JUj91X7xurKP+hckVndN84sBw5Ja
ldlW/cQ2b8sDrii5jfWLEt6/4Sziv8fqbSaAwJcLPUfwz77K1gj8eBeE+MvGdYat
uaFVfvJeThOIoK7WweQH8UnSZNc5yN4M/RMhh3ZB5IBMQM3EIFA5LH6OolYZE0iK
Pg+y9lCaNaGVcxWF/XHrWcI55ui8eJr49S46hAq7h+zYBXKRwgAzV0NppVv525hg
TnMopuBobKIsDPyjSHLd9Wg1gg5WfFbZcN4+xMfQxN5RQWuJPJgVtsCnwcCusbS3
WVdo1zIUw6Bf1RytCkFyvzdB7XUKo8s=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:25:33 2025 by rpki-client