$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa File: 0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa (raw, json) Hash identifier: KOJMAR2xGxWStE9NSrjKtgqlMHNHB1LefqmGZRGnBPU= Subject key identifier: 26:9E:CE:3F:B6:D4:68:FD:11:C2:16:71:01:CE:75:FC:89:25:30:70 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F432858494E2EAF368810A9C170434040 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 202276 IP address blocks: 136.228.221.0/24 maxlen: 24 136.228.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:af:36:88:10:a9:c1:70:43:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=757adba6-0950-4757-9775-09f5d2f4cdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:7f:56:67:65:1c:71:19:78:91:5a:cd:21: 18:84:c9:6b:5e:bf:1f:d1:1c:21:f0:96:a2:77:1a: ac:1c:96:a3:7b:3c:d3:aa:ba:f7:08:eb:67:fd:e1: 07:2b:53:7b:88:5a:fb:9a:2a:6f:a1:e4:22:c3:1d: f8:a5:61:f3:8c:14:3b:e8:14:5b:05:e4:6a:1f:f5: 67:25:b8:ad:9c:15:bd:3d:cb:16:f6:68:08:82:d0: 8b:5e:0f:22:da:29:54:dd:a7:e0:80:2b:c7:ed:b7: a8:76:4a:1a:65:a2:6e:17:3e:2f:b4:e9:17:a0:0f: 13:9c:c0:87:93:d4:58:80:da:cd:6a:da:1f:54:93: f0:6d:7b:99:2b:18:19:42:60:c4:ec:a8:9b:e0:d9: 00:68:07:19:0c:ae:38:cb:af:e2:ed:43:ee:3f:1c: 30:86:f9:0b:3f:60:bc:49:bd:b7:0a:54:fc:3e:2c: 48:81:1d:49:c8:e6:1f:89:ab:b4:e2:8e:3d:2f:f4: 3c:5c:72:47:be:0f:82:34:26:e6:35:40:43:81:ae: 38:f0:21:27:2e:8b:77:0b:cd:37:b3:7c:34:8c:d6: 32:16:3e:b5:20:fb:c1:c7:57:ca:3f:7d:0d:f7:fd: 0f:a1:1b:3c:9a:bb:f7:a8:e8:0f:cf:64:53:5c:05: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9E:CE:3F:B6:D4:68:FD:11:C2:16:71:01:CE:75:FC:89:25:30:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.221.0/24 136.228.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bc:59:0e:ec:83:c4:7e:93:1f:c3:08:17:16:51:d6:1f:92: 9a:59:7b:fb:a5:af:f3:c0:20:0e:c7:0f:43:2f:f9:9f:10:e5: 31:5e:54:54:b0:a8:02:ba:9e:e7:25:5b:a3:fb:87:3e:ab:ab: 27:ba:af:37:59:6c:25:f9:58:98:39:e5:73:b1:15:79:f2:98: 06:df:ec:56:33:7f:1f:d8:5f:53:7c:7b:50:fa:39:c5:d5:35: e4:e6:6b:44:be:4f:aa:09:3e:6a:a1:45:41:2c:ce:cc:7b:92: 4f:13:2f:b2:9f:97:52:e3:4e:28:4e:33:83:71:03:93:89:bc: 16:18:25:e9:c3:bb:26:b5:12:68:19:d8:c7:09:75:d7:29:19: 12:af:c4:b9:4f:da:25:aa:9e:e5:ed:eb:ec:f9:b1:61:31:96: 49:d2:e5:d1:c5:ba:3f:ce:e5:af:fe:c4:fa:43:15:fc:fb:21: af:01:47:47:32:da:51:0a:4a:be:68:20:14:c8:86:fd:de:e1: c2:2f:37:31:44:81:68:51:98:c9:db:aa:40:26:a6:47:de:6b: 90:e3:09:f7:88:1c:ab:51:cd:59:6c:1c:fc:5c:6b:0f:4b:fa: 10:fb:bc:07:18:3f:8f:dd:3f:a9:c3:9c:74:31:e8:92:37:b3: 08:ad:e2:42 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElOLq82iBCpwXBDQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NzU3YWRiYTYtMDk1MC00NzU3LTk3NzUtMDlmNWQyZjRjZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx9/VmdlHHEZeJFazSEYhMlrXr8f0Rwh8Jai dxqsHJajezzTqrr3COtn/eEHK1N7iFr7mipvoeQiwx34pWHzjBQ76BRbBeRqH/Vn JbitnBW9PcsW9mgIgtCLXg8i2ilU3afggCvH7beodkoaZaJuFz4vtOkXoA8TnMCH k9RYgNrNatofVJPwbXuZKxgZQmDE7Kib4NkAaAcZDK44y6/i7UPuPxwwhvkLP2C8 Sb23ClT8PixIgR1JyOYfiau04o49L/Q8XHJHvg+CNCbmNUBDga448CEnLot3C803 s3w0jNYyFj61IPvBx1fKP30N9/0PoRs8mrv3qOgPz2RTXAVY7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCaezj+21Gj9EcIWcQHOdfyJJTBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFlMTVkNDktZTUxMy0z NzQ1LWIzZjktNjZlYmM2NGEyYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiOTdAwQA iOTwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGi8WQ7sg8R+kx/DCBcWUdYfkppZe/ulr/PAIA7HD0Mv+Z8Q 5TFeVFSwqAK6nuclW6P7hz6rqye6rzdZbCX5WJg55XOxFXnymAbf7FYzfx/YX1N8 e1D6OcXVNeTma0S+T6oJPmqhRUEszsx7kk8TL7Kfl1LjTihOM4NxA5OJvBYYJenD uya1EmgZ2McJddcpGRKvxLlP2iWqnuXt6+z5sWExlknS5dHFuj/O5a/+xPpDFfz7 Ia8BR0cy2lEKSr5oIBTIhv3e4cIvNzFEgWhRmMnbqkAmpkfea5DjCfeIHKtRzVls HPxcaw9L+hD7vAcYP4/dP6nDnHQx6JI3swit4kI= -----END CERTIFICATE-----Generated at Sat May 10 05:13:56 2025 by rpki-client