$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa File: 40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa (raw, json) Hash identifier: 5RySDBgFmNfNNL79Ir5VEkJGikpzBA1m9cUBQF8iG6U= Subject key identifier: 08:BD:4F:60:C4:2C:4C:9A:C3:78:62:72:4B:C0:E0:2A:4B:6F:37:A1 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B21CC19DB41BD334845B433C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 137922 IP address blocks: 136.228.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:19:db:41:bd:33:48:45:b4:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=5541a8c8-ba92-4928-b27f-943185adc864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:5f:f4:8d:1c:17:93:22:dd:c6:ad:ef:29: e4:6a:70:54:87:5b:c6:9f:28:ae:22:50:81:24:3c: 95:73:a7:44:a6:dd:73:3e:2e:2c:25:96:a1:48:ce: 9c:b9:47:fe:6c:59:1b:09:26:70:b7:f2:91:f2:7c: cd:64:0e:50:39:25:3e:83:69:fa:a0:2b:73:1c:a9: 36:d5:94:ef:48:4a:91:c2:91:cd:5a:a8:90:44:d7: f1:8f:cf:7d:cf:8b:e8:83:39:f7:3b:20:e1:6c:2c: 5e:c3:92:6d:79:24:da:6c:33:94:03:dd:c9:c3:a9: 66:44:ff:a5:de:aa:ad:84:cf:3b:8d:c6:da:52:2e: bb:b0:58:2f:51:ef:9e:dd:5f:f5:b0:fd:75:00:94: b5:9c:eb:51:aa:dd:80:9f:2f:1a:af:ec:81:44:cc: 3b:75:fe:2e:c0:8f:10:a7:fd:a1:dd:8d:12:42:1e: a4:be:ed:32:06:60:58:7f:29:1c:16:2d:1a:ba:a8: 74:81:57:56:0a:5b:68:c4:27:69:d2:c0:18:7a:67: 3f:70:03:6f:76:22:96:bf:dd:36:b6:47:8a:7b:91: 1c:0d:dc:42:d2:82:e5:aa:5d:78:59:50:e4:b6:22: f4:a9:0e:f3:77:29:22:b3:c7:80:83:77:60:bb:7d: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:4F:60:C4:2C:4C:9A:C3:78:62:72:4B:C0:E0:2A:4B:6F:37:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2e:38:ca:6a:b2:93:f7:9c:99:cc:fc:77:23:46:56:c5:09: c2:ec:18:8d:5e:fa:e5:65:55:f0:c0:5f:5b:4c:53:fd:71:54: c4:20:8d:a6:2d:47:62:50:4d:cc:98:39:e3:85:3f:1c:36:9b: 79:78:ae:35:4f:44:e9:16:65:39:ca:02:cd:81:98:fc:90:0c: 78:6e:76:a8:67:d5:c5:d4:9e:23:34:ce:d8:d0:f5:8d:d4:80: 7e:81:d4:e6:93:fb:86:b9:5c:62:c2:a4:d8:79:ed:06:0e:2f: d0:96:39:b8:40:25:24:60:59:f3:79:ee:89:6b:d7:ae:28:4e: e5:f5:76:a2:47:8e:1d:e9:c6:f3:d6:2c:92:59:b4:e6:cd:ca: 2e:78:62:83:26:4b:93:4f:b0:26:5e:7b:42:ae:38:d4:98:20: 8b:17:e7:6f:4d:f3:8b:34:85:ba:4b:57:16:b1:6b:81:96:ed: c3:d4:15:a1:90:4a:89:58:f6:1f:8b:b3:b0:b7:6a:a8:27:f3: 77:55:ed:47:4a:9b:b3:a5:43:d0:7c:61:76:15:1a:fa:dd:47: 93:f7:59:fc:a3:5c:87:c5:80:b1:7f:fc:b5:14:37:24:df:b7: d3:50:c3:26:e5:6a:65:e1:bc:08:9c:20:24:a8:02:a6:02:d5: 06:71:62:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBnbQb0zSEW0M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NTU0MWE4YzgtYmE5Mi00OTI4LWIyN2YtOTQzMTg1YWRjODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY9f9I0cF5Mi3cat7ynkanBUh1vGnyiuIlCB JDyVc6dEpt1zPi4sJZahSM6cuUf+bFkbCSZwt/KR8nzNZA5QOSU+g2n6oCtzHKk2 1ZTvSEqRwpHNWqiQRNfxj899z4vogzn3OyDhbCxew5JteSTabDOUA93Jw6lmRP+l 3qqthM87jcbaUi67sFgvUe+e3V/1sP11AJS1nOtRqt2Any8ar+yBRMw7df4uwI8Q p/2h3Y0SQh6kvu0yBmBYfykcFi0auqh0gVdWCltoxCdp0sAYemc/cANvdiKWv902 tkeKe5EcDdxC0oLlql14WVDktiL0qQ7zdykis8eAg3dgu33ZnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi9T2DELEyaw3hickvA4CpLbzehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNDBkMzA5Y2EtNmY3OC0z NGVkLThkODUtMzFkOGI3ZTJlNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACguOMpqspP3nJnM/HcjRlbFCcLsGI1e+uVlVfDAX1tMU/1xVMQgjaYt R2JQTcyYOeOFPxw2m3l4rjVPROkWZTnKAs2BmPyQDHhudqhn1cXUniM0ztjQ9Y3U gH6B1OaT+4a5XGLCpNh57QYOL9CWObhAJSRgWfN57olr164oTuX1dqJHjh3pxvPW LJJZtObNyi54YoMmS5NPsCZee0KuONSYIIsX529N84s0hbpLVxaxa4GW7cPUFaGQ SolY9h+Ls7C3aqgn83dV7UdKm7OlQ9B8YXYVGvrdR5P3WfyjXIfFgLF//LUUNyTf t9NQwyblamXhvAicICSoAqYC1QZxYlg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:56:54 2025 by rpki-client