$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa File: 410c888b-87d0-38d4-abe0-40515be0096e.roa (raw, json) Hash identifier: x71agPfcz+j57T3DZGOtf6CyCAlLKTqA3gdndjtgCR4= Subject key identifier: 81:53:A4:49:D2:FD:03:5D:3D:51:C9:08:44:52:19:6D:5A:99:48:6D Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A3B7AF4B31030AA2FD5C99780 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 396253 IP address blocks: 136.228.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f4:b3:10:30:aa:2f:d5:c9:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=6867d0d9-64f1-4859-9cb0-74400be28f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:78:8c:15:19:d7:f9:72:48:32:8c:e7:0e: 48:b6:f8:47:18:de:e3:83:36:be:33:87:b5:04:66: da:d4:ec:fd:a7:97:58:e8:ab:bc:a8:95:a8:d4:df: f0:ed:85:ab:1d:49:c5:bb:c9:c5:08:05:e4:79:09: db:cc:b1:06:86:12:e5:b4:79:4e:c4:cb:31:6f:b5: 6f:4d:bf:7b:da:4a:82:e7:4c:c8:95:c3:97:2e:b1: 91:b4:ad:57:82:38:1c:73:83:25:dd:dc:2e:97:11: ac:a0:e6:94:b4:94:18:cf:e5:fa:df:22:c0:36:8c: 0b:9d:7d:bb:7c:8e:c5:4e:c4:9c:90:a5:ec:9e:2e: 57:fd:23:7d:10:96:fe:48:c1:7d:92:e6:85:d1:30: c4:8f:9c:4c:77:d5:24:23:22:8b:8c:e0:0b:8b:7e: 99:f1:db:a3:ef:67:81:1e:2c:ec:d0:9c:55:92:8b: 25:a6:b5:b8:b3:47:a1:ce:79:8d:64:9b:8a:79:90: 26:71:2d:d1:dc:4f:28:50:60:3c:0a:67:25:ee:d5: c4:8c:f4:53:00:a2:8d:93:60:c8:93:30:d7:3b:de: f7:05:90:e1:fc:78:94:ca:98:68:ab:1d:cb:42:31: 19:e3:a2:16:5a:b5:63:80:b2:66:78:da:cd:a8:3a: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:53:A4:49:D2:FD:03:5D:3D:51:C9:08:44:52:19:6D:5A:99:48:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:18:5a:c2:21:6e:4f:ac:9d:dc:a4:db:7f:47:75:f7:99:8c: 46:0b:80:52:31:a6:99:8a:bc:14:05:8a:60:58:6a:7d:f9:eb: 7f:b1:78:06:14:5b:32:de:b4:1b:8e:d8:c1:81:a9:82:aa:54: fc:db:f7:f1:25:2b:d5:04:3d:47:0b:03:82:19:0b:65:af:8c: ce:e5:71:97:dd:94:17:8d:1f:10:86:66:38:03:4c:00:37:cf: 30:54:64:2b:98:0d:17:f7:16:37:e8:da:63:21:62:7d:89:94: ef:c3:5d:36:7e:f4:d7:14:45:08:b1:e7:7b:74:0f:6a:5d:50: 33:95:6a:31:e2:01:c5:61:07:e3:c6:ca:1a:a9:5e:7d:e3:68: c6:46:db:c2:15:55:c5:57:cf:af:60:4d:e2:f4:18:b3:4a:4c: 38:0c:7a:1e:4b:9f:91:b4:4c:e1:21:94:06:9f:e9:93:de:2f: 5d:4a:9e:7b:75:6f:2d:de:34:05:47:4b:75:ad:80:fd:30:cb: e8:99:cc:4b:de:2d:20:04:c0:7a:73:85:ab:65:d0:c3:0a:75: 52:55:1a:e6:a0:f8:46:d7:42:d1:0a:47:de:63:7f:b3:dd:25: f3:44:90:f7:76:d2:f7:fa:42:56:fd:cb:05:3e:02:83:d6:a3: 5d:20:9e:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evSzEDCqL9XJl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk Njg2N2QwZDktNjRmMS00ODU5LTljYjAtNzQ0MDBiZTI4ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJF4jBUZ1/lySDKM5w5ItvhHGN7jgza+M4e1 BGba1Oz9p5dY6Ku8qJWo1N/w7YWrHUnFu8nFCAXkeQnbzLEGhhLltHlOxMsxb7Vv Tb972kqC50zIlcOXLrGRtK1Xgjgcc4Ml3dwulxGsoOaUtJQYz+X63yLANowLnX27 fI7FTsSckKXsni5X/SN9EJb+SMF9kuaF0TDEj5xMd9UkIyKLjOALi36Z8duj72eB Hizs0JxVkoslprW4s0ehznmNZJuKeZAmcS3R3E8oUGA8Cmcl7tXEjPRTAKKNk2DI kzDXO973BZDh/HiUyphoqx3LQjEZ46IWWrVjgLJmeNrNqDpp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFTpEnS/QNdPVHJCERSGW1amUhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNDEwYzg4OGItODdkMC0z OGQ0LWFiZTAtNDA1MTViZTAwOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQYWsIhbk+sndyk239HdfeZjEYLgFIxppmKvBQFimBYan3563+xeAYU WzLetBuO2MGBqYKqVPzb9/ElK9UEPUcLA4IZC2WvjM7lcZfdlBeNHxCGZjgDTAA3 zzBUZCuYDRf3Fjfo2mMhYn2JlO/DXTZ+9NcURQix53t0D2pdUDOVajHiAcVhB+PG yhqpXn3jaMZG28IVVcVXz69gTeL0GLNKTDgMeh5Ln5G0TOEhlAaf6ZPeL11Knnt1 by3eNAVHS3WtgP0wy+iZzEveLSAEwHpzhatl0MMKdVJVGuag+EbXQtEKR95jf7Pd JfNEkPd20vf6Qlb9ywU+AoPWo10gnhc= -----END CERTIFICATE-----Generated at Wed Jul 2 00:25:18 2025 by rpki-client