$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa File: 4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa (raw, json) Hash identifier: d7j3Dv00f+ADHWoPUTZK8BeQJ5mdSF8R9FJpe2APZm0= Subject key identifier: 21:B4:0A:15:F7:C9:31:91:02:40:9D:F4:25:A2:7E:A2:23:05:3B:35 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B21CC1D76710F804B42986F8C Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 137922 IP address blocks: 136.228.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1d:76:71:0f:80:4b:42:98:6f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=1dff963b-c2dc-4bac-bdec-d105fbee91e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:be:b9:27:9d:33:37:0d:4a:44:b3:33:78: 1b:a5:32:65:24:38:4b:cf:68:bd:c7:c4:24:42:3d: da:84:a8:7a:19:01:cf:68:f7:0c:0b:5b:ec:ad:28: b7:01:08:1e:ad:54:fa:a6:1e:b8:82:f2:49:02:1d: 4d:6d:cc:f8:d1:2c:8b:34:ec:9c:5b:52:fd:c0:28: 6f:cb:dc:38:fc:a8:b7:4e:18:cb:9a:a1:71:ac:ac: 7f:b3:90:db:c4:f4:1b:66:31:4c:f5:75:ed:77:c2: 73:fb:14:c8:61:ec:1e:a2:fb:cf:a5:22:fc:30:5d: 83:31:bc:32:ba:80:94:27:3f:60:03:0e:c4:59:6b: 73:4e:9a:a1:fb:4e:44:0e:82:60:fd:2e:6f:05:03: 58:91:37:60:80:5e:9e:06:1d:03:59:dc:21:04:91: d9:25:7d:d1:82:1c:f9:f6:b5:f2:2c:1c:f0:1f:e4: 02:08:c7:74:2a:50:fe:57:f3:70:ed:d2:8a:66:08: 63:3b:98:19:07:6d:58:19:42:92:ca:75:ad:c4:83: ad:7d:24:b0:8a:d6:e0:40:1b:64:9c:e7:b0:ca:88: 9c:cf:7f:44:dc:7b:4a:15:71:c1:16:89:4e:10:8c: c2:3a:c1:c7:62:97:07:bb:2e:3d:52:10:42:42:02: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:0A:15:F7:C9:31:91:02:40:9D:F4:25:A2:7E:A2:23:05:3B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1f:94:c7:4a:32:ba:b7:80:8a:15:f8:f3:78:b6:34:39:10: 6f:80:b8:52:f8:7a:83:51:ae:ee:fc:5e:0a:2b:7f:f3:bd:9c: 86:bf:b4:e0:f3:e5:db:e8:7f:cc:1b:f6:74:36:d8:be:61:e3: dc:ac:03:74:b0:c4:94:3d:8a:f0:a2:79:d0:03:99:e3:75:af: 9c:1e:62:fc:85:96:c2:0e:cd:f0:02:4a:53:76:af:68:cb:2c: c3:5f:bd:79:27:a4:1e:90:9c:ea:c4:f7:d1:0c:b2:94:9a:52: d2:0a:39:92:02:02:bf:79:68:e2:17:59:48:42:54:21:1b:86: 4d:85:34:75:98:69:5d:e3:3a:e0:e5:87:19:ee:78:69:d5:64: d8:36:2c:b8:d5:91:68:25:a0:96:ea:9a:07:89:5e:8a:b6:9c: ef:07:b9:95:ce:e1:74:18:ea:9e:ae:22:b7:4d:82:5b:3a:6d: 62:58:6a:36:27:07:63:02:f0:81:6f:c9:d4:98:71:ad:9f:6c: 94:76:3c:16:b4:6c:76:1e:a1:5f:75:d4:67:8b:63:75:1e:01: 47:10:70:43:6b:84:cd:c7:8c:2b:51:88:0b:d3:97:65:9d:f2: 0c:48:2e:12:bf:47:c5:1d:8b:8a:84:9f:2b:18:7d:10:f8:f6: d8:4b:b3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB12cQ+AS0KYb4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MWRmZjk2M2ItYzJkYy00YmFjLWJkZWMtZDEwNWZiZWU5MWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLG+uSedMzcNSkSzM3gbpTJlJDhLz2i9x8Qk Qj3ahKh6GQHPaPcMC1vsrSi3AQgerVT6ph64gvJJAh1Nbcz40SyLNOycW1L9wChv y9w4/Ki3ThjLmqFxrKx/s5DbxPQbZjFM9XXtd8Jz+xTIYeweovvPpSL8MF2DMbwy uoCUJz9gAw7EWWtzTpqh+05EDoJg/S5vBQNYkTdggF6eBh0DWdwhBJHZJX3Rghz5 9rXyLBzwH+QCCMd0KlD+V/Nw7dKKZghjO5gZB21YGUKSynWtxIOtfSSwitbgQBtk nOewyoicz39E3HtKFXHBFolOEIzCOsHHYpcHuy49UhBCQgIinwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG0ChX3yTGRAkCd9CWifqIjBTs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNGE5ZjVmZjAtMDI4Ny0z MjFhLWFiMjAtNTUyOGZkYzFiNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkflMdKMrq3gIoV+PN4tjQ5EG+AuFL4eoNRru78Xgorf/O9nIa/tODz 5dvof8wb9nQ22L5h49ysA3SwxJQ9ivCiedADmeN1r5weYvyFlsIOzfACSlN2r2jL LMNfvXknpB6QnOrE99EMspSaUtIKOZICAr95aOIXWUhCVCEbhk2FNHWYaV3jOuDl hxnueGnVZNg2LLjVkWgloJbqmgeJXoq2nO8HuZXO4XQY6p6uIrdNgls6bWJYajYn B2MC8IFvydSYca2fbJR2PBa0bHYeoV911GeLY3UeAUcQcENrhM3HjCtRiAvTl2Wd 8gxILhK/R8Udi4qEnysYfRD49thLszI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:23 2025 by rpki-client