$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa File: 5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa (raw, json) Hash identifier: 901mV+Uoo41cozshDNNWBbldR1M8eHJcXY6k1fnz+j0= Subject key identifier: D6:BA:DB:D5:F6:92:C7:AD:8E:27:E5:0F:83:A6:AA:F7:2B:16:77:B1 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B477C695DAD2D2495E8FBAA00 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396253 IP address blocks: 136.228.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:69:5d:ad:2d:24:95:e8:fb:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=04f7d2d7-f5ea-4571-84b6-d8c20a0825c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:b2:5b:53:52:23:38:aa:7f:16:31:f1:b9: b7:6c:82:a0:46:e8:1a:d8:8e:fe:ed:00:11:67:71: f5:8d:af:f3:3d:58:68:c3:4f:74:dd:85:64:af:cc: 7e:f9:0d:1e:8b:a6:b7:6a:e6:b5:e6:ec:d2:0a:bc: 16:88:90:c2:18:42:c0:74:a4:ce:40:c6:b9:49:a9: f2:b9:fe:8e:dd:c5:36:85:52:7a:97:6b:e7:0f:c3: f3:18:a7:b8:57:e9:f2:bc:ac:6d:17:5b:d5:1a:48: 77:40:80:a7:20:0e:b6:5a:6f:0b:da:8a:24:6e:be: 76:57:6d:8e:88:04:0c:25:77:45:ea:42:98:0a:4f: 8e:3d:76:68:e7:40:dd:ca:af:60:5c:33:f3:72:ac: d8:e2:0b:3a:8d:18:4f:b9:6e:e8:1c:ad:1b:eb:05: e2:58:31:96:17:72:98:82:5c:19:40:7e:7f:c4:47: 69:eb:0a:28:59:d4:88:c8:f2:2a:fb:ea:20:4f:92: b3:e9:03:8b:96:05:48:82:45:97:cc:5d:e2:e5:1f: 66:3c:37:10:97:02:45:e3:eb:aa:fd:f6:47:4d:8a: 20:1b:1d:20:f2:73:a2:11:a1:76:d1:3a:21:b0:5b: cf:1d:7e:f0:94:18:c0:2d:49:74:50:17:9a:e6:2b: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BA:DB:D5:F6:92:C7:AD:8E:27:E5:0F:83:A6:AA:F7:2B:16:77:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:31:27:3b:e2:34:c7:e3:16:9e:e8:4e:e7:64:65:83:8c:01: 8e:06:de:e7:7b:fd:0f:3f:21:cb:c6:64:10:cc:0f:ca:1a:86: 72:73:d2:b6:0e:a0:1a:10:6b:47:57:43:5e:75:0c:21:f4:2a: c3:0d:44:63:cb:37:2e:b3:8f:ac:55:0b:2a:5c:a3:8c:94:20: bc:ae:74:5b:ba:45:f2:2d:50:c1:53:b1:ca:08:5c:24:d7:23: 37:ac:61:a9:55:58:56:ed:cc:79:ff:50:12:2b:fe:56:de:66: a8:4e:ba:1e:56:78:6a:d1:ec:78:6d:3a:d5:8e:68:11:e0:bf: 02:a8:7b:42:05:0a:de:68:c0:12:77:55:b5:ed:dd:78:8e:7b: 5f:29:b7:f6:de:79:2e:9c:17:82:8e:1f:64:fa:14:c9:64:37: 3f:ea:1d:77:d5:72:d1:e9:b5:74:40:d1:9f:9f:2e:6a:94:f1: ef:f8:ce:46:64:a0:41:1c:5d:8b:d0:a6:ea:7d:24:d2:b1:16: 9a:60:d6:95:ab:c8:87:c3:21:7d:2d:ce:7e:6c:50:26:64:c3: c3:13:c5:49:9e:a3:60:77:61:e7:72:2d:15:89:16:33:2a:8f: 7e:24:dc:45:9a:02:60:b8:ab:52:73:13:c3:73:05:22:99:bc: cb:84:25:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGldrS0klej7qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDRmN2QyZDctZjVlYS00NTcxLTg0YjYtZDhjMjBhMDgyNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfuyW1NSIziqfxYx8bm3bIKgRuga2I7+7QAR Z3H1ja/zPVhow0903YVkr8x++Q0ei6a3aua15uzSCrwWiJDCGELAdKTOQMa5Sany uf6O3cU2hVJ6l2vnD8PzGKe4V+nyvKxtF1vVGkh3QICnIA62Wm8L2ookbr52V22O iAQMJXdF6kKYCk+OPXZo50Ddyq9gXDPzcqzY4gs6jRhPuW7oHK0b6wXiWDGWF3KY glwZQH5/xEdp6wooWdSIyPIq++ogT5Kz6QOLlgVIgkWXzF3i5R9mPDcQlwJF4+uq /fZHTYogGx0g8nOiEaF20TohsFvPHX7wlBjALUl0UBea5itRFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNa629X2ksetjiflD4OmqvcrFnexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNWEwN2ZkNDEtNDk5NC0z YmYwLTg5NzktYzBiOWVhMzQxYmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOT7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIxJzviNMfjFp7oTudkZYOMAY4G3ud7/Q8/IcvGZBDMD8oahnJz0rYO oBoQa0dXQ151DCH0KsMNRGPLNy6zj6xVCypco4yUILyudFu6RfItUMFTscoIXCTX IzesYalVWFbtzHn/UBIr/lbeZqhOuh5WeGrR7HhtOtWOaBHgvwKoe0IFCt5owBJ3 VbXt3XiOe18pt/beeS6cF4KOH2T6FMlkNz/qHXfVctHptXRA0Z+fLmqU8e/4zkZk oEEcXYvQpup9JNKxFppg1pWryIfDIX0tzn5sUCZkw8MTxUmeo2B3YedyLRWJFjMq j34k3EWaAmC4q1JzE8NzBSKZvMuEJbM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:15:09 2025 by rpki-client