$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/77a321a5-8165-3ff1-9cd8-c7a71de015e5.roa File: 77a321a5-8165-3ff1-9cd8-c7a71de015e5.roa (raw, json) Hash identifier: 6wP9RA+xwqrqjQ5fOIppQqntLiXNlox3twjCmhFpOUw= Subject key identifier: 0B:87:36:26:22:B3:D8:DE:5E:4D:E2:F2:BD:C4:11:0F:D6:27:3F:13 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A3A157BE40E4085D3045F8180 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/77a321a5-8165-3ff1-9cd8-c7a71de015e5.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 396253 IP address blocks: 136.228.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7b:e4:0e:40:85:d3:04:5f:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=cb163b28-6790-4e19-8060-a13a11790c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:86:c1:ea:d8:0d:eb:a2:6d:00:cb:99:aa: eb:3e:25:f5:10:4f:9a:8a:16:6d:7a:6e:50:c6:5e: ae:04:c9:52:84:83:6a:26:ab:51:22:6f:d5:8e:38: a8:3f:21:7f:04:71:18:8d:10:ab:51:07:bf:c7:66: 25:08:c1:e5:25:07:db:f4:60:a4:c2:d0:77:49:22: 3d:b8:3d:e4:3e:4f:05:86:71:90:88:f1:0f:49:46: 4b:12:1a:d5:d9:e9:b9:6c:28:45:f5:20:10:ee:24: 7e:c1:e9:c6:a5:6f:2e:3d:79:53:f7:4e:67:61:b5: fb:31:f6:6b:6d:00:78:20:69:d7:8e:16:3d:8b:33: 56:7b:84:ef:ae:fd:62:b0:0b:cd:70:1d:55:47:32: 10:75:fd:f5:30:2b:44:b2:d5:14:23:10:86:72:d1: 20:5d:ce:23:95:8a:d2:69:a5:3a:1c:dd:c9:ac:c6: 04:3d:00:a8:46:b9:d2:e2:d4:4e:c9:43:b9:6a:1a: 1c:8e:f0:f9:12:65:4f:32:77:ba:ab:2c:2f:a5:0b: 30:11:59:d9:26:62:02:f1:a0:e5:ef:cb:8e:14:aa: 00:0a:c1:96:f5:c9:af:33:29:c0:2b:3c:e3:69:66: 7f:02:61:e2:24:87:9a:fa:82:85:ba:b7:b0:02:23: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:87:36:26:22:B3:D8:DE:5E:4D:E2:F2:BD:C4:11:0F:D6:27:3F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/77a321a5-8165-3ff1-9cd8-c7a71de015e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:39:c4:92:ec:28:23:3e:b3:e8:67:24:84:36:6d:75:6b:42: 19:47:bb:c2:38:a6:87:32:30:34:85:5a:41:f3:e3:b2:bc:e6: 97:64:c6:4b:91:24:d3:95:4e:68:e3:54:b9:ed:b4:0f:fc:94: 86:41:da:d9:3e:eb:0e:88:bd:32:e9:72:32:b7:26:14:83:d2: 4f:8d:13:e5:e5:78:c6:4d:50:4a:3a:87:b5:cf:1a:ea:73:87: ca:d7:7a:0e:1e:c0:0d:ce:2d:25:dc:d6:e7:33:61:40:c2:c8: 6a:d2:8e:7e:24:bb:cf:ac:63:ff:1b:2b:a1:01:4a:ef:16:ea: 27:0f:c4:96:bd:57:f4:57:c3:5e:12:22:be:96:f7:82:79:e3: 71:49:d3:aa:67:31:80:f4:f1:de:00:70:91:74:93:d9:b8:84: 75:5c:c6:2f:8c:d0:df:5d:89:9d:96:42:56:1a:8f:d1:8c:30: 2f:2a:60:af:f3:98:d4:b8:1f:75:0d:9f:d3:29:ef:58:84:69: 29:95:7c:63:a6:74:9e:b1:44:14:6d:64:e6:3f:ce:8f:99:61: 39:e9:30:a4:5d:1a:fc:80:06:6d:91:bf:84:6b:d0:0a:77:8f: 33:d7:83:27:a4:2f:18:f0:d7:3b:9d:5c:31:27:87:b4:02:44: 47:9d:c2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXvkDkCF0wRfgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk Y2IxNjNiMjgtNjc5MC00ZTE5LTgwNjAtYTEzYTExNzkwYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigiGwerYDeuibQDLmarrPiX1EE+aihZtem5Q xl6uBMlShINqJqtRIm/VjjioPyF/BHEYjRCrUQe/x2YlCMHlJQfb9GCkwtB3SSI9 uD3kPk8FhnGQiPEPSUZLEhrV2em5bChF9SAQ7iR+wenGpW8uPXlT905nYbX7MfZr bQB4IGnXjhY9izNWe4Tvrv1isAvNcB1VRzIQdf31MCtEstUUIxCGctEgXc4jlYrS aaU6HN3JrMYEPQCoRrnS4tROyUO5ahocjvD5EmVPMne6qywvpQswEVnZJmIC8aDl 78uOFKoACsGW9cmvMynAKzzjaWZ/AmHiJIea+oKFurewAiOE8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuHNiYis9jeXk3i8r3EEQ/WJz8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNzdhMzIxYTUtODE2NS0z ZmYxLTljZDgtYzdhNzFkZTAxNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo5xJLsKCM+s+hnJIQ2bXVrQhlHu8I4pocyMDSFWkHz47K85pdkxkuR JNOVTmjjVLnttA/8lIZB2tk+6w6IvTLpcjK3JhSD0k+NE+XleMZNUEo6h7XPGupz h8rXeg4ewA3OLSXc1uczYUDCyGrSjn4ku8+sY/8bK6EBSu8W6icPxJa9V/RXw14S Ir6W94J543FJ06pnMYD08d4AcJF0k9m4hHVcxi+M0N9diZ2WQlYaj9GMMC8qYK/z mNS4H3UNn9Mp71iEaSmVfGOmdJ6xRBRtZOY/zo+ZYTnpMKRdGvyABm2Rv4Rr0Ap3 jzPXgyekLxjw1zudXDEnh7QCREedwkg= -----END CERTIFICATE-----Generated at Mon Jun 30 02:34:30 2025 by rpki-client