$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa File: 80a5fef1-d368-337d-a043-77c11e4d550e.roa (raw, json) Hash identifier: hmFa/ZWtPcBIps0q+Q0YpD8IeNAx/msjktjV5LYOeNY= Subject key identifier: E1:E4:51:50:BF:12:84:A5:F4:E0:05:11:B9:44:19:B7:13:65:38:0D Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B21CC19F3AAB8CAA422A68080 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396253 IP address blocks: 136.228.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:19:f3:aa:b8:ca:a4:22:a6:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=915a63af-3635-465f-816f-3a0355b01e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:55:46:16:28:c7:2b:21:af:1a:8d:0a:2b: c7:42:a4:de:e1:50:bc:f9:fd:f6:9c:fe:b7:a0:da: 29:cb:13:32:ec:8a:cb:20:38:9a:3d:d3:06:e0:fb: 8a:8c:fd:9d:d0:5f:80:63:fd:08:7d:20:3b:10:04: 36:c5:cf:c2:cf:b3:fb:5a:21:5b:27:6b:e7:98:8e: de:6d:25:49:78:29:6e:ff:9e:d7:7c:01:ad:52:fc: 4c:ba:e5:02:1f:b5:04:ee:84:18:8d:62:66:d9:e2: 80:97:ee:c2:2f:f6:14:f3:14:aa:78:88:f8:80:8f: ca:6b:72:e7:3f:d1:b9:82:42:10:38:8c:8a:7c:80: ab:bd:20:d6:f9:ea:59:84:eb:cb:c2:04:88:94:c4: a0:e9:22:7d:9f:45:2c:29:9c:c7:c7:11:55:20:3d: e5:15:37:c5:93:86:29:bd:2b:59:49:8a:fb:96:7c: de:0e:a6:a4:a5:2d:f6:4c:46:ba:74:7c:bf:99:6b: 3f:60:15:4d:f1:d1:a4:9e:6d:91:fc:16:55:a7:db: e1:61:44:9d:55:3d:68:ff:f1:81:e8:55:a5:b2:2d: f4:e0:31:0b:d8:ae:67:8d:44:34:73:85:e7:2f:bf: 82:d4:82:60:d1:03:79:fa:da:34:c4:b5:4b:40:f1: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:51:50:BF:12:84:A5:F4:E0:05:11:B9:44:19:B7:13:65:38:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4b:fc:8f:be:5f:48:97:73:02:88:5f:7c:74:1c:d4:98:e2: b9:c4:ff:96:4a:78:28:39:3b:09:ce:93:27:11:82:ba:5e:76: 57:3a:55:48:5e:aa:ed:78:f1:7f:ac:86:4e:ef:2e:24:43:46: 3d:a8:25:fb:35:e0:80:5f:f0:b7:fb:b0:c4:1c:92:b6:4d:a9: 55:90:6c:0b:a0:10:9a:32:a0:28:c2:da:33:b3:e6:07:02:0f: e8:f6:90:97:be:1a:4f:6c:9e:f0:f1:a4:80:9c:13:cb:85:dd: 22:a5:cd:33:58:7c:e1:92:4f:51:c4:38:cf:20:f8:87:03:7c: 35:3d:4d:a8:7a:fa:9e:9a:2c:c0:4d:7a:56:28:c4:e7:36:ee: da:ca:d8:50:99:14:0c:ba:29:a8:1c:90:86:3b:43:6b:0c:68: 84:81:65:1b:21:04:b7:6a:f9:70:07:10:96:de:0d:74:06:26: 1e:eb:f0:c3:7f:78:f7:f6:6d:d4:f5:30:09:8f:e9:0b:74:fe: b7:d4:33:95:eb:98:89:cb:93:cb:86:1e:c3:39:8e:e4:4a:6e: 50:11:a5:aa:a6:a5:d2:b0:ea:56:a2:cb:b3:c8:ee:3a:fb:60: 0a:85:9a:70:bd:77:e0:bd:4d:5e:0e:fd:f1:ca:1a:a4:64:79: 66:a6:80:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBnzqrjKpCKmgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OTE1YTYzYWYtMzYzNS00NjVmLTgxNmYtM2EwMzU1YjAxZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBdVRhYoxyshrxqNCivHQqTe4VC8+f32nP63 oNopyxMy7IrLIDiaPdMG4PuKjP2d0F+AY/0IfSA7EAQ2xc/Cz7P7WiFbJ2vnmI7e bSVJeClu/57XfAGtUvxMuuUCH7UE7oQYjWJm2eKAl+7CL/YU8xSqeIj4gI/Ka3Ln P9G5gkIQOIyKfICrvSDW+epZhOvLwgSIlMSg6SJ9n0UsKZzHxxFVID3lFTfFk4Yp vStZSYr7lnzeDqakpS32TEa6dHy/mWs/YBVN8dGknm2R/BZVp9vhYUSdVT1o//GB 6FWlsi304DEL2K5njUQ0c4XnL7+C1IJg0QN5+to0xLVLQPGw4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHkUVC/EoSl9OAFEblEGbcTZTgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODBhNWZlZjEtZDM2OC0z MzdkLWEwNDMtNzdjMTFlNGQ1NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1L/I++X0iXcwKIX3x0HNSY4rnE/5ZKeCg5OwnOkycRgrpedlc6VUhe qu148X+shk7vLiRDRj2oJfs14IBf8Lf7sMQckrZNqVWQbAugEJoyoCjC2jOz5gcC D+j2kJe+Gk9snvDxpICcE8uF3SKlzTNYfOGST1HEOM8g+IcDfDU9Tah6+p6aLMBN elYoxOc27trK2FCZFAy6KagckIY7Q2sMaISBZRshBLdq+XAHEJbeDXQGJh7r8MN/ ePf2bdT1MAmP6Qt0/rfUM5XrmInLk8uGHsM5juRKblARpaqmpdKw6laiy7PI7jr7 YAqFmnC9d+C9TV4O/fHKGqRkeWamgCU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:08 2025 by rpki-client