$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa File: a4111b8e-0a64-3b24-9389-e0763deb2b01.roa (raw, json) Hash identifier: oij9z+FF86/BCXOm6KlNePrvqqq6xfhpI/K2cF1eRFs= Subject key identifier: 8C:84:80:55:B6:92:E1:7B:E0:83:67:BC:4A:9D:37:07:08:F6:8E:B5 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B33F19CFEF5E98C046A788700 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 202276 IP address blocks: 136.228.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9c:fe:f5:e9:8c:04:6a:78:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=b06b9339-b20f-45b8-a1cf-caa49324bc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:9e:d3:ac:95:a2:07:87:69:cd:1c:57:6e: 4a:05:aa:bf:ee:c5:d2:2b:35:c7:7e:18:63:38:5c: 28:c4:2d:69:c6:03:5b:c7:78:90:21:68:b1:7b:5b: 13:36:a0:b2:84:c0:cd:72:36:ce:0e:fb:18:22:2c: fe:ba:fb:d7:97:10:f4:b1:b9:ca:26:6e:43:ae:f8: 75:05:fe:f5:30:73:dd:c0:a4:43:1c:42:1b:5e:d1: 78:98:cf:c8:67:65:54:5a:f1:e4:d3:11:42:37:b4: 6a:2e:76:0d:49:b6:9c:af:e8:f0:5f:91:aa:a8:9a: 47:39:3b:8e:57:ff:b1:73:9e:10:7f:f1:a8:16:1e: 37:37:af:8f:ea:8f:f8:59:d6:8c:c6:41:6b:29:88: d4:be:05:aa:7f:17:6a:32:43:83:b2:6c:eb:a7:32: ba:01:1c:31:5b:8b:cb:57:d4:20:d3:d2:12:a3:55: 7f:09:f2:8d:79:e3:16:ca:44:b7:58:1c:86:eb:b7: 4e:ad:4f:7b:08:8b:9e:47:17:f2:85:81:04:06:02: 7b:14:fc:21:2b:b3:fb:e5:1f:ba:e2:73:66:6d:08: 92:eb:6e:3c:95:f8:db:5a:50:09:8f:a1:2e:7d:16: 81:56:0b:90:97:77:0f:98:5e:70:aa:59:ee:ea:b1: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:84:80:55:B6:92:E1:7B:E0:83:67:BC:4A:9D:37:07:08:F6:8E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0e:fe:50:2c:b2:d9:74:b3:d6:54:97:97:fa:d3:33:e5:ce: 34:34:8d:af:5d:4c:6a:e6:4f:b2:d4:5a:27:10:8b:20:09:6f: b9:fa:1f:88:c0:34:61:3f:4b:01:61:96:ee:71:a6:47:6e:cf: c6:8b:a6:1e:46:4f:6b:32:d4:74:e9:a5:24:fa:b6:fb:a3:b5: 22:f2:43:65:af:ae:93:4a:ae:f7:cf:da:06:cd:1b:50:d9:b9: b8:da:9b:3f:a6:f9:f0:a7:d7:3f:ff:d5:28:f5:21:65:80:a9: c7:d4:e8:d9:4f:65:6b:b4:59:b3:de:a2:c9:2e:05:d2:87:85: 6e:bb:b0:82:49:93:e4:0c:bf:a1:a0:71:59:db:ef:ad:10:98: 97:e3:df:4b:73:81:9c:4e:45:5e:22:ac:9d:cf:94:da:45:18: 11:2d:6b:f5:9f:4a:9b:16:c9:c9:6d:a5:58:9d:c1:0c:3c:d9: 5f:5c:8a:05:1d:b4:40:c7:a9:0f:ef:60:99:f9:0d:98:98:e1: 10:c0:e5:25:77:70:ae:5f:20:8a:fa:3d:b2:ce:3d:3d:65:7a: 19:49:9f:cd:ea:c1:e6:cf:ca:14:57:a5:f5:bb:92:77:3e:ab: 67:c3:b1:26:6e:b0:2f:40:a7:3d:52:b6:dc:78:3d:b8:31:b1: 90:bd:88:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8Zz+9emMBGp4hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YjA2YjkzMzktYjIwZi00NWI4LWExY2YtY2FhNDkzMjRiYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcOe06yVogeHac0cV25KBaq/7sXSKzXHfhhj OFwoxC1pxgNbx3iQIWixe1sTNqCyhMDNcjbODvsYIiz+uvvXlxD0sbnKJm5Drvh1 Bf71MHPdwKRDHEIbXtF4mM/IZ2VUWvHk0xFCN7RqLnYNSbacr+jwX5GqqJpHOTuO V/+xc54Qf/GoFh43N6+P6o/4WdaMxkFrKYjUvgWqfxdqMkODsmzrpzK6ARwxW4vL V9Qg09ISo1V/CfKNeeMWykS3WByG67dOrU97CIueRxfyhYEEBgJ7FPwhK7P75R+6 4nNmbQiS6248lfjbWlAJj6EufRaBVguQl3cPmF5wqlnu6rE2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyEgFW2kuF74INnvEqdNwcI9o61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTQxMTFiOGUtMGE2NC0z YjI0LTkzODktZTA3NjNkZWIyYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQO/lAsstl0s9ZUl5f60zPlzjQ0ja9dTGrmT7LUWicQiyAJb7n6H4jA NGE/SwFhlu5xpkduz8aLph5GT2sy1HTppST6tvujtSLyQ2WvrpNKrvfP2gbNG1DZ ubjamz+m+fCn1z//1Sj1IWWAqcfU6NlPZWu0WbPeoskuBdKHhW67sIJJk+QMv6Gg cVnb760QmJfj30tzgZxORV4irJ3PlNpFGBEta/WfSpsWycltpVidwQw82V9cigUd tEDHqQ/vYJn5DZiY4RDA5SV3cK5fIIr6PbLOPT1lehlJn83qwebPyhRXpfW7knc+ q2fDsSZusC9Apz1Sttx4PbgxsZC9iHs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:31:25 2025 by rpki-client