$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa File: a4111b8e-0a64-3b24-9389-e0763deb2b01.roa (raw, json) Hash identifier: x80P2G4gXZ6qf+IoT7P3jticwuHhdxClKZJGgPXD044= Subject key identifier: 13:1B:69:9E:73:8C:6D:13:82:1C:D0:0A:2C:A3:42:2C:29:63:DE:85 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A5335A0EDD9738DBD0968E980 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 202276 IP address blocks: 136.228.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a0:ed:d9:73:8d:bd:09:68:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=5985926b-00be-4abf-8768-2915108f7471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:fa:20:bc:c0:9b:c4:08:35:65:9a:b8:40: df:49:a0:ea:ca:07:b7:76:9f:7d:0c:f9:66:bb:92: 46:08:89:15:2e:5f:e9:11:cf:a1:3c:b7:95:bb:3d: 64:b7:6e:69:37:7a:aa:a8:71:17:68:e3:52:a0:2d: d5:7c:83:02:b5:98:42:2a:0e:be:7b:71:e8:3f:19: 72:d7:71:4e:8b:bf:ea:9f:5b:6a:4c:62:93:e4:d4: 86:81:d1:90:1f:99:21:e3:92:b3:ad:35:d0:03:b8: 88:6f:2e:8f:32:1f:e7:23:bf:f8:67:05:e3:d6:f7: 26:af:00:a4:72:fe:09:8c:d6:7a:46:6d:71:bc:b4: 00:1f:9d:13:89:95:c7:ec:0f:63:7c:71:88:7e:20: bf:d5:d4:b9:3e:44:ec:13:fb:dd:3f:90:1d:9c:1f: 3d:bb:89:7f:cb:eb:24:fa:53:0d:36:28:56:c1:df: 79:55:0a:86:ce:00:10:fb:2f:29:e4:e9:53:45:11: b3:a8:8a:a8:fb:7f:1a:ea:34:ce:fb:38:f7:9b:d8: 13:0c:ca:d5:2a:fa:80:8c:85:fd:e3:4c:81:0e:3f: b4:32:54:99:af:25:2a:58:cc:ae:a9:f7:9c:1d:31: a5:bc:61:b9:6c:3d:77:3a:10:79:b0:14:96:38:54: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1B:69:9E:73:8C:6D:13:82:1C:D0:0A:2C:A3:42:2C:29:63:DE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a5:ba:26:31:8a:29:20:40:0b:43:b2:79:98:34:1e:b2:0f: ef:37:c4:26:67:fd:1e:34:ef:d9:85:ce:8b:06:ca:fa:36:d9: 15:00:c5:7e:c1:ef:f6:43:b4:a0:cf:b8:01:e4:17:f0:d3:78: d0:a9:8e:b4:45:20:92:ba:16:5b:d4:aa:c9:22:b3:50:f9:cb: 98:d0:ec:1f:61:76:9b:bb:5d:7a:6c:11:5f:1c:49:47:81:62: 91:90:5a:d8:5b:6f:44:6d:eb:bd:ca:97:0b:c0:47:f3:be:15: ae:e5:a9:d2:77:c5:1a:9d:73:e3:ce:9a:fd:fd:0c:f9:1f:44: 28:6c:47:e1:38:d6:97:d0:15:f9:83:e1:81:72:4e:0b:bb:6c: 48:21:ef:1d:90:42:39:95:2d:87:7c:52:3a:63:d7:79:e9:de: 05:fa:b7:63:31:4e:b6:52:9d:e4:eb:a2:a8:f8:4c:c2:e5:26: 53:ac:2f:54:0a:ba:70:db:6c:92:f9:7d:d1:b9:95:4c:7e:9b: 38:55:28:e6:81:12:97:37:62:67:51:23:1d:c3:7b:fd:78:fb: 4f:cb:9b:22:a0:eb:c3:fa:23:11:4f:43:cf:46:90:a1:4b:c3: 41:6d:c5:ad:07:5d:22:f1:6c:b2:b8:d0:ad:19:6f:4b:69:7b: a4:f6:ae:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaDt2XONvQlo6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTk4NTkyNmItMDBiZS00YWJmLTg3NjgtMjkxNTEwOGY3NDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSb6ILzAm8QINWWauEDfSaDqyge3dp99DPlm u5JGCIkVLl/pEc+hPLeVuz1kt25pN3qqqHEXaONSoC3VfIMCtZhCKg6+e3HoPxly 13FOi7/qn1tqTGKT5NSGgdGQH5kh45KzrTXQA7iIby6PMh/nI7/4ZwXj1vcmrwCk cv4JjNZ6Rm1xvLQAH50TiZXH7A9jfHGIfiC/1dS5PkTsE/vdP5AdnB89u4l/y+sk +lMNNihWwd95VQqGzgAQ+y8p5OlTRRGzqIqo+38a6jTO+zj3m9gTDMrVKvqAjIX9 40yBDj+0MlSZryUqWMyuqfecHTGlvGG5bD13OhB5sBSWOFSTTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMbaZ5zjG0TghzQCiyjQiwpY96FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTQxMTFiOGUtMGE2NC0z YjI0LTkzODktZTA3NjNkZWIyYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOluiYxiikgQAtDsnmYNB6yD+83xCZn/R4079mFzosGyvo22RUAxX7B 7/ZDtKDPuAHkF/DTeNCpjrRFIJK6FlvUqskis1D5y5jQ7B9hdpu7XXpsEV8cSUeB YpGQWthbb0Rt673KlwvAR/O+Fa7lqdJ3xRqdc+POmv39DPkfRChsR+E41pfQFfmD 4YFyTgu7bEgh7x2QQjmVLYd8Ujpj13np3gX6t2MxTrZSneTroqj4TMLlJlOsL1QK unDbbJL5fdG5lUx+mzhVKOaBEpc3YmdRIx3De/14+0/LmyKg68P6IxFPQ89GkKFL w0Ftxa0HXSLxbLK40K0Zb0tpe6T2rtk= -----END CERTIFICATE-----Generated at Mon Jun 30 05:30:19 2025 by rpki-client