$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa File: aaa144f2-cbcb-3cce-9036-1350d18085ff.roa (raw, json) Hash identifier: Pw6LLdir1odXDcrepnrefz/XvrjAnpeBGxhWZZCd0zE= Subject key identifier: 51:E0:2C:5C:EA:40:CF:6B:24:CC:24:F2:AF:38:48:7A:36:D7:C7:91 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B0E414EE9E5845A5701CE4960 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 202276 IP address blocks: 136.228.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4e:e9:e5:84:5a:57:01:ce:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=542481b4-2100-4c24-918a-a58086338f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:72:36:ec:f8:5a:fa:78:94:7c:2d:5a:a8: e8:2f:b5:9e:f8:8c:72:87:fb:af:45:0f:11:da:9c: 0c:11:30:a2:97:9b:8c:16:04:b8:1e:d7:f7:f0:3a: 9a:5e:8b:24:f0:0b:60:62:60:d3:0e:48:d3:12:da: c8:58:e9:e7:70:41:cf:0f:bc:55:ca:ea:36:2c:f0: 4f:de:7f:d4:88:50:1c:a6:2f:3e:db:9c:48:52:61: b3:97:d0:a2:1e:a7:2a:97:29:4a:49:dc:65:78:64: c7:af:d5:83:bf:97:77:b6:53:48:74:9b:5e:bb:25: 00:be:e3:5c:ff:a1:e0:fc:68:f0:33:90:04:ce:68: 88:c3:9f:90:5d:02:b9:0c:95:d8:67:18:d5:11:7a: 47:6a:6f:d0:3f:9c:b7:18:7c:68:38:b5:7e:b0:c5: 5c:df:d4:89:59:a2:d4:e9:8d:b1:9f:5c:44:9d:e8: f7:9f:78:ce:de:72:86:1f:43:fd:68:5d:8a:37:16: 5f:f5:ff:80:c5:09:af:f3:b3:6a:87:a3:45:48:b5: 9e:f9:bd:5f:b6:28:c7:3d:34:df:fc:84:d8:43:62: d5:34:d6:76:69:10:fc:59:75:d0:6b:53:2c:4c:ed: 0e:6b:0c:ee:6c:de:dd:94:39:80:8b:bc:5e:7e:cb: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E0:2C:5C:EA:40:CF:6B:24:CC:24:F2:AF:38:48:7A:36:D7:C7:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:73:6b:9b:4c:26:32:25:ba:19:93:6d:1f:33:e5:48:1e:a5: 92:4f:24:de:01:3e:5b:e9:6b:8d:20:ef:63:bf:ee:fd:01:7d: 92:bd:7f:f5:9b:6d:c7:49:be:31:00:dc:cc:a8:35:5c:a6:94: 85:31:34:a2:00:df:52:66:9d:06:18:bb:2b:fb:1b:b5:50:7d: 2b:2b:e0:5e:a5:4c:0e:08:61:d4:10:b8:c6:39:36:d3:96:fb: 77:a0:52:98:24:84:bb:e5:aa:7a:4f:18:bb:e8:53:76:cf:c3: e1:d2:8b:42:3b:fa:3b:0d:d4:60:91:53:cd:65:ea:67:5e:02: 8a:9b:e9:23:ae:26:fe:d6:b9:a5:8c:ad:a4:91:19:58:e8:06: e5:8d:ec:b6:e0:29:be:c6:54:05:72:7f:92:24:4f:f2:f1:26: 4f:5e:c5:7f:32:6a:e5:e3:ca:b0:14:c1:86:b6:f8:49:31:46: b7:eb:83:76:6d:6b:d8:17:75:07:5e:4d:90:79:45:c5:03:81: 37:27:91:89:02:ee:ac:f0:47:89:7d:c5:15:a4:38:9e:3b:93: 25:17:e3:35:15:1f:b3:dc:c0:fe:ce:ca:0a:28:6a:69:53:e6: 2f:52:86:1a:9b:87:0d:02:24:e9:09:9b:a9:31:98:d5:87:fe: 30:17:3e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU7p5YRaVwHOSWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTQyNDgxYjQtMjEwMC00YzI0LTkxOGEtYTU4MDg2MzM4Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlVyNuz4Wvp4lHwtWqjoL7We+Ixyh/uvRQ8R 2pwMETCil5uMFgS4Htf38DqaXosk8AtgYmDTDkjTEtrIWOnncEHPD7xVyuo2LPBP 3n/UiFAcpi8+25xIUmGzl9CiHqcqlylKSdxleGTHr9WDv5d3tlNIdJteuyUAvuNc /6Hg/GjwM5AEzmiIw5+QXQK5DJXYZxjVEXpHam/QP5y3GHxoOLV+sMVc39SJWaLU 6Y2xn1xEnej3n3jO3nKGH0P9aF2KNxZf9f+AxQmv87Nqh6NFSLWe+b1ftijHPTTf /ITYQ2LVNNZ2aRD8WXXQa1MsTO0OawzubN7dlDmAi7xefsu+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHgLFzqQM9rJMwk8q84SHo218eRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYWFhMTQ0ZjItY2JjYi0z Y2NlLTkwMzYtMTM1MGQxODA4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFza5tMJjIluhmTbR8z5UgepZJPJN4BPlvpa40g72O/7v0BfZK9f/Wb bcdJvjEA3MyoNVymlIUxNKIA31JmnQYYuyv7G7VQfSsr4F6lTA4IYdQQuMY5NtOW +3egUpgkhLvlqnpPGLvoU3bPw+HSi0I7+jsN1GCRU81l6mdeAoqb6SOuJv7WuaWM raSRGVjoBuWN7LbgKb7GVAVyf5IkT/LxJk9exX8yauXjyrAUwYa2+EkxRrfrg3Zt a9gXdQdeTZB5RcUDgTcnkYkC7qzwR4l9xRWkOJ47kyUX4zUVH7PcwP7OygooamlT 5i9Shhqbhw0CJOkJm6kxmNWH/jAXPhk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:40 2025 by rpki-client