$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa File: b5345dc5-a721-346f-a285-62853822bb1b.roa (raw, json) Hash identifier: Xk9mv4bJXRgIcL8/MysNd7qiHfdo/89L6Mti7HcX4e0= Subject key identifier: F9:2E:5C:E4:49:EF:C4:4D:8B:C5:64:55:B6:96:6B:35:4C:BA:3E:80 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285849C0A4CDDE28AF8AD67F7AFC80 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 137922 IP address blocks: 136.228.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:cd:de:28:af:8a:d6:7f:7a:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=51c3a951-fc88-4654-9715-bb730d1b8884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:ee:3c:40:32:bd:be:3a:58:f2:9b:6f:73: 37:b8:e7:3d:c7:c6:e2:db:18:81:11:ec:b9:b0:0a: 26:05:b7:28:b8:de:78:50:37:ab:17:38:7d:39:aa: 44:7b:3e:05:1d:10:8e:a3:39:82:a7:9e:68:4a:b4: 6a:c3:e4:29:ac:b5:2e:1a:15:49:4e:10:1c:9d:f2: cb:4d:df:cd:30:8f:a5:88:8b:59:1e:86:27:ac:df: cb:e1:66:3e:cf:eb:e2:c8:fd:84:e5:e1:64:ce:78: 9b:8c:bb:f4:22:54:ce:5c:5d:52:4d:f6:7c:5d:8c: 53:f9:be:be:f1:86:74:17:64:6e:38:d4:25:4d:d1: b3:01:92:6a:1c:4a:8c:61:50:da:13:aa:0b:a6:b6: f0:14:e0:75:3c:bc:b7:ef:e3:01:a2:30:b6:9f:32: 2a:fe:e3:0e:ac:91:88:c4:d2:2a:a4:d4:83:53:78: dd:3f:21:43:81:4c:20:b8:3d:71:2b:42:4f:e3:cc: c3:4e:66:15:ef:16:02:a5:b3:4b:30:5a:90:2a:bb: e7:65:8c:5d:07:5b:55:22:b6:94:0f:f3:27:66:62: 75:51:05:86:04:77:e2:0f:ea:2f:a5:8b:ff:20:66: 93:49:90:49:16:a0:a0:33:12:24:9f:6a:0a:df:40: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2E:5C:E4:49:EF:C4:4D:8B:C5:64:55:B6:96:6B:35:4C:BA:3E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f5:02:8e:a2:ea:81:1f:c7:2f:26:4e:f5:6c:de:84:eb:19: b2:da:41:52:57:a5:84:8e:e3:15:86:46:6c:2c:17:c0:96:56: 53:21:89:89:ad:e8:43:df:0f:fe:69:39:3d:68:72:2e:54:b4: 29:f5:93:9e:fb:88:cf:76:df:7e:13:04:b0:dd:e9:d9:26:03: 71:85:4d:75:c8:13:24:f7:bd:fb:c2:13:a0:93:02:75:0b:f6: 50:c1:4b:3e:6e:35:43:b4:9d:f6:27:53:74:af:84:66:90:77: 39:31:83:8e:1b:ad:55:67:c4:3b:37:fe:41:53:9a:5f:e3:b6: 67:12:f4:0d:c6:ca:e5:da:aa:b9:cd:0e:35:ae:9d:13:8d:d6: bd:cc:4b:b6:7d:9a:72:af:c3:eb:31:f1:4f:ab:04:3a:5b:87: 26:e0:1d:d4:79:a4:68:42:40:0d:05:ee:1d:a9:7b:91:2a:fc: 30:cd:cf:3e:9d:1a:ea:11:ea:8c:c1:00:53:33:59:de:94:7a: 82:9c:85:01:0a:a2:a6:8c:a6:c0:2f:fa:d0:85:e0:04:57:c6: 95:c8:f5:a2:ab:28:8f:a6:99:7e:31:dd:a0:a9:5e:90:9d:e1: ad:e2:c1:79:8c:b5:ec:c8:a5:cf:79:9a:e4:ae:76:6f:b6:ba: 27:38:a1:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApM3eKK+K1n96/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NTFjM2E5NTEtZmM4OC00NjU0LTk3MTUtYmI3MzBkMWI4ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivTuPEAyvb46WPKbb3M3uOc9x8bi2xiBEey5 sAomBbcouN54UDerFzh9OapEez4FHRCOozmCp55oSrRqw+QprLUuGhVJThAcnfLL Td/NMI+liItZHoYnrN/L4WY+z+viyP2E5eFkznibjLv0IlTOXF1STfZ8XYxT+b6+ 8YZ0F2RuONQlTdGzAZJqHEqMYVDaE6oLprbwFOB1PLy37+MBojC2nzIq/uMOrJGI xNIqpNSDU3jdPyFDgUwguD1xK0JP48zDTmYV7xYCpbNLMFqQKrvnZYxdB1tVIraU D/MnZmJ1UQWGBHfiD+ovpYv/IGaTSZBJFqCgMxIkn2oK30DFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkuXORJ78RNi8VkVbaWazVMuj6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYjUzNDVkYzUtYTcyMS0z NDZmLWEyODUtNjI4NTM4MjJiYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOTmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr1Ao6i6oEfxy8mTvVs3oTrGbLaQVJXpYSO4xWGRmwsF8CWVlMhiYmt 6EPfD/5pOT1oci5UtCn1k577iM92334TBLDd6dkmA3GFTXXIEyT3vfvCE6CTAnUL 9lDBSz5uNUO0nfYnU3SvhGaQdzkxg44brVVnxDs3/kFTml/jtmcS9A3GyuXaqrnN DjWunRON1r3MS7Z9mnKvw+sx8U+rBDpbhybgHdR5pGhCQA0F7h2pe5Eq/DDNzz6d GuoR6ozBAFMzWd6UeoKchQEKoqaMpsAv+tCF4ARXxpXI9aKrKI+mmX4x3aCpXpCd 4a3iwXmMtezIpc95muSudm+2uic4oYI= -----END CERTIFICATE-----Generated at Fri May 9 13:47:47 2025 by rpki-client