$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa File: c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa (raw, json) Hash identifier: d4QZfGCMzoB4BXuVrZvkvlgjOUI6UwF9VDK7HINrFyM= Subject key identifier: B5:85:14:37:D1:4D:12:38:A7:B3:B4:4D:A8:43:DD:87:9B:72:15:75 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B2CF6E18D75315B560678F780 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 137922 IP address blocks: 136.228.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e1:8d:75:31:5b:56:06:78:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=b3179a8c-7cc6-4489-a55a-d627b3d9331b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:5a:34:b6:b8:c5:d8:ab:ad:9e:b5:9b:fc: 30:10:5a:1c:66:3f:30:f8:ab:ae:77:3f:66:5b:2f: 77:27:c4:a2:1c:8b:19:b7:c2:f7:67:1c:f8:af:cf: a9:40:5c:38:f3:7d:c6:fb:36:f6:3c:0c:bc:da:1d: da:a7:9f:d3:33:5c:ce:5b:b5:43:56:54:59:9f:05: fd:2d:50:97:f2:bf:3b:3e:d0:d8:62:78:06:84:b8: 43:07:53:e5:5f:a3:87:c5:5b:5d:8d:f0:86:9b:ad: ff:23:a8:15:dc:17:7c:ea:ee:80:0a:2e:b5:ed:ba: 29:e7:c4:57:89:17:37:1b:e6:ef:cf:45:13:25:4e: 1b:36:87:68:3a:fa:d8:38:4c:f9:d0:95:80:f5:c9: 75:e7:4d:9c:71:6f:5b:94:01:b9:35:d1:44:aa:b3: ed:88:84:29:27:20:b0:e3:04:24:f8:9b:e0:44:a3: 15:fb:34:70:58:02:0c:fd:a5:bc:e7:8d:c6:3b:b7: 50:e0:9d:58:5d:a9:70:ac:d3:25:5f:40:dd:d5:8b: a7:f6:85:03:3a:fe:13:5b:e1:62:ec:a8:84:11:72: 0e:fd:a3:08:bf:a4:29:7c:54:67:6a:56:6c:45:8c: 05:c2:e6:2d:15:af:2f:26:09:db:2a:b1:a7:eb:f0: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:85:14:37:D1:4D:12:38:A7:B3:B4:4D:A8:43:DD:87:9B:72:15:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9f:04:01:c7:16:df:cb:fa:ef:71:75:c2:87:c3:cc:28:48: 3a:86:a7:86:c2:cd:32:23:9b:0d:71:73:42:04:59:dc:45:39: 4d:ca:8b:8f:2d:f3:0d:30:e4:75:f7:37:ae:8f:4e:a0:4b:3d: ca:2b:e7:35:d7:c3:92:1e:3f:30:d0:ec:95:4a:a9:c8:65:e1: 87:87:59:27:fa:9c:57:53:fa:78:1f:51:61:be:f3:06:fb:5b: ee:ca:99:f1:17:bf:12:6b:13:34:76:ee:12:13:75:5f:05:1b: 6e:c7:1a:1d:1e:1d:72:27:58:2f:55:42:3b:b7:16:db:79:a7: ef:ca:a6:82:ce:c3:5e:f1:dc:75:c4:93:40:5f:75:bd:3b:18: 1f:31:6b:83:56:5f:54:3c:6f:e5:fe:14:fc:84:4b:53:4f:1e: 02:32:43:0b:db:93:fe:fe:eb:ae:0a:38:44:79:01:d9:82:15: 04:c5:4f:02:f0:b2:2c:84:b5:73:ed:89:ac:c6:17:2b:41:e0: 22:c7:a4:bb:bf:e3:1d:7b:5f:e7:a2:52:64:79:51:cf:c5:fa: e2:bd:16:2d:83:6e:26:7e:94:d0:5c:e7:07:ee:31:c6:df:dd: ab:b3:9a:cb:c2:60:b0:0f:5d:44:61:5b:b4:f9:82:a6:24:b1: c1:fa:4f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uGNdTFbVgZ494AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YjMxNzlhOGMtN2NjNi00NDg5LWE1NWEtZDYyN2IzZDkzMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNNaNLa4xdirrZ61m/wwEFocZj8w+Kuudz9m Wy93J8SiHIsZt8L3Zxz4r8+pQFw4833G+zb2PAy82h3ap5/TM1zOW7VDVlRZnwX9 LVCX8r87PtDYYngGhLhDB1PlX6OHxVtdjfCGm63/I6gV3Bd86u6ACi617bop58RX iRc3G+bvz0UTJU4bNodoOvrYOEz50JWA9cl1502ccW9blAG5NdFEqrPtiIQpJyCw 4wQk+JvgRKMV+zRwWAIM/aW8543GO7dQ4J1YXalwrNMlX0Dd1Yun9oUDOv4TW+Fi 7KiEEXIO/aMIv6QpfFRnalZsRYwFwuYtFa8vJgnbKrGn6/B5hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWFFDfRTRI4p7O0TahD3YebchV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYzg1M2FhZWYtZGRlYi0z MTY3LTk0YmYtMDJiMmQyZDY2M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmfBAHHFt/L+u9xdcKHw8woSDqGp4bCzTIjmw1xc0IEWdxFOU3Ki48t 8w0w5HX3N66PTqBLPcor5zXXw5IePzDQ7JVKqchl4YeHWSf6nFdT+ngfUWG+8wb7 W+7KmfEXvxJrEzR27hITdV8FG27HGh0eHXInWC9VQju3Ftt5p+/KpoLOw17x3HXE k0Bfdb07GB8xa4NWX1Q8b+X+FPyES1NPHgIyQwvbk/7+664KOER5AdmCFQTFTwLw siyEtXPtiazGFytB4CLHpLu/4x17X+eiUmR5Uc/F+uK9Fi2DbiZ+lNBc5wfuMcbf 3auzmsvCYLAPXURhW7T5gqYkscH6T5k= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:46 2025 by rpki-client