$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa File: c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa (raw, json) Hash identifier: 2UZdis/kon9AOeDbnkiPs+9T35OBPfdMkcBmTi8a9t8= Subject key identifier: 08:E8:D7:C3:90:EC:4F:1D:BE:0D:89:31:05:19:E3:E0:7A:47:7F:AA Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A4C3B124A206C7360EEF45680 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 137922 IP address blocks: 136.228.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:12:4a:20:6c:73:60:ee:f4:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=01ffcb2d-3bdd-4f38-a04e-c74c5c8602cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:59:10:c7:5d:f7:0c:14:bd:0f:12:e1:3c: 3c:c1:de:53:0b:f6:b9:1e:14:fc:35:a2:6c:52:b8: 38:3e:8f:4d:58:f1:0c:0d:77:db:e5:94:68:27:e1: 35:c3:f5:d2:9e:76:0b:b7:25:a2:c7:7b:00:30:46: 29:a4:f4:91:be:fe:97:07:f4:d1:20:15:9f:30:2c: 63:6e:b1:f5:02:80:dc:38:47:1b:e0:47:b5:ed:3c: f4:e0:b3:45:2e:d9:93:7c:23:49:2c:71:c6:12:45: f2:bd:4e:1f:3a:9a:67:4c:72:da:01:24:65:a4:48: 58:cb:ea:c1:71:ff:37:ad:d5:a8:80:66:0c:09:b3: c4:af:5e:5f:e3:db:31:e2:b4:ef:49:9b:8f:29:84: c1:41:ab:e8:1f:2e:62:1c:a4:bf:bf:0e:f4:29:eb: 32:04:2d:6b:39:1b:c0:84:d8:19:43:b3:f0:cb:82: 54:b5:96:2a:35:6c:bc:91:38:14:57:99:7f:3d:27: 49:1f:32:a1:35:a7:58:3f:d3:77:b8:86:c9:da:bc: c6:62:f0:9a:22:7b:48:82:7c:5b:23:06:68:44:bd: d9:95:d1:5f:8c:9f:eb:a6:e7:87:2f:41:51:8a:c2: f6:73:f4:32:c4:39:12:78:0e:8d:29:b7:7e:3f:3e: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E8:D7:C3:90:EC:4F:1D:BE:0D:89:31:05:19:E3:E0:7A:47:7F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5b:e6:35:95:a9:e6:a3:2e:9f:05:80:fd:a4:71:d3:e0:1a: 30:ba:94:22:9d:e6:c2:30:42:62:38:d8:06:68:cc:e4:03:c2: 56:08:18:9f:49:ea:a9:7f:d2:14:84:4c:49:cc:b4:3d:6a:e9: aa:55:1f:fa:3d:4e:90:37:28:00:ab:df:e2:a5:83:f9:d3:9e: 66:15:89:72:b1:79:25:90:3f:b2:b1:00:36:f4:76:38:04:2b: 1a:72:6e:c9:06:a8:38:f3:0a:56:e5:7a:4d:77:65:d1:09:92: 2f:56:d1:58:89:04:38:51:88:09:15:7a:3f:1a:6e:94:5f:98: bb:97:99:4c:2e:01:8f:72:bc:f8:1d:66:80:46:0c:3b:1f:ef: 68:27:66:76:95:ea:20:03:04:0c:be:06:c5:f3:ea:82:1b:0a: b9:4f:80:45:79:53:20:6a:ac:ea:a0:47:35:36:64:6f:38:50: 00:ce:c9:4a:3e:14:fd:f7:7e:eb:82:2e:d5:7f:0f:01:60:a2: b3:23:c4:aa:ce:26:31:fe:81:24:3e:04:f4:84:88:88:7d:b7: 8e:e2:b9:d1:72:2c:85:49:cc:ea:9e:d1:dd:a6:fc:8c:c7:10: 51:b9:ae:32:d2:7a:3b:0e:b3:13:69:01:bb:11:60:75:a8:c9: 87:d9:cc:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxJKIGxzYO70VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MDFmZmNiMmQtM2JkZC00ZjM4LWEwNGUtYzc0YzVjODYwMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx1ZEMdd9wwUvQ8S4Tw8wd5TC/a5HhT8NaJs Urg4Po9NWPEMDXfb5ZRoJ+E1w/XSnnYLtyWix3sAMEYppPSRvv6XB/TRIBWfMCxj brH1AoDcOEcb4Ee17Tz04LNFLtmTfCNJLHHGEkXyvU4fOppnTHLaASRlpEhYy+rB cf83rdWogGYMCbPEr15f49sx4rTvSZuPKYTBQavoHy5iHKS/vw70KesyBC1rORvA hNgZQ7Pwy4JUtZYqNWy8kTgUV5l/PSdJHzKhNadYP9N3uIbJ2rzGYvCaIntIgnxb IwZoRL3ZldFfjJ/rpueHL0FRisL2c/QyxDkSeA6NKbd+Pz51RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjo18OQ7E8dvg2JMQUZ4+B6R3+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYzg1M2FhZWYtZGRlYi0z MTY3LTk0YmYtMDJiMmQyZDY2M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVb5jWVqeajLp8FgP2kcdPgGjC6lCKd5sIwQmI42AZozOQDwlYIGJ9J 6ql/0hSETEnMtD1q6apVH/o9TpA3KACr3+Klg/nTnmYViXKxeSWQP7KxADb0djgE KxpybskGqDjzClblek13ZdEJki9W0ViJBDhRiAkVej8abpRfmLuXmUwuAY9yvPgd ZoBGDDsf72gnZnaV6iADBAy+BsXz6oIbCrlPgEV5UyBqrOqgRzU2ZG84UADOyUo+ FP33fuuCLtV/DwFgorMjxKrOJjH+gSQ+BPSEiIh9t47iudFyLIVJzOqe0d2m/IzH EFG5rjLSejsOsxNpAbsRYHWoyYfZzBI= -----END CERTIFICATE-----Generated at Sun Jun 29 17:03:51 2025 by rpki-client