$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa File: ca8043ea-396c-309b-a025-9ec7cd6f267f.roa (raw, json) Hash identifier: 4T4N29gT//vpPxX43eWxvtSLDvSdD/1cQZSf3LTBINo= Subject key identifier: 8F:16:E9:84:8B:FD:40:F0:FF:4C:38:35:84:B2:F6:EB:B0:29:46:3D Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B110BFF456A2E7A6E8C075900 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 137922 IP address blocks: 136.228.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:ff:45:6a:2e:7a:6e:8c:07:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=ecc214ef-ad4f-48e2-96d8-50ff0b8b37e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b5:21:3d:9d:c4:f8:12:39:e1:a0:0b:c5:05: 3c:d3:58:2c:a7:6d:53:cb:90:1d:5c:c0:6d:86:1a: 34:cb:93:5d:c3:4e:0a:28:79:34:1b:81:de:c3:5f: 8b:ab:b6:cf:6e:18:7b:c2:86:21:5f:79:d3:79:41: b4:4e:1a:98:af:59:d6:b9:4c:1b:aa:ba:13:77:e4: c1:e8:49:e1:cd:72:1c:0e:0c:b8:f2:fb:de:6c:b1: 64:87:95:8a:e6:48:ea:a0:6a:fc:4b:3f:9b:af:91: 89:7a:b5:04:71:45:c4:4c:d2:3a:e5:dc:33:d4:2b: bd:24:ae:56:ca:2b:87:ac:b6:cc:01:e4:1f:7f:36: c6:26:f6:96:b8:bf:de:5f:9d:77:67:13:9c:19:7d: d0:08:7a:eb:1b:01:46:d5:8c:29:89:97:05:a5:73: 67:6f:ad:2e:22:a8:6f:c7:9b:4c:d2:32:02:c7:c9: 02:8b:5b:7e:22:88:e5:e6:e9:1b:01:65:f4:10:b8: c5:ea:99:25:bb:b7:71:e2:7c:81:ed:7d:9a:ae:ba: 07:23:7b:1b:7b:37:24:78:85:86:98:59:09:1a:4e: 8d:55:57:a7:12:b6:cf:d6:23:69:75:af:ae:47:06: be:e8:43:55:1a:54:f6:ba:1c:0d:20:00:e4:1f:53: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:16:E9:84:8B:FD:40:F0:FF:4C:38:35:84:B2:F6:EB:B0:29:46:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:de:1a:05:01:9d:8c:2b:98:06:68:fc:24:47:f0:b6:21:72: 98:05:23:5e:3e:1f:e9:ff:a0:fe:84:5b:19:56:2a:31:5d:d7: d3:e2:ab:1e:a8:f7:15:4d:e0:ee:1e:40:89:76:3f:62:6d:48: c1:76:79:bf:ab:bc:72:a8:17:66:d9:97:63:5d:01:d4:7d:82: d3:1a:dd:e6:39:17:f3:9d:46:6d:2b:3f:f7:92:4a:90:60:09: 59:f8:62:f1:97:ad:c0:30:64:15:bb:99:8a:1e:51:36:f5:ee: 5d:bd:3f:06:21:25:5e:36:96:5a:a0:6c:19:c0:ae:2d:50:a9: 58:6d:22:24:5f:72:51:7f:81:20:9d:63:b1:9c:49:af:80:5a: 83:bd:cd:99:c6:38:aa:bf:d5:a9:a7:83:42:ea:77:2d:cf:d4: 94:15:ca:47:70:55:9b:c1:b9:d4:39:15:dd:67:49:2b:71:f3: 17:13:d3:3e:cf:aa:19:06:c2:4d:23:a6:f2:82:2d:d5:31:e8: f6:91:d0:7a:76:44:27:af:6e:51:e7:ef:83:ae:91:bf:f5:1d: bd:16:5c:94:8b:d7:52:93:b9:db:e6:c2:f7:4d:73:df:9e:aa: 83:c5:14:20:4a:6a:77:cf:8c:87:d7:4b:9b:23:85:c3:09:c8: a8:b6:ec:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/9Fai56bowHWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWNjMjE0ZWYtYWQ0Zi00OGUyLTk2ZDgtNTBmZjBiOGIzN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbUhPZ3E+BI54aALxQU801gsp21Ty5AdXMBt hho0y5Ndw04KKHk0G4Hew1+Lq7bPbhh7woYhX3nTeUG0ThqYr1nWuUwbqroTd+TB 6EnhzXIcDgy48vvebLFkh5WK5kjqoGr8Sz+br5GJerUEcUXETNI65dwz1Cu9JK5W yiuHrLbMAeQffzbGJvaWuL/eX513ZxOcGX3QCHrrGwFG1YwpiZcFpXNnb60uIqhv x5tM0jICx8kCi1t+Iojl5ukbAWX0ELjF6pklu7dx4nyB7X2arroHI3sbezckeIWG mFkJGk6NVVenErbP1iNpda+uRwa+6ENVGlT2uhwNIADkH1OriwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8W6YSL/UDw/0w4NYSy9uuwKUY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2E4MDQzZWEtMzk2Yy0z MDliLWEwMjUtOWVjN2NkNmYyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3eGgUBnYwrmAZo/CRH8LYhcpgFI14+H+n/oP6EWxlWKjFd19Piqx6o 9xVN4O4eQIl2P2JtSMF2eb+rvHKoF2bZl2NdAdR9gtMa3eY5F/OdRm0rP/eSSpBg CVn4YvGXrcAwZBW7mYoeUTb17l29PwYhJV42llqgbBnAri1QqVhtIiRfclF/gSCd Y7GcSa+AWoO9zZnGOKq/1amng0Lqdy3P1JQVykdwVZvBudQ5Fd1nSStx8xcT0z7P qhkGwk0jpvKCLdUx6PaR0Hp2RCevblHn74Oukb/1Hb0WXJSL11KTudvmwvdNc9+e qoPFFCBKanfPjIfXS5sjhcMJyKi27EI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:49 2025 by rpki-client