$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa File: ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa (raw, json) Hash identifier: x7WbfrN4WrPFHA5QnYok12abxH+k8HXU+Thv+SEvtC4= Subject key identifier: 65:AD:58:86:4C:FE:33:2C:33:28:98:61:0F:3B:F5:66:54:A7:1F:48 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B1AD17527F5E228066D95D000 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 137922 IP address blocks: 136.228.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:75:27:f5:e2:28:06:6d:95:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3453e940-000e-43ec-a5a4-2486971c9947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:ed:4b:a8:e9:47:bc:05:46:70:b4:5a:ab: b1:3a:15:af:fa:8d:63:67:aa:7e:39:cf:ec:a2:5b: 79:0f:0c:a1:46:79:96:e6:26:a0:03:21:e1:fc:78: 14:2c:0a:31:ba:91:4d:c2:10:ce:6b:b1:e0:b9:0c: bc:22:96:fc:4f:ad:45:c4:12:ee:40:3c:f4:c2:08: 20:8e:bb:bd:69:0a:e9:15:be:f0:18:96:d4:68:2c: b0:77:0e:04:fe:08:02:d8:d3:de:a8:f1:ab:c9:3e: 84:bd:d5:38:7b:d6:b0:59:ca:ee:b0:a3:8f:fb:4b: 22:82:83:5b:e2:09:39:5e:e7:83:90:b8:6b:b6:05: 6e:66:b1:e7:a6:d7:b1:bd:43:63:1c:3b:7b:19:24: 70:71:77:4c:3d:77:6d:37:b8:7b:66:2a:63:19:5f: a6:e9:7b:bd:aa:4a:4d:21:b9:65:22:82:08:cc:e6: f8:bb:1c:97:d2:64:b3:92:1c:65:e3:0f:e8:07:3a: 09:2f:a6:57:91:5b:cc:a2:dd:40:35:c9:94:ef:49: 67:90:46:a1:f1:dd:0e:ac:48:c8:61:93:58:bc:91: ac:99:9c:1e:a8:6d:77:91:2b:04:5b:92:f0:a4:48: 08:96:9b:b3:f7:3f:9c:b2:3a:bc:f8:68:3c:15:2b: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:58:86:4C:FE:33:2C:33:28:98:61:0F:3B:F5:66:54:A7:1F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:83:ca:f4:91:6f:f7:78:b5:c7:22:f1:9a:df:0f:7f:b9:32: 6b:18:99:01:7a:04:eb:1d:39:05:a1:aa:cb:bc:27:39:b6:e5: f6:dd:e3:c7:24:58:e6:5e:81:d8:a9:1f:f6:1d:26:28:cd:a7: 28:7d:56:df:73:29:f3:e1:0a:32:2e:c5:80:ba:b5:a6:3a:54: c0:d6:94:52:87:ac:20:18:fa:45:ef:dd:c0:d6:fd:b4:f9:6a: d2:08:25:9f:b1:1e:c7:8c:a1:f5:6c:7f:f2:bb:6c:ca:32:96: 37:26:6b:26:94:aa:05:6c:8b:77:79:1b:56:e8:cd:78:32:15: 88:70:e1:e9:10:3b:b6:6e:f5:e2:92:03:85:68:0c:40:11:df: 9f:f7:35:2c:97:eb:cc:a7:7c:39:e0:19:59:4f:de:67:03:02: 99:7d:1b:19:ac:7b:ad:b2:59:39:cd:c1:0e:66:f3:83:35:3f: 60:ec:ac:9d:a6:2c:2e:0a:c7:87:ea:46:5a:be:89:61:ce:3e: 4f:da:b7:d9:e5:62:6c:e1:5f:6f:9c:c4:be:5f:bb:e3:b5:c7: 20:d5:82:df:a7:e2:3a:e6:64:32:7f:53:8f:15:03:eb:00:d4: 7b:cb:5a:33:72:11:b3:d7:ee:30:e1:f5:25:d2:ba:11:0b:d8: ae:c8:4f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XUn9eIoBm2V0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MzQ1M2U5NDAtMDAwZS00M2VjLWE1YTQtMjQ4Njk3MWM5OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfHtS6jpR7wFRnC0WquxOhWv+o1jZ6p+Oc/s olt5DwyhRnmW5iagAyHh/HgULAoxupFNwhDOa7HguQy8Ipb8T61FxBLuQDz0wggg jru9aQrpFb7wGJbUaCywdw4E/ggC2NPeqPGryT6EvdU4e9awWcrusKOP+0sigoNb 4gk5XueDkLhrtgVuZrHnptexvUNjHDt7GSRwcXdMPXdtN7h7ZipjGV+m6Xu9qkpN IbllIoIIzOb4uxyX0mSzkhxl4w/oBzoJL6ZXkVvMot1ANcmU70lnkEah8d0OrEjI YZNYvJGsmZweqG13kSsEW5LwpEgIlpuz9z+csjq8+Gg8FSuAEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWtWIZM/jMsMyiYYQ879WZUpx9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2NhYjQwNWItNThjMy0z YTVlLWFmODctNWE5ZGI3NGQwYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+DyvSRb/d4tcci8ZrfD3+5MmsYmQF6BOsdOQWhqsu8Jzm25fbd48ck WOZegdipH/YdJijNpyh9Vt9zKfPhCjIuxYC6taY6VMDWlFKHrCAY+kXv3cDW/bT5 atIIJZ+xHseMofVsf/K7bMoyljcmayaUqgVsi3d5G1bozXgyFYhw4ekQO7Zu9eKS A4VoDEAR35/3NSyX68ynfDngGVlP3mcDApl9Gxmse62yWTnNwQ5m84M1P2DsrJ2m LC4Kx4fqRlq+iWHOPk/at9nlYmzhX2+cxL5fu+O1xyDVgt+n4jrmZDJ/U48VA+sA 1HvLWjNyEbPX7jDh9SXSuhEL2K7IT+A= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:06 2025 by rpki-client