$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e302a36d-f6c1-340c-8259-e8725ebf1149.roa File: e302a36d-f6c1-340c-8259-e8725ebf1149.roa (raw, json) Hash identifier: K0EGDzMt5TepcHs3gA+xnl09lkys6X7uUJD/8CI/3PQ= Subject key identifier: A3:31:83:88:4E:D1:19:96:5D:51:3F:AC:71:B9:D6:F6:23:91:64:16 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B13D6ACC1E433FD4C07CEC500 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e302a36d-f6c1-340c-8259-e8725ebf1149.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 137922 IP address blocks: 136.228.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ac:c1:e4:33:fd:4c:07:ce:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e2c28652-a0c8-4e16-9e7f-794ca9ae6ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:43:65:6e:1c:0b:a9:ee:d8:31:be:8f:cd: b5:2a:83:ab:c4:2e:a4:fc:f8:b5:74:b2:8c:41:b4: 72:bc:68:3c:34:8b:37:3f:a8:95:4f:a6:f6:05:4f: f1:8e:01:2c:ad:62:50:f5:7b:3a:5f:c5:87:47:38: 74:9c:1f:b3:18:88:3a:ec:b0:ed:83:c9:ba:d2:f8: ec:ca:53:21:87:30:38:d4:e9:2e:01:18:71:2d:3c: a3:03:71:08:8e:d2:fb:4c:8b:23:a6:9d:53:22:53: ac:be:9c:ee:75:b8:15:3f:fb:7c:c2:9a:c5:b9:f0: 8c:f4:67:d9:8f:4f:62:d7:a3:c9:16:4e:48:9d:bc: 8f:d6:ab:f3:d6:be:67:fb:9e:96:da:d1:5e:fe:42: 7d:9f:92:fd:7e:c7:b1:07:df:ae:f8:0d:f0:63:c9: 9f:ee:0d:d5:45:7c:06:5d:be:bb:a3:00:69:fc:81: 18:ed:9b:3a:ba:9a:10:a7:75:9f:40:0a:43:2a:a3: 3b:65:9f:45:3e:cb:51:e9:93:c9:66:9c:f3:90:70: b3:39:04:2d:38:c0:48:9d:cf:2d:83:a2:06:d7:13: 66:1f:07:49:2c:49:cd:d3:75:67:cd:00:54:f5:be: 21:b6:fb:bc:ce:3b:02:8a:2e:16:b4:e1:5b:15:9e: 52:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:31:83:88:4E:D1:19:96:5D:51:3F:AC:71:B9:D6:F6:23:91:64:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e302a36d-f6c1-340c-8259-e8725ebf1149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:46:f8:7c:b7:60:23:a9:d0:52:fd:11:9a:d3:8d:a7:bd:73: 17:e3:d5:19:06:0d:7b:0d:c0:2f:f3:ed:81:c4:fc:b9:37:fc: 76:b2:24:7e:24:bb:17:3d:87:95:d0:6d:02:66:4a:bd:ad:f2: 98:6c:bc:09:98:e3:51:14:c3:3b:95:a9:b4:36:77:d7:83:b8: 24:04:90:c7:2e:f6:5d:6c:86:49:7b:0e:a9:9c:41:7d:d7:fa: d0:ce:f0:d6:0a:d6:d8:0a:3a:32:d4:ef:93:d6:14:68:41:cf: a3:85:e5:3b:2a:da:24:72:90:8e:c4:da:23:55:9b:1b:07:01: 36:82:ff:9a:27:58:cd:2f:12:ad:09:f8:13:36:5c:d4:2f:6a: 85:c9:73:cc:a4:ae:61:a4:4a:26:1d:2a:1c:18:46:b0:56:f2: ef:74:20:3b:43:9f:0a:c4:c7:c8:45:8f:f5:38:59:29:f5:f5: e0:28:6c:76:c4:29:a5:9e:81:d3:91:86:4b:8d:ca:ab:ee:98: 05:b1:a0:d3:3a:25:d2:ee:95:3f:1f:fa:18:58:c7:db:eb:b7: 6e:1e:cb:0d:4c:76:97:51:eb:15:9a:ba:46:ed:cf:41:ee:27: fc:ce:76:26:1b:a2:ad:ba:70:70:44:62:c2:99:8f:03:05:d0: b4:2a:cb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qzB5DP9TAfOxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTJjMjg2NTItYTBjOC00ZTE2LTllN2YtNzk0Y2E5YWU2YWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nRDZW4cC6nu2DG+j821KoOrxC6k/Pi1dLKM QbRyvGg8NIs3P6iVT6b2BU/xjgEsrWJQ9Xs6X8WHRzh0nB+zGIg67LDtg8m60vjs ylMhhzA41OkuARhxLTyjA3EIjtL7TIsjpp1TIlOsvpzudbgVP/t8wprFufCM9GfZ j09i16PJFk5InbyP1qvz1r5n+56W2tFe/kJ9n5L9fsexB9+u+A3wY8mf7g3VRXwG Xb67owBp/IEY7Zs6upoQp3WfQApDKqM7ZZ9FPstR6ZPJZpzzkHCzOQQtOMBInc8t g6IG1xNmHwdJLEnN03VnzQBU9b4htvu8zjsCii4WtOFbFZ5SoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMxg4hO0RmWXVE/rHG51vYjkWQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTMwMmEzNmQtZjZjMS0z NDBjLTgyNTktZTg3MjVlYmYxMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1G+Hy3YCOp0FL9EZrTjae9cxfj1RkGDXsNwC/z7YHE/Lk3/HayJH4k uxc9h5XQbQJmSr2t8phsvAmY41EUwzuVqbQ2d9eDuCQEkMcu9l1shkl7DqmcQX3X +tDO8NYK1tgKOjLU75PWFGhBz6OF5Tsq2iRykI7E2iNVmxsHATaC/5onWM0vEq0J +BM2XNQvaoXJc8ykrmGkSiYdKhwYRrBW8u90IDtDnwrEx8hFj/U4WSn19eAobHbE KaWegdORhkuNyqvumAWxoNM6JdLulT8f+hhYx9vrt24eyw1MdpdR6xWaukbtz0Hu J/zOdiYboq26cHBEYsKZjwMF0LQqyw4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:47:01 2025 by rpki-client