$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa File: e8611f34-0183-3bbb-8727-d8dac426f2a2.roa (raw, json) Hash identifier: sMZnCNvb2zL8KGF4bfJMKt7l3XbkHl+hwOjj/n/42v8= Subject key identifier: 73:BA:74:06:9C:C9:55:B9:18:D3:9D:3A:C1:6A:81:B8:0D:62:6F:E8 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B21CC203EC3690DE8CE05275C Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 396253 IP address blocks: 136.228.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:20:3e:c3:69:0d:e8:ce:05:27:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=1d37a15a-1800-4c64-ac1d-ecc55a49b084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:4c:83:cb:83:a9:9f:b3:82:96:ad:f3:bb: 4d:4b:93:f7:a7:ba:7d:11:a1:e5:73:7f:3f:1e:20: e9:8b:12:2f:75:e4:df:cf:20:24:1b:1a:e1:ab:0d: ec:98:66:71:f0:01:d1:69:f1:31:87:b5:c6:98:c7: c9:e5:ab:de:95:46:9b:c9:cb:00:bc:40:5f:83:d1: f9:a1:9f:1f:a5:81:3d:0b:3b:e3:5e:67:11:6d:89: 39:a4:d8:1f:c6:8e:e9:69:a3:19:45:69:f1:09:dc: bb:aa:7e:49:56:60:57:7b:be:69:86:db:5d:35:3b: 07:d0:12:dd:e5:19:14:6b:6a:c3:78:47:ee:02:c9: 59:dd:d8:f1:d2:c2:5c:fd:aa:85:67:18:4c:7a:f3: ca:82:65:10:ce:17:e1:f5:a6:5f:87:ba:e1:82:ce: 6c:ae:12:c8:9e:b1:d1:a9:66:53:4b:a6:4f:38:b4: c1:66:7b:1a:17:2a:c0:2c:04:bf:85:60:ab:24:c7: 75:ff:2f:10:6c:6c:3b:32:2c:7a:fa:ee:ae:4b:b7: a8:06:b0:f5:25:77:4b:cf:c5:42:5a:90:d7:24:22: 7a:fc:86:9a:88:e9:96:6e:e3:77:99:17:d7:ed:8c: e8:4b:de:6c:32:42:e2:35:2d:09:c1:7f:79:9a:02: 5d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BA:74:06:9C:C9:55:B9:18:D3:9D:3A:C1:6A:81:B8:0D:62:6F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:86:28:4e:ed:d1:cb:c9:76:17:9b:ab:54:03:7b:86:c7:b2: 92:14:2c:10:ab:2f:57:e4:d8:c2:4b:7b:a7:6b:5b:44:71:41: 7b:6d:3e:28:25:d2:84:f1:8c:cf:a0:29:4f:9b:a3:69:bf:1e: 4c:34:04:bd:be:22:9c:12:1e:3b:6f:5f:55:2b:a7:da:c9:91: 59:df:21:c7:9c:f4:8d:41:6d:ad:81:ef:45:ad:01:99:73:f3: a5:b8:b0:c1:c6:e5:83:c0:f6:18:c6:3e:ad:22:92:dc:b0:b3: e0:f2:f1:1e:1d:68:71:b5:e5:89:c6:54:2c:4a:37:e3:2b:fa: 32:50:58:3d:aa:1f:6a:f4:f2:1a:62:6f:d0:cc:1d:4f:92:f7: 9b:12:c9:a1:15:74:e3:06:15:7a:7e:f1:ca:64:99:b9:47:ea: 2b:7a:de:bf:90:04:d2:a6:19:55:09:c2:da:42:41:f8:24:4f: 1c:99:d5:a1:ea:a1:2b:ee:a8:49:ce:31:2e:55:2a:2e:a1:0c: 6f:8d:cf:09:a5:44:b6:33:b6:aa:68:38:52:ba:fe:df:8a:1e: 9c:40:93:52:1c:9f:84:e3:6f:c5:cc:1f:41:c7:76:dc:9f:2b: 23:93:cb:73:f9:76:0c:df:03:9a:77:7b:2d:d0:13:5e:be:e1: 87:ec:91:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCA+w2kN6M4FJ1wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MWQzN2ExNWEtMTgwMC00YzY0LWFjMWQtZWNjNTVhNDliMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooNMg8uDqZ+zgpat87tNS5P3p7p9EaHlc38/ HiDpixIvdeTfzyAkGxrhqw3smGZx8AHRafExh7XGmMfJ5avelUabycsAvEBfg9H5 oZ8fpYE9CzvjXmcRbYk5pNgfxo7paaMZRWnxCdy7qn5JVmBXe75phttdNTsH0BLd 5RkUa2rDeEfuAslZ3djx0sJc/aqFZxhMevPKgmUQzhfh9aZfh7rhgs5srhLInrHR qWZTS6ZPOLTBZnsaFyrALAS/hWCrJMd1/y8QbGw7Mix6+u6uS7eoBrD1JXdLz8VC WpDXJCJ6/IaaiOmWbuN3mRfX7YzoS95sMkLiNS0JwX95mgJd6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO6dAacyVW5GNOdOsFqgbgNYm/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTg2MTFmMzQtMDE4My0z YmJiLTg3MjctZDhkYWM0MjZmMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2GKE7t0cvJdhebq1QDe4bHspIULBCrL1fk2MJLe6drW0RxQXttPigl 0oTxjM+gKU+bo2m/Hkw0BL2+IpwSHjtvX1Urp9rJkVnfIcec9I1Bba2B70WtAZlz 86W4sMHG5YPA9hjGPq0iktyws+Dy8R4daHG15YnGVCxKN+Mr+jJQWD2qH2r08hpi b9DMHU+S95sSyaEVdOMGFXp+8cpkmblH6it63r+QBNKmGVUJwtpCQfgkTxyZ1aHq oSvuqEnOMS5VKi6hDG+NzwmlRLYztqpoOFK6/t+KHpxAk1Icn4Tjb8XMH0HHdtyf KyOTy3P5dgzfA5p3ey3QE16+4YfskYw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:06 2025 by rpki-client