$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa File: e8611f34-0183-3bbb-8727-d8dac426f2a2.roa (raw, json) Hash identifier: DvyrIbhBerCPLA9jdXqTyWzy0v6WY4NBFX2RwlcXFIA= Subject key identifier: 9A:F6:5B:9A:BC:15:C7:E5:94:95:CF:C0:67:17:EF:71:14:60:A8:54 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584961B993FFB0DAFA558AB9CC00 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396253 IP address blocks: 136.228.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:93:ff:b0:da:fa:55:8a:b9:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=152e55a6-a7a4-4c58-98a2-3b9803483da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:58:39:68:4f:e8:9b:2b:4a:61:66:73:58: c7:0e:51:6a:0b:d2:63:7d:86:4e:d2:da:0b:1d:27: 0d:ea:a8:59:02:51:ad:ef:2f:6b:a0:ce:2e:c4:9e: 6b:18:7a:7f:cc:09:38:e3:a3:fb:d1:25:e4:1d:19: b7:66:5e:a0:01:dd:84:c8:38:b0:9a:51:1a:b5:08: d7:8a:76:23:34:55:2c:7c:b2:d2:25:b6:c8:e2:34: 74:c5:a0:96:12:93:97:21:22:26:69:04:74:58:16: b4:e9:fd:91:69:37:fe:3c:22:ba:c4:ae:3b:5b:ae: 9f:38:8e:d3:e4:b8:c8:74:6d:fa:f4:80:fc:e5:ea: 65:85:63:f0:4f:16:74:e2:92:d5:0a:22:b1:e1:fe: e7:14:d3:09:d1:82:78:ba:f5:4d:7a:e2:bb:e5:1a: f4:2e:56:b4:9b:67:22:cf:b6:cb:9c:b5:c7:5c:7f: a1:08:0c:9d:57:21:b3:d7:ff:a2:b3:c8:82:ab:fc: 0e:00:2c:b8:84:43:3e:48:da:f5:ea:86:e6:84:13: c5:d6:d6:c3:11:f2:d2:7f:50:f1:e4:c0:f5:a1:73: 68:04:46:94:56:d9:7c:e0:91:e2:cd:b1:ec:56:7c: 41:fd:3c:00:50:5f:e5:4b:a4:fa:fb:a5:ef:2c:5c: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F6:5B:9A:BC:15:C7:E5:94:95:CF:C0:67:17:EF:71:14:60:A8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:47:65:49:dd:32:6b:6f:b8:2a:5b:a1:5d:3a:f5:1a:6f:0a: 06:d2:83:b0:4a:e0:34:ec:7b:94:b1:30:89:d7:e2:5b:05:9d: 4d:77:fb:bf:33:da:c0:a5:df:6a:e1:b6:f0:d3:8f:23:10:7d: 51:44:fe:56:37:ac:7e:9b:2e:c3:b5:7d:c9:5c:19:89:d9:12: dd:f1:77:12:cd:d2:ca:e9:79:fb:97:b4:e4:e2:a7:e9:73:79: 32:73:ac:76:a0:b7:bb:0d:8b:73:fb:16:be:18:94:7b:6e:ad: a5:84:00:f0:67:c1:b0:e9:5e:94:45:ea:0e:6e:5f:f8:c2:4b: 87:d7:e4:42:2e:ea:0d:01:ee:dc:05:22:ba:b8:ff:b4:b5:bd: b2:f1:93:49:ed:9b:9d:68:0f:17:6c:51:cb:23:12:83:ef:68: 1a:1c:74:47:55:f7:b4:dd:ef:97:3a:28:f1:37:7a:cf:1d:28: 23:81:ba:e6:42:e4:03:f7:a9:94:d1:a2:36:77:aa:bc:1c:d9: fa:7c:88:60:61:ae:ba:b4:5a:f4:b3:fe:09:10:fa:30:a6:b4: 15:be:8c:83:68:01:e2:24:7c:29:0b:d7:8f:73:a5:b1:31:23: d0:75:0a:60:a4:ac:95:33:a7:42:ec:81:04:23:7e:36:cd:97: 80:d3:40:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZP/sNr6VYq5zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MTUyZTU1YTYtYTdhNC00YzU4LTk4YTItM2I5ODAzNDgzZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/1YOWhP6JsrSmFmc1jHDlFqC9JjfYZO0toL HScN6qhZAlGt7y9roM4uxJ5rGHp/zAk446P70SXkHRm3Zl6gAd2EyDiwmlEatQjX inYjNFUsfLLSJbbI4jR0xaCWEpOXISImaQR0WBa06f2RaTf+PCK6xK47W66fOI7T 5LjIdG369ID85eplhWPwTxZ04pLVCiKx4f7nFNMJ0YJ4uvVNeuK75Rr0Lla0m2ci z7bLnLXHXH+hCAydVyGz1/+is8iCq/wOACy4hEM+SNr16obmhBPF1tbDEfLSf1Dx 5MD1oXNoBEaUVtl84JHizbHsVnxB/TwAUF/lS6T6+6XvLFzj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr2W5q8FcfllJXPwGcX73EUYKhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTg2MTFmMzQtMDE4My0z YmJiLTg3MjctZDhkYWM0MjZmMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtHZUndMmtvuCpboV069RpvCgbSg7BK4DTse5SxMInX4lsFnU13+78z 2sCl32rhtvDTjyMQfVFE/lY3rH6bLsO1fclcGYnZEt3xdxLN0srpefuXtOTip+lz eTJzrHagt7sNi3P7Fr4YlHturaWEAPBnwbDpXpRF6g5uX/jCS4fX5EIu6g0B7twF Irq4/7S1vbLxk0ntm51oDxdsUcsjEoPvaBocdEdV97Td75c6KPE3es8dKCOBuuZC 5AP3qZTRojZ3qrwc2fp8iGBhrrq0WvSz/gkQ+jCmtBW+jINoAeIkfCkL149zpbEx I9B1CmCkrJUzp0LsgQQjfjbNl4DTQGE= -----END CERTIFICATE-----Generated at Wed May 7 21:35:14 2025 by rpki-client