$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa File: 0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa (raw, json) Hash identifier: 9yQ1/6XPFEwfGIOq6+Q0xr+ak1Ihud8DKhEwFjLD21s= Subject key identifier: 9E:15:6E:26:05:15:BC:63:0F:B2:65:AA:B4:2E:E8:CC:6D:2D:7E:45 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A2D8588AEA0E71FB3210A1F40 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 202276 IP address blocks: 136.228.221.0/24 maxlen: 24 136.228.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:88:ae:a0:e7:1f:b3:21:0a:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=4b7584e7-7c08-4d49-b9b9-334ecb9f1091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:74:47:68:e9:94:04:46:bf:3f:09:88:c8: c6:33:d8:df:89:58:31:63:23:26:55:96:d3:2b:28: fc:5d:84:cc:6a:73:c3:df:8c:61:69:bd:7b:5a:78: cb:90:9d:75:d9:b2:66:f0:ec:01:ed:7d:1d:af:18: 95:0d:32:d8:fa:ec:3a:f2:9b:5d:1a:17:70:41:67: d9:7c:a5:77:33:b4:9a:1b:1b:af:f6:fe:3f:6f:6b: cb:ca:6e:63:21:01:52:b0:e7:6e:86:c6:be:64:24: 7b:c5:81:0d:91:e3:01:af:32:c6:37:d2:c2:5a:e1: c1:b1:ff:4b:fd:07:89:9e:14:7f:41:e0:aa:d1:6c: 13:07:14:94:2a:88:13:7c:6b:d3:fb:71:bc:78:e4: a7:36:8a:20:52:e7:4c:f2:d9:4e:a6:3b:d4:42:ef: 62:f8:9b:79:2a:66:2d:0a:c1:8d:23:5d:fd:66:24: c7:fd:d1:b4:f2:81:3f:01:28:31:18:c7:b2:f5:95: aa:b0:19:64:91:75:5d:77:83:78:a0:b9:cd:d7:e3: cb:3e:16:1b:03:e0:92:99:3a:7c:b6:ec:69:67:ee: 67:21:ef:a6:84:11:25:09:44:1d:a7:3c:7b:8a:94: 9f:99:cc:48:b5:97:f4:2d:87:e1:5a:8e:db:aa:4d: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:15:6E:26:05:15:BC:63:0F:B2:65:AA:B4:2E:E8:CC:6D:2D:7E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.221.0/24 136.228.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:38:54:b0:4c:0d:6b:37:b5:27:6a:f4:3f:e2:9d:c9:13:d5: 39:98:ec:32:1f:31:71:11:d3:ec:24:68:ff:81:dd:68:a1:d7: 2b:3b:b4:a8:76:d3:1f:e3:9a:96:23:da:07:7e:0b:62:44:14: 86:4c:f3:08:fe:59:3d:e2:99:b1:09:f0:da:ac:38:c2:bc:62: a1:af:46:5d:80:67:a2:3e:96:fe:a1:74:45:7e:da:4e:77:c8: 89:24:6b:a3:be:b6:21:64:c1:a5:01:09:f1:aa:2a:69:a7:10: 6d:c2:15:42:2f:97:f4:36:10:b4:26:16:70:fa:06:64:c7:05: fa:e1:2e:32:dd:a2:79:93:1a:60:d7:75:18:d1:a9:99:cf:7a: cb:3c:da:74:12:d8:49:8b:6e:06:40:72:54:20:09:9e:db:09: 01:cb:70:79:fd:93:d3:31:cf:d1:2b:75:6d:ab:cc:7c:87:a9: 59:9d:d5:73:6f:30:7f:a7:bb:7b:1e:d1:fc:00:45:64:96:4d: b0:ef:16:7b:a0:ac:c7:e8:ae:59:46:fd:f0:dc:d1:0f:df:1d: c9:75:6d:4c:bb:1a:0e:5f:57:75:64:61:87:35:26:8c:d1:3e: a8:4a:f5:7d:fd:2b:f8:66:ff:21:4f:12:cf:3f:7e:ff:38:6c: 7c:35:7c:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEothYiuoOcfsyEKH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk NGI3NTg0ZTctN2MwOC00ZDQ5LWI5YjktMzM0ZWNiOWYxMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq490R2jplARGvz8JiMjGM9jfiVgxYyMmVZbT Kyj8XYTManPD34xhab17WnjLkJ112bJm8OwB7X0drxiVDTLY+uw68ptdGhdwQWfZ fKV3M7SaGxuv9v4/b2vLym5jIQFSsOduhsa+ZCR7xYENkeMBrzLGN9LCWuHBsf9L /QeJnhR/QeCq0WwTBxSUKogTfGvT+3G8eOSnNoogUudM8tlOpjvUQu9i+Jt5KmYt CsGNI139ZiTH/dG08oE/ASgxGMey9ZWqsBlkkXVdd4N4oLnN1+PLPhYbA+CSmTp8 tuxpZ+5nIe+mhBElCUQdpzx7ipSfmcxItZf0LYfhWo7bqk3j2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ4VbiYFFbxjD7JlqrQu6MxtLX5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFlMTVkNDktZTUxMy0z NzQ1LWIzZjktNjZlYmM2NGEyYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiOTdAwQA iOTwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADg4VLBMDWs3tSdq9D/inckT1TmY7DIfMXER0+wkaP+B3Wih 1ys7tKh20x/jmpYj2gd+C2JEFIZM8wj+WT3imbEJ8NqsOMK8YqGvRl2AZ6I+lv6h dEV+2k53yIkka6O+tiFkwaUBCfGqKmmnEG3CFUIvl/Q2ELQmFnD6BmTHBfrhLjLd onmTGmDXdRjRqZnPess82nQS2EmLbgZAclQgCZ7bCQHLcHn9k9Mxz9ErdW2rzHyH qVmd1XNvMH+nu3se0fwARWSWTbDvFnugrMforllG/fDc0Q/fHcl1bUy7Gg5fV3Vk YYc1JozRPqhK9X39K/hm/yFPEs8/fv84bHw1fOA= -----END CERTIFICATE-----Generated at Tue Jun 17 05:56:59 2025 by rpki-client