$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa File: 1d551313-586d-314b-a892-2b1319137fc1.roa (raw, json) Hash identifier: ynvTazA3lmmQPdqDGma/XLMM6NR3SdovE52BRv/VvpE= Subject key identifier: 3B:B6:52:F2:C1:23:E5:D7:8C:1C:1C:1C:06:0A:8C:7B:9F:C9:28:AF Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F432858494E2EAA5E2EFB1ACC8EBAE7C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 396253 IP address blocks: 136.228.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:aa:5e:2e:fb:1a:cc:8e:ba:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=e0f87169-e04f-46b3-866a-e0c3cb9247f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:a8:4d:a7:d6:fc:1a:e6:b8:bc:a8:80:80: 13:12:1d:8e:bf:f1:38:e8:04:65:ec:e8:fd:ca:dd: e0:73:9a:38:1f:8a:d3:ea:05:db:86:f4:ad:2e:d1: 31:c7:c9:34:4a:5c:c4:92:95:2e:c5:52:b5:4f:47: fb:7e:1d:aa:44:d4:43:b8:4a:13:49:a6:1e:4e:84: 00:dd:33:ad:c4:a6:a5:bd:5e:18:b2:45:c7:1e:62: dc:85:88:0a:c8:3f:74:83:19:b2:bf:05:c5:19:2c: 13:a6:88:50:e4:73:8d:55:0e:2a:69:f3:e4:5a:61: 66:5f:5a:43:6c:4c:f7:29:6b:3e:f2:4b:ca:48:40: 36:00:72:54:ee:d8:1b:61:69:d9:57:e4:0e:c1:28: 0a:35:a1:91:fb:09:e7:8c:c6:98:41:32:56:11:73: f6:84:34:39:ae:03:36:86:23:fb:bb:fd:0f:ff:25: 5a:58:f7:b9:c0:41:47:74:f0:ca:02:e0:03:d0:7d: 78:05:50:53:09:5c:fd:85:b3:81:c2:43:15:7a:5f: c1:5f:5f:d5:48:23:bf:d5:8b:55:5c:16:96:8a:cd: 22:64:1f:13:09:0c:f9:17:d9:21:e5:89:a4:ad:d3: bc:d2:b2:b1:76:4e:70:8e:38:6e:2e:51:9d:95:46: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B6:52:F2:C1:23:E5:D7:8C:1C:1C:1C:06:0A:8C:7B:9F:C9:28:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:77:5c:50:6e:a8:33:43:fb:f6:23:2e:95:8c:53:c3:8a:81: 18:60:f8:d2:d1:09:d0:a7:87:ca:e6:a1:af:aa:83:f0:48:4b: 93:19:2c:6d:4a:cf:ca:85:03:35:c8:08:2d:0e:64:5b:a5:05: 87:d7:8f:1a:bd:80:a6:25:53:6e:be:f4:0d:8a:0d:61:e2:54: 6c:01:69:ca:34:3a:14:e3:2a:49:8c:4d:56:e1:5c:da:73:47: 3b:9d:1d:0f:df:d2:12:e2:82:ba:68:27:9b:8b:64:71:ee:30: 40:6d:bc:a0:c2:d5:fc:09:8d:45:9f:28:92:fc:f1:78:13:78: 33:bf:66:5c:5b:81:f6:d3:8c:57:da:c1:6b:25:e1:60:0e:0e: 3b:50:e7:2b:f7:09:64:25:70:c6:f8:68:c8:de:66:74:d7:6f: c1:de:ab:c1:84:6c:8a:46:85:ee:2e:d7:45:46:5b:77:33:3f: f6:14:fb:ba:ac:aa:d8:6d:37:21:aa:37:43:81:af:64:49:80: 97:9b:8e:5a:d4:10:3a:48:00:76:46:63:11:bf:2c:fd:f8:c8: b3:fc:3b:7c:fa:b1:cc:b8:5d:5e:32:9c:46:6f:65:38:9f:43: a7:23:f2:6a:9d:02:e2:d5:61:e2:f8:b6:7b:06:76:38:82:8c: 21:74:69:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLqpeLvsazI6658AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTBmODcxNjktZTA0Zi00NmIzLTg2NmEtZTBjM2NiOTI0N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/eoTafW/BrmuLyogIATEh2Ov/E46ARl7Oj9 yt3gc5o4H4rT6gXbhvStLtExx8k0SlzEkpUuxVK1T0f7fh2qRNRDuEoTSaYeToQA 3TOtxKalvV4YskXHHmLchYgKyD90gxmyvwXFGSwTpohQ5HONVQ4qafPkWmFmX1pD bEz3KWs+8kvKSEA2AHJU7tgbYWnZV+QOwSgKNaGR+wnnjMaYQTJWEXP2hDQ5rgM2 hiP7u/0P/yVaWPe5wEFHdPDKAuAD0H14BVBTCVz9hbOBwkMVel/BX1/VSCO/1YtV XBaWis0iZB8TCQz5F9kh5YmkrdO80rKxdk5wjjhuLlGdlUZuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu2UvLBI+XXjBwcHAYKjHufySivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMWQ1NTEzMTMtNTg2ZC0z MTRiLWE4OTItMmIxMzE5MTM3ZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN3XFBuqDND+/YjLpWMU8OKgRhg+NLRCdCnh8rmoa+qg/BIS5MZLG1K z8qFAzXICC0OZFulBYfXjxq9gKYlU26+9A2KDWHiVGwBaco0OhTjKkmMTVbhXNpz RzudHQ/f0hLigrpoJ5uLZHHuMEBtvKDC1fwJjUWfKJL88XgTeDO/ZlxbgfbTjFfa wWsl4WAODjtQ5yv3CWQlcMb4aMjeZnTXb8Heq8GEbIpGhe4u10VGW3czP/YU+7qs qthtNyGqN0OBr2RJgJebjlrUEDpIAHZGYxG/LP34yLP8O3z6scy4XV4ynEZvZTif Q6cj8mqdAuLVYeL4tnsGdjiCjCF0aRI= -----END CERTIFICATE-----Generated at Mon Apr 28 08:37:24 2025 by rpki-client