$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa File: 40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa (raw, json) Hash identifier: Uj8DEh5ssp/1VFLYV65/zQOn7yYWC1WG4wNQdlXDTbw= Subject key identifier: 37:74:2D:C1:75:30:28:8F:28:3D:B8:6F:0E:70:4E:C2:95:16:8D:9A Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584961B98CA2C874368DC0D5D3D0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 137922 IP address blocks: 136.228.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8c:a2:c8:74:36:8d:c0:d5:d3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=ffe6b65b-f8d8-4ac1-924e-60c6c72aa89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:fc:cd:1a:33:fb:29:e8:4e:0d:6c:66:a0: 1d:3a:d9:0b:e3:cb:b7:8f:43:ff:41:2a:b6:9d:5e: 40:98:88:83:c2:60:d4:5c:20:28:88:ae:10:19:d4: 88:c4:c1:f2:ff:e1:fc:da:9b:81:09:1c:aa:29:8e: 92:02:bc:51:34:5c:ca:09:b2:3c:0e:15:b5:39:d8: a0:ca:c7:b4:fe:a8:0d:fc:a3:4e:d2:30:9a:ca:29: 92:b0:11:09:f8:33:98:24:8b:38:68:ca:a0:e9:82: 0b:a1:36:14:eb:08:37:bd:be:84:b4:db:17:d7:75: 75:5f:42:70:c8:b7:54:59:a1:f5:ca:e6:cc:17:37: c0:26:03:38:58:37:79:96:bb:7d:e8:64:53:78:32: d0:fa:a6:d4:7a:35:d6:56:ee:8f:2e:a9:fb:23:f0: cf:ed:a4:fc:08:37:b9:f2:fa:61:d5:88:68:8a:e7: 53:dc:ea:f4:e7:51:07:22:0f:12:d7:3b:17:46:a0: 55:ea:21:7a:cd:30:50:8e:df:c7:2a:2c:08:c5:73: c4:cd:1a:24:43:42:6c:0b:af:2c:9b:c2:cf:e6:de: 56:e8:20:be:66:e7:c6:75:be:77:47:64:1e:f2:e0: fb:1d:7f:c5:39:ae:99:ca:3c:95:42:71:7b:7a:fe: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:74:2D:C1:75:30:28:8F:28:3D:B8:6F:0E:70:4E:C2:95:16:8D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:31:f3:d1:87:8c:4b:b8:96:cd:98:f1:4c:49:b6:6b:b5:82: c8:e8:cb:ed:f0:0e:9c:8d:03:0e:07:84:19:b8:cf:8d:16:f3: 13:fb:7a:c7:f2:e9:85:ae:e9:b3:85:9d:d9:da:31:45:43:3a: d1:2e:09:c5:46:9d:8d:3f:a0:2b:a4:8a:87:36:24:64:11:06: 73:5c:f2:f2:46:5a:f9:cd:51:bb:3f:01:40:4a:37:28:c0:50: 61:41:47:48:63:7e:2b:93:b0:79:7a:44:c2:bb:b9:c1:8d:0a: 15:41:cb:bb:28:05:e3:5a:6d:2e:5c:9a:e2:06:27:c3:de:69: e9:03:3d:09:db:05:ac:59:97:ff:ee:98:fb:ba:d3:d0:19:1b: ce:a8:86:65:c6:d7:9b:27:a6:1b:66:fe:9b:c2:a0:49:a5:70: c7:6c:8a:b5:8a:aa:ab:60:a9:08:ac:52:22:23:14:f6:64:fb: d6:c4:a0:07:7e:c0:a2:01:22:06:97:b5:43:61:ca:e5:68:ba: 64:a1:2b:0e:05:cd:06:e2:ca:24:93:33:ad:ca:da:bf:e8:f8: 73:92:32:39:f9:af:d6:92:56:25:f9:14:16:72:3f:77:e0:95: 6f:c2:a2:d1:11:54:e2:75:d5:14:07:97:17:9a:0d:78:f9:4c: e9:8c:1d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYyiyHQ2jcDV09AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmZlNmI2NWItZjhkOC00YWMxLTkyNGUtNjBjNmM3MmFhODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgn8zRoz+ynoTg1sZqAdOtkL48u3j0P/QSq2 nV5AmIiDwmDUXCAoiK4QGdSIxMHy/+H82puBCRyqKY6SArxRNFzKCbI8DhW1Odig yse0/qgN/KNO0jCayimSsBEJ+DOYJIs4aMqg6YILoTYU6wg3vb6EtNsX13V1X0Jw yLdUWaH1yubMFzfAJgM4WDd5lrt96GRTeDLQ+qbUejXWVu6PLqn7I/DP7aT8CDe5 8vph1YhoiudT3Or051EHIg8S1zsXRqBV6iF6zTBQjt/HKiwIxXPEzRokQ0JsC68s m8LP5t5W6CC+ZufGdb53R2Qe8uD7HX/FOa6ZyjyVQnF7ev4iTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDd0LcF1MCiPKD24bw5wTsKVFo2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNDBkMzA5Y2EtNmY3OC0z NGVkLThkODUtMzFkOGI3ZTJlNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0x89GHjEu4ls2Y8UxJtmu1gsjoy+3wDpyNAw4HhBm4z40W8xP7esfy 6YWu6bOFndnaMUVDOtEuCcVGnY0/oCukioc2JGQRBnNc8vJGWvnNUbs/AUBKNyjA UGFBR0hjfiuTsHl6RMK7ucGNChVBy7soBeNabS5cmuIGJ8PeaekDPQnbBaxZl//u mPu609AZG86ohmXG15snphtm/pvCoEmlcMdsirWKqqtgqQisUiIjFPZk+9bEoAd+ wKIBIgaXtUNhyuVoumShKw4FzQbiyiSTM63K2r/o+HOSMjn5r9aSViX5FBZyP3fg lW/CotERVOJ11RQHlxeaDXj5TOmMHck= -----END CERTIFICATE-----Generated at Sun Apr 27 02:04:25 2025 by rpki-client