$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa File: 81fd244e-f226-367e-b02e-7f380e11df91.roa (raw, json) Hash identifier: NUs5cAg48kGVYLxt+NDnZ3nR2Gx9zo75LY6kAJ9KjzM= Subject key identifier: E0:EC:E2:7D:E8:AF:65:F4:E6:97:8D:59:F1:F1:D9:01:63:36:8F:6B Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584961B990F6DC764516910A60C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 202276 IP address blocks: 136.228.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:90:f6:dc:76:45:16:91:0a:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=f6bfdd1b-a023-4ce5-803e-97252f4f3a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:5e:4e:a2:7e:3b:6b:f4:f2:7c:0b:d1:be: 72:1f:a7:48:3f:0e:59:e3:d0:fc:91:eb:58:d4:b5: 09:c0:2f:4a:97:c9:5d:3d:cd:19:00:3f:cd:8c:71: a3:82:49:ce:80:3c:35:37:fd:4b:27:35:80:5f:3f: 06:32:0e:70:17:2e:bd:2d:7e:c9:d8:c6:a0:98:0a: 3b:ba:5d:cf:5d:79:0a:a0:47:f0:17:7a:99:50:d4: 10:9a:b0:e5:6f:00:1a:df:a5:1f:56:df:86:5b:c7: 43:a8:1b:38:34:db:49:da:e7:21:92:84:eb:be:98: 32:c6:49:ae:df:10:57:41:db:ff:24:6c:3f:66:50: 2e:84:62:39:6e:81:7a:90:e8:1c:b6:db:9c:1b:32: a0:cc:99:e0:44:55:68:fc:b1:e1:55:76:87:71:45: e1:b8:ee:ee:a3:9e:8f:95:b1:92:11:1e:9d:e3:68: d0:70:6e:02:11:f8:4c:47:42:73:79:21:65:f9:9c: 7e:9c:80:c7:f9:f9:4f:9c:a1:06:ed:ba:a4:05:70: 14:9a:0b:46:a2:38:64:b3:2b:e1:64:08:b8:ad:fa: 36:fd:77:8c:cd:68:87:25:37:25:e9:ed:e2:c5:b6: 92:84:d3:06:a8:4b:46:06:b1:a9:4b:2c:cc:bb:69: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EC:E2:7D:E8:AF:65:F4:E6:97:8D:59:F1:F1:D9:01:63:36:8F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:46:8b:be:9f:3d:2f:1d:d0:91:02:f6:69:4c:81:da:76:2a: b6:a9:6a:42:49:0c:98:b3:67:26:e5:3c:c5:f9:79:80:43:ae: 94:af:a5:b4:f2:9d:7f:67:54:0f:14:01:73:bb:ac:c4:50:5b: 5a:58:9a:f0:ec:51:f7:8f:62:36:c8:a4:be:d8:e8:6b:69:61: 3d:ab:9a:67:1e:4a:0b:dd:2b:0e:0f:d4:30:c1:20:96:b8:a3: 66:25:e7:13:62:f2:74:59:23:44:20:07:b6:a5:a8:53:fd:9a: 72:ba:3c:0e:2a:c5:92:e4:3d:ee:b3:13:84:49:53:f6:f0:f9: e5:80:bd:f5:9a:b7:43:b0:61:b2:16:4d:c1:aa:df:c1:07:2c: 10:c6:e4:a3:7b:fa:ca:2c:f7:d2:66:9c:b1:4b:c5:6c:f3:cc: 88:6d:d8:a5:55:5f:e4:a5:1b:27:13:af:d5:5b:03:b0:0e:bf: 56:c5:66:57:66:01:aa:f6:fb:f0:0f:83:94:d3:89:62:ba:9a: 6a:ba:d4:7f:43:ed:ca:ca:d1:b6:d1:fd:ea:cf:3d:37:c7:b3: 1f:51:d1:9f:99:6c:a8:e0:9a:ab:7a:68:6c:4e:fe:2f:27:97: 37:77:34:47:2c:50:11:37:44:5c:90:08:a0:da:72:18:ba:21: 7e:ec:57:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZD23HZFFpEKYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjZiZmRkMWItYTAyMy00Y2U1LTgwM2UtOTcyNTJmNGYzYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukheTqJ+O2v08nwL0b5yH6dIPw5Z49D8ketY 1LUJwC9Kl8ldPc0ZAD/NjHGjgknOgDw1N/1LJzWAXz8GMg5wFy69LX7J2MagmAo7 ul3PXXkKoEfwF3qZUNQQmrDlbwAa36UfVt+GW8dDqBs4NNtJ2uchkoTrvpgyxkmu 3xBXQdv/JGw/ZlAuhGI5boF6kOgcttucGzKgzJngRFVo/LHhVXaHcUXhuO7uo56P lbGSER6d42jQcG4CEfhMR0JzeSFl+Zx+nIDH+flPnKEG7bqkBXAUmgtGojhksyvh ZAi4rfo2/XeMzWiHJTcl6e3ixbaShNMGqEtGBrGpSyzMu2l4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODs4n3or2X05peNWfHx2QFjNo9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODFmZDI0NGUtZjIyNi0z NjdlLWIwMmUtN2YzODBlMTFkZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVGi76fPS8d0JEC9mlMgdp2KrapakJJDJizZyblPMX5eYBDrpSvpbTy nX9nVA8UAXO7rMRQW1pYmvDsUfePYjbIpL7Y6GtpYT2rmmceSgvdKw4P1DDBIJa4 o2Yl5xNi8nRZI0QgB7alqFP9mnK6PA4qxZLkPe6zE4RJU/bw+eWAvfWat0OwYbIW TcGq38EHLBDG5KN7+sos99JmnLFLxWzzzIht2KVVX+SlGycTr9VbA7AOv1bFZldm Aar2+/APg5TTiWK6mmq61H9D7crK0bbR/erPPTfHsx9R0Z+ZbKjgmqt6aGxO/i8n lzd3NEcsUBE3RFyQCKDachi6IX7sV+A= -----END CERTIFICATE-----Generated at Tue Apr 29 12:05:03 2025 by rpki-client