$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa File: 4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa (raw, json) Hash identifier: os8NsLBWW3i28BxNh+bnQU3qTeseqAKTTWXsrQaFygI= Subject key identifier: 5A:9C:30:BD:46:99:F5:17:27:BE:70:F4:0E:3C:25:75:4A:17:83:80 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584961B9910C85F78251E1EF8330 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 137922 IP address blocks: 136.228.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:91:0c:85:f7:82:51:e1:ef:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=f2820c0d-d8bc-47d5-9afc-83961eca7f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:c9:b2:1d:c5:84:9a:ef:d9:9f:43:b5:cb: db:1b:59:d8:fb:98:5c:7d:9f:d5:cc:a1:40:c9:38: b7:f1:b0:58:31:e1:7d:56:25:6a:0d:ae:b7:e5:e5: d0:94:c6:ef:27:83:3a:ab:fd:6f:c6:2d:b0:06:07: 11:4c:d4:6a:24:81:24:e6:9d:30:4e:26:89:2e:6f: 32:b6:3c:29:9d:69:20:5e:1f:d7:69:0b:27:d0:28: d0:61:a5:bd:a8:b7:28:88:8f:49:1a:ca:70:71:8d: 8a:52:06:25:8d:89:ff:b1:bd:8a:2f:15:ff:bb:fc: 4e:ed:7c:f6:da:7d:82:ad:4b:73:bb:a7:a3:85:d9: 01:79:0b:bc:1f:ff:53:f8:f3:fb:1e:1c:01:0a:f6: 25:54:77:ee:3f:dc:e3:ae:8b:64:ee:74:07:dd:88: c6:f4:98:f8:73:14:4b:b2:a4:91:bc:29:a5:be:6d: 5c:9f:47:2a:dc:01:5e:65:19:33:be:4b:38:1b:2e: a4:5b:e7:9a:6f:66:a8:51:e8:04:c3:90:23:67:0c: f8:d4:b2:4c:13:a4:f4:af:90:6a:84:f6:28:7e:a0: 1b:e1:6f:45:ae:d7:8c:3e:b3:13:8e:4e:58:a0:fc: bf:ee:70:48:e6:6a:62:78:fa:7a:b2:a8:80:59:82: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:30:BD:46:99:F5:17:27:BE:70:F4:0E:3C:25:75:4A:17:83:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4a9f5ff0-0287-321a-ab20-5528fdc1b6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7a:9b:7f:7b:18:06:61:88:ca:ad:d9:1b:ad:87:64:4e:79: 14:4c:92:2c:2c:82:af:1c:68:c8:3a:4e:04:26:da:54:14:4f: 5a:83:19:3f:41:12:ab:c2:82:e4:74:67:bb:84:ae:94:33:ee: 59:a9:e0:00:55:10:b2:c4:59:6c:f9:50:97:81:be:e1:20:7a: 36:43:fd:f4:41:cd:19:2d:9a:25:6d:48:17:c3:e1:ca:58:ad: 37:eb:fa:92:8c:6e:5c:7e:f5:d8:c8:95:51:f6:78:f2:48:9e: 03:15:e5:b3:0b:5d:2b:e1:61:e3:3e:7f:37:2f:36:d1:a5:4b: 14:ab:50:f3:24:35:c8:56:84:6e:cf:a4:a3:2a:76:f9:d1:17: a8:2c:9e:15:31:cf:7b:35:6e:b8:75:59:6d:ec:33:3c:99:c3: 85:5e:fe:df:29:e1:25:b9:c2:32:75:27:86:87:68:ed:7b:da: 5b:76:3d:e7:ec:da:24:1c:4d:83:a3:b2:81:83:a3:41:8e:da: ec:66:5f:ec:5c:6a:31:08:ae:cd:6c:64:d5:d4:55:6f:4c:30: 70:4b:df:5a:27:e6:d5:e0:c3:61:aa:af:7b:4b:6e:d7:38:ed: 2d:ca:da:e2:81:96:cc:d3:c5:60:63:81:9b:eb:93:6a:92:54: 24:15:ff:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZEMhfeCUeHvgzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjI4MjBjMGQtZDhiYy00N2Q1LTlhZmMtODM5NjFlY2E3Zjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL/Jsh3FhJrv2Z9DtcvbG1nY+5hcfZ/VzKFA yTi38bBYMeF9ViVqDa635eXQlMbvJ4M6q/1vxi2wBgcRTNRqJIEk5p0wTiaJLm8y tjwpnWkgXh/XaQsn0CjQYaW9qLcoiI9JGspwcY2KUgYljYn/sb2KLxX/u/xO7Xz2 2n2CrUtzu6ejhdkBeQu8H/9T+PP7HhwBCvYlVHfuP9zjrotk7nQH3YjG9Jj4cxRL sqSRvCmlvm1cn0cq3AFeZRkzvks4Gy6kW+eab2aoUegEw5AjZwz41LJME6T0r5Bq hPYofqAb4W9FrteMPrMTjk5YoPy/7nBI5mpiePp6sqiAWYLHUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqcML1GmfUXJ75w9A48JXVKF4OAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNGE5ZjVmZjAtMDI4Ny0z MjFhLWFiMjAtNTUyOGZkYzFiNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd6m397GAZhiMqt2Ruth2ROeRRMkiwsgq8caMg6TgQm2lQUT1qDGT9B EqvCguR0Z7uErpQz7lmp4ABVELLEWWz5UJeBvuEgejZD/fRBzRktmiVtSBfD4cpY rTfr+pKMblx+9djIlVH2ePJIngMV5bMLXSvhYeM+fzcvNtGlSxSrUPMkNchWhG7P pKMqdvnRF6gsnhUxz3s1brh1WW3sMzyZw4Ve/t8p4SW5wjJ1J4aHaO172lt2Pefs 2iQcTYOjsoGDo0GO2uxmX+xcajEIrs1sZNXUVW9MMHBL31on5tXgw2Gqr3tLbtc4 7S3K2uKBlszTxWBjgZvrk2qSVCQV/8Q= -----END CERTIFICATE-----Generated at Sat Apr 5 20:45:29 2025 by rpki-client