$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/71f0c36b-c860-3997-9e5d-950a37868654.roa File: 71f0c36b-c860-3997-9e5d-950a37868654.roa (raw, json) Hash identifier: +S9Ee+tmr0ZN53NWKeyZL+8sH6BgsOXJfWzHXJhNKFM= Subject key identifier: 4B:37:2D:27:7D:1C:D6:22:D9:C4:46:89:12:5B:F3:69:B0:EC:E3:F6 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A5FC5DA1A38B5A78F76AF8668 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/71f0c36b-c860-3997-9e5d-950a37868654.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 202276 IP address blocks: 136.228.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:da:1a:38:b5:a7:8f:76:af:86:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=1a433f2d-776e-4cb5-a5de-d63ea207f0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:0e:89:27:77:84:d5:23:d1:c5:a7:d5:fd: d4:f0:12:76:b9:40:d0:26:13:8c:2a:14:bb:58:7e: c0:c3:fb:5c:ba:12:be:f7:95:3c:63:ee:17:75:df: 93:c2:c8:78:d5:c3:f6:6a:9b:a6:13:b1:c7:51:c4: 12:9d:d8:a5:bc:98:08:c0:d4:9a:c6:af:e2:f6:8c: a5:38:78:77:77:f1:4c:7b:05:3d:42:8d:02:a6:22: 1f:ce:b5:9b:ff:f4:b6:94:e7:49:40:86:61:db:d8: fa:87:e3:62:ba:ab:45:ea:58:17:30:9d:cf:e5:9d: 21:ff:fe:2d:3c:bb:2e:bc:8d:51:b3:d9:17:6b:c1: 34:23:fb:66:18:c4:2b:34:98:01:83:87:e5:7a:78: 99:dc:c6:da:7f:7d:16:8a:88:45:7b:52:7b:92:69: 9e:ee:06:ef:ff:50:05:50:73:fa:a4:e4:78:da:c3: 0f:e0:60:d1:28:ce:2a:f6:51:0b:62:29:0f:be:8b: 1b:73:63:2b:f8:2a:57:58:d0:4a:ed:d1:ba:4e:cc: d5:cc:3d:85:89:79:dd:5e:f3:e4:38:07:ed:ce:71: 82:b5:f5:34:c5:f7:58:50:f8:bd:b0:0a:bf:b6:44: 0a:a6:19:7c:37:db:b9:b2:df:7e:04:58:46:c0:cb: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:37:2D:27:7D:1C:D6:22:D9:C4:46:89:12:5B:F3:69:B0:EC:E3:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/71f0c36b-c860-3997-9e5d-950a37868654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7c:36:d8:e4:ad:cc:7c:8e:db:0d:c3:d6:a8:6c:ab:7a:4c: d0:1a:97:35:e3:36:50:47:4a:a8:18:07:ca:52:81:0c:2e:07: d7:68:fa:9b:87:c2:5a:f0:88:71:a7:1a:9b:99:71:59:ee:90: c3:bb:4a:ee:ff:8e:05:01:09:4d:68:f4:8c:f2:6b:7c:87:82: b2:b7:c6:b0:81:cb:d7:c5:79:13:96:dd:40:41:fd:0c:41:0e: b3:bc:c4:44:43:e4:39:ed:c5:12:15:e5:09:55:18:2b:f3:a4: c9:a5:e7:f9:14:ba:f0:84:9c:6d:28:9c:56:53:88:a7:2b:57: 7d:dd:e4:1a:49:06:b0:79:7c:ff:a6:8f:a4:08:ab:5c:26:62: 90:c0:0f:dd:6d:f3:15:63:a0:01:b6:2e:1d:6c:94:1d:f6:4b: ee:d2:f8:39:82:87:1b:54:e2:19:82:3a:18:96:51:fd:67:4d: ad:17:43:51:c9:c3:4b:25:95:d7:10:09:72:81:21:88:4f:29: c0:a0:94:00:7f:27:6a:69:6b:69:f8:ec:97:e1:a9:f7:14:a9: 55:58:fb:64:ca:d4:d5:2b:5b:34:02:fb:88:47:ca:ec:c4:65: dd:94:b2:84:4a:04:45:60:db:92:89:03:b2:2d:b3:16:3e:c3: 0b:49:2b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdoaOLWnj3avhmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MWE0MzNmMmQtNzc2ZS00Y2I1LWE1ZGUtZDYzZWEyMDdmMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZkOiSd3hNUj0cWn1f3U8BJ2uUDQJhOMKhS7 WH7Aw/tcuhK+95U8Y+4Xdd+Twsh41cP2apumE7HHUcQSndilvJgIwNSaxq/i9oyl OHh3d/FMewU9Qo0CpiIfzrWb//S2lOdJQIZh29j6h+NiuqtF6lgXMJ3P5Z0h//4t PLsuvI1Rs9kXa8E0I/tmGMQrNJgBg4fleniZ3Mbaf30WiohFe1J7kmme7gbv/1AF UHP6pOR42sMP4GDRKM4q9lELYikPvosbc2Mr+CpXWNBK7dG6TszVzD2FiXndXvPk OAftznGCtfU0xfdYUPi9sAq/tkQKphl8N9u5st9+BFhGwMsIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs3LSd9HNYi2cRGiRJb82mw7OP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNzFmMGMzNmItYzg2MC0z OTk3LTllNWQtOTUwYTM3ODY4NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiOToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh8Ntjkrcx8jtsNw9aobKt6TNAalzXjNlBHSqgYB8pSgQwuB9do+puH wlrwiHGnGpuZcVnukMO7Su7/jgUBCU1o9Izya3yHgrK3xrCBy9fFeROW3UBB/QxB DrO8xERD5DntxRIV5QlVGCvzpMml5/kUuvCEnG0onFZTiKcrV33d5BpJBrB5fP+m j6QIq1wmYpDAD91t8xVjoAG2Lh1slB32S+7S+DmChxtU4hmCOhiWUf1nTa0XQ1HJ w0slldcQCXKBIYhPKcCglAB/J2ppa2n47JfhqfcUqVVY+2TK1NUrWzQC+4hHyuzE Zd2UsoRKBEVg25KJA7ItsxY+wwtJKwg= -----END CERTIFICATE-----Generated at Thu Jul 10 13:07:01 2025 by rpki-client