$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa File: 80a5fef1-d368-337d-a043-77c11e4d550e.roa (raw, json) Hash identifier: CwSMZHMtUUslI+CXgYmGtseoxR5tJ6ovyI2O0L++ww4= Subject key identifier: A3:B9:29:A7:85:B8:71:98:0B:33:F2:CD:A2:71:E5:34:85:36:26:92 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584961B98CB4B1DBCBB7FB8C1A40 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396253 IP address blocks: 136.228.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:8c:b4:b1:db:cb:b7:fb:8c:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=dd008000-0b47-4571-aebc-b9149ec4c13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:b2:9e:62:5f:b9:9f:a4:3f:cf:19:d8:48: 3a:da:00:9c:a3:bf:c9:48:a9:a5:94:8a:b1:7c:eb: 42:f9:63:f6:64:d7:7c:0e:ae:05:1a:20:bd:45:3e: 5a:f2:90:b2:83:2e:07:3c:fa:7c:b3:7b:2e:51:d3: 05:46:64:cd:35:37:2b:16:9c:f6:01:e5:17:a0:8d: fe:89:fb:a4:45:8a:3f:0f:52:5e:33:29:d3:af:3e: 73:9c:71:e0:d3:0b:8f:75:60:93:3f:ea:24:8a:aa: 64:ab:b2:cd:8d:8d:a8:29:68:0f:11:43:86:6b:cb: 1a:8b:23:7f:75:96:ce:8c:0d:15:a1:c9:a7:3f:b2: 63:73:fe:35:c0:4a:96:83:23:19:4b:7f:0a:02:59: de:01:04:a0:6a:f9:26:d7:d0:10:9d:4e:df:4b:2c: 02:cc:d5:88:d4:49:15:3e:a1:ac:f5:c0:f4:cd:7c: d4:8f:2c:08:4b:d2:3c:9a:85:7a:69:3b:75:42:85: 4e:9e:db:fc:dc:39:c7:bb:ad:52:08:ef:a0:fe:51: 1e:ef:5c:5e:80:32:09:46:3b:65:70:b7:07:83:98: 97:48:1c:1e:e0:04:09:ac:60:db:10:97:d6:58:f5: fc:33:17:cd:09:9a:73:9d:b2:87:1f:5b:4a:4c:04: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B9:29:A7:85:B8:71:98:0B:33:F2:CD:A2:71:E5:34:85:36:26:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6a:24:52:c5:f4:45:00:3d:b7:03:c4:4c:4a:94:ee:8d:15: 38:e0:8c:e7:82:44:be:90:e3:d1:fb:8c:17:3f:24:87:ca:87: 5f:47:9a:b3:bf:f9:12:40:1c:87:77:47:43:77:93:ba:fe:e0: 33:90:aa:82:4f:29:dc:95:f8:8d:cd:05:1a:66:9a:e2:94:72: b5:17:bd:e5:eb:45:b1:fc:e8:05:5d:3c:5f:46:5a:d6:b5:5e: c2:47:18:ed:87:24:7d:02:2d:fe:01:34:ac:21:9e:e3:2b:74: 0b:0e:0b:a6:bd:9f:9e:73:f8:9e:3d:3a:0e:d7:19:71:d8:4b: 7f:b9:68:60:7d:74:e0:1a:9d:0c:ae:76:bc:ac:e4:1b:19:cc: 72:e1:59:df:ab:e8:a0:b9:69:af:c2:16:e5:42:26:07:08:44: d3:e2:d1:83:b9:18:2f:0d:d2:8b:15:4e:2a:9f:73:44:0a:6b: 00:d5:ce:d9:f3:0b:c3:d5:09:9a:82:a8:43:aa:f8:cb:c8:67: 9c:32:c4:3e:0a:c5:de:15:90:98:26:90:a7:a6:4e:a1:8f:9b: cf:7d:fa:37:b6:a4:23:7b:53:25:46:78:aa:ff:07:f9:f6:8c: 5a:3c:e5:73:e3:66:c1:02:32:4f:81:7c:1d:82:24:1d:22:16: 57:8c:51:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYy0sdvLt/uMGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGQwMDgwMDAtMGI0Ny00NTcxLWFlYmMtYjkxNDllYzRjMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskGynmJfuZ+kP88Z2Eg62gCco7/JSKmllIqx fOtC+WP2ZNd8Dq4FGiC9RT5a8pCygy4HPPp8s3suUdMFRmTNNTcrFpz2AeUXoI3+ ifukRYo/D1JeMynTrz5znHHg0wuPdWCTP+okiqpkq7LNjY2oKWgPEUOGa8saiyN/ dZbOjA0VocmnP7Jjc/41wEqWgyMZS38KAlneAQSgavkm19AQnU7fSywCzNWI1EkV PqGs9cD0zXzUjywIS9I8moV6aTt1QoVOntv83DnHu61SCO+g/lEe71xegDIJRjtl cLcHg5iXSBwe4AQJrGDbEJfWWPX8MxfNCZpznbKHH1tKTAT7bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO5KaeFuHGYCzPyzaJx5TSFNiaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODBhNWZlZjEtZDM2OC0z MzdkLWEwNDMtNzdjMTFlNGQ1NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1qJFLF9EUAPbcDxExKlO6NFTjgjOeCRL6Q49H7jBc/JIfKh19HmrO/ +RJAHId3R0N3k7r+4DOQqoJPKdyV+I3NBRpmmuKUcrUXveXrRbH86AVdPF9GWta1 XsJHGO2HJH0CLf4BNKwhnuMrdAsOC6a9n55z+J49Og7XGXHYS3+5aGB9dOAanQyu drys5BsZzHLhWd+r6KC5aa/CFuVCJgcIRNPi0YO5GC8N0osVTiqfc0QKawDVztnz C8PVCZqCqEOq+MvIZ5wyxD4Kxd4VkJgmkKemTqGPm899+je2pCN7UyVGeKr/B/n2 jFo85XPjZsECMk+BfB2CJB0iFleMUd0= -----END CERTIFICATE-----Generated at Sun Apr 6 00:51:40 2025 by rpki-client