$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa File: 85351780-5ad9-39ef-8588-013e2d6f1fcf.roa (raw, json) Hash identifier: ixldHNKHnLEKB1PZaC3HHK5qggrUWNp4UY+DZoG9z9M= Subject key identifier: D0:53:C5:14:C5:CF:55:10:72:F3:F2:39:96:AC:4D:AD:FF:75:BF:32 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B1F01714F042B8C630032A940 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 396253 IP address blocks: 136.228.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:71:4f:04:2b:8c:63:00:32:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=85d0adba-826f-4f7a-a0c6-3e4e5c46db11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:4c:a1:13:3c:48:81:b3:a3:a7:c6:29:dd: 29:24:6f:ab:98:01:aa:5f:30:c1:08:af:a6:61:c1: 92:96:12:3f:e0:c6:80:85:ff:b8:37:12:5c:c4:92: 83:18:a4:2f:35:40:88:be:22:45:82:42:a7:e0:bd: 41:55:1c:19:7c:67:0f:72:15:db:42:65:8a:f2:f2: 4f:e3:b0:ee:35:54:04:1e:ed:3b:e9:f8:4b:a8:cf: 9b:b6:ce:e8:fd:d1:fa:c1:5a:87:b7:eb:e7:0f:be: cf:34:72:d2:1b:8c:61:7b:2f:84:cb:2e:7c:bf:87: 8b:08:01:5e:8b:0f:ff:11:fa:d9:f2:7f:5b:ff:81: 65:79:7c:88:6c:70:d5:48:70:22:b8:a6:45:b7:52: 7b:bf:65:65:96:2d:9d:67:22:77:8f:10:0f:f8:05: 7b:49:10:60:08:1b:1b:92:3d:63:01:83:2d:af:fc: 05:cc:6a:47:3c:33:be:e8:40:64:10:a9:65:87:57: 01:1a:f6:af:a8:a1:08:4d:c6:eb:5f:84:42:b3:46: db:16:fd:d2:1d:4e:73:3b:0c:db:7d:1a:8e:d4:9a: 21:d9:37:c7:ce:f0:c2:75:50:b7:83:40:89:f1:fe: b4:33:8c:24:6a:bb:21:8e:b3:fe:51:f7:3f:16:e2: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:53:C5:14:C5:CF:55:10:72:F3:F2:39:96:AC:4D:AD:FF:75:BF:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/85351780-5ad9-39ef-8588-013e2d6f1fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5c:92:35:74:18:b4:13:a6:1f:2c:7c:a1:2a:3e:d1:5a:9d: 2c:e5:02:1d:8b:e2:11:09:e0:11:7f:84:25:87:a5:61:de:bf: 83:7b:20:db:2a:4f:d1:48:66:f4:75:fe:67:33:5e:52:78:2f: a9:69:b6:ee:72:c6:f8:76:60:7f:9c:e4:ca:fb:b0:bb:c0:9e: 54:4b:10:0e:a4:ed:c8:df:3f:11:bf:98:4c:de:06:f2:52:c9: 2d:71:09:dc:f9:c8:24:ae:9f:bd:3a:fa:a0:72:8f:9c:5d:47: 05:a3:ec:0e:73:a0:93:07:ef:7c:1c:f7:f9:5b:fc:b5:2a:12: de:df:d0:0a:a1:9a:62:65:1f:d5:3e:64:c8:37:f0:cb:b7:0b: ea:ec:ca:a8:2a:c2:d6:b2:6d:19:92:4b:52:22:e2:5a:42:96: f4:b6:35:2d:0a:e1:4b:17:d1:8b:e4:02:8d:78:e5:94:f3:46: 21:07:56:33:50:50:2e:f6:6e:41:a6:c6:46:28:b8:3c:7e:75: f9:86:04:39:17:52:08:79:87:fb:dc:9e:8f:43:03:cc:0d:4d: 47:64:90:ab:1d:c7:c5:a6:be:06:4c:97:8e:9a:12:08:69:c3: c9:29:1c:c1:bc:8c:bc:31:b2:6b:bc:6f:82:8b:21:e1:ee:0d: 55:f9:20:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXFPBCuMYwAyqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODVkMGFkYmEtODI2Zi00ZjdhLWEwYzYtM2U0ZTVjNDZkYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9MoRM8SIGzo6fGKd0pJG+rmAGqXzDBCK+m YcGSlhI/4MaAhf+4NxJcxJKDGKQvNUCIviJFgkKn4L1BVRwZfGcPchXbQmWK8vJP 47DuNVQEHu076fhLqM+bts7o/dH6wVqHt+vnD77PNHLSG4xhey+Eyy58v4eLCAFe iw//EfrZ8n9b/4FleXyIbHDVSHAiuKZFt1J7v2Vlli2dZyJ3jxAP+AV7SRBgCBsb kj1jAYMtr/wFzGpHPDO+6EBkEKllh1cBGvavqKEITcbrX4RCs0bbFv3SHU5zOwzb fRqO1Joh2TfHzvDCdVC3g0CJ8f60M4wkarshjrP+Ufc/FuLLawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBTxRTFz1UQcvPyOZasTa3/db8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODUzNTE3ODAtNWFkOS0z OWVmLTg1ODgtMDEzZTJkNmYxZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENckjV0GLQTph8sfKEqPtFanSzlAh2L4hEJ4BF/hCWHpWHev4N7INsq T9FIZvR1/mczXlJ4L6lptu5yxvh2YH+c5Mr7sLvAnlRLEA6k7cjfPxG/mEzeBvJS yS1xCdz5yCSun706+qByj5xdRwWj7A5zoJMH73wc9/lb/LUqEt7f0AqhmmJlH9U+ ZMg38Mu3C+rsyqgqwtaybRmSS1Ii4lpClvS2NS0K4UsX0YvkAo145ZTzRiEHVjNQ UC72bkGmxkYouDx+dfmGBDkXUgh5h/vcno9DA8wNTUdkkKsdx8WmvgZMl46aEghp w8kpHMG8jLwxsmu8b4KLIeHuDVX5IME= -----END CERTIFICATE-----Generated at Sat Sep 20 00:38:33 2025 by rpki-client