$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa File: af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa (raw, json) Hash identifier: fxqiCz//eC09wZ4RPM9uIQSEbnXe39I3ucwPZXRfb/I= Subject key identifier: 9A:5E:7A:10:96:AA:F4:5F:7B:36:49:F6:D5:82:68:D6:E0:36:6F:6F Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584953C4494CB328ACC511D132A0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 202276 IP address blocks: 136.228.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:49:4c:b3:28:ac:c5:11:d1:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=ec95d8c6-61e9-4b58-9a3f-c5d6efdd35e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:f0:bf:03:80:ad:34:0f:53:97:a8:fa:63: 9a:21:93:58:12:5e:c2:19:e6:68:e2:6d:59:f7:ba: 27:1e:0e:bd:c5:f5:3c:a0:de:bd:7a:d3:62:c7:65: 1e:10:8f:e4:45:db:fa:cb:a9:9f:6e:7e:08:ff:bb: d1:ab:c1:dd:69:03:10:4f:33:90:a4:5a:2a:81:52: 9b:cf:2e:a1:cb:51:df:80:c4:a0:84:de:7b:5d:42: 37:3a:f2:b1:ae:0e:10:37:bb:b6:62:f3:84:43:49: c5:4e:0a:e4:60:06:dc:a6:c8:2c:84:fb:8c:b4:c2: e7:b6:a4:75:b9:be:e0:42:c2:48:44:02:d8:08:d9: 13:da:27:99:da:0d:eb:44:42:68:6f:27:53:b6:94: fc:fa:36:aa:51:a0:1a:e7:7e:85:86:8f:69:80:97: fc:ba:22:da:0b:00:39:d9:a7:6b:7f:cc:97:c3:e1: e9:18:43:28:ea:25:0e:25:6d:46:d5:6e:69:f2:eb: 37:e7:8d:54:81:4a:0d:8c:64:1d:11:b1:9f:aa:82: e2:a7:71:13:00:cc:16:ab:44:01:d0:58:23:49:a3: 81:ee:45:8a:fb:08:44:ba:6f:b1:29:1c:bf:fb:2b: 6a:a7:34:b6:82:59:0e:00:35:83:b3:8e:a0:2a:94: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5E:7A:10:96:AA:F4:5F:7B:36:49:F6:D5:82:68:D6:E0:36:6F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/af0f1764-f161-32ae-a10c-cd4bcb95d05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fb:58:f6:9e:65:ef:d0:06:13:b1:32:cf:59:91:30:15:17: b1:16:21:70:14:37:ce:c0:3e:51:33:5d:83:6d:ce:0a:b7:98: 67:4a:85:79:68:21:5b:75:d4:35:6c:6c:fa:2f:5b:a9:60:d7: 3c:cc:5c:d2:ed:0c:8a:4c:10:21:12:de:6e:d1:c8:85:34:78: c0:1f:75:8c:0e:12:f5:8a:ec:45:cd:e4:96:4a:b2:b3:ab:bc: c7:68:4e:9a:89:52:02:44:c1:e6:6d:46:f6:ab:0f:85:85:d2: 85:50:d1:01:66:99:dc:94:b3:77:38:b9:13:ef:a7:c6:d2:76: df:2a:47:8a:04:93:6a:58:ed:18:c5:16:f3:75:b5:5d:01:a0: 55:a9:51:33:93:10:00:35:08:c6:f3:41:5a:da:1b:34:fa:44: 04:5a:ad:1e:44:4f:55:3d:0b:ab:27:3e:de:52:56:82:08:6e: 0c:10:28:db:de:18:88:2c:42:3c:3c:47:db:4a:28:5c:11:c9: ec:b5:e9:65:e1:0b:74:b5:13:f8:b8:ae:1c:5b:32:50:1d:90: f7:d8:0f:6c:64:42:7b:33:2e:eb:95:d8:8d:04:63:a3:4e:ec: e7:99:ee:e9:c0:f3:52:03:5d:fd:51:a1:55:6d:6c:d0:48:80: 37:36:3b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxElMsyisxRHRMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWM5NWQ4YzYtNjFlOS00YjU4LTlhM2YtYzVkNmVmZGQzNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMDwvwOArTQPU5eo+mOaIZNYEl7CGeZo4m1Z 97onHg69xfU8oN69etNix2UeEI/kRdv6y6mfbn4I/7vRq8HdaQMQTzOQpFoqgVKb zy6hy1HfgMSghN57XUI3OvKxrg4QN7u2YvOEQ0nFTgrkYAbcpsgshPuMtMLntqR1 ub7gQsJIRALYCNkT2ieZ2g3rREJobydTtpT8+jaqUaAa536Fho9pgJf8uiLaCwA5 2adrf8yXw+HpGEMo6iUOJW1G1W5p8us3541UgUoNjGQdEbGfqoLip3ETAMwWq0QB 0FgjSaOB7kWK+whEum+xKRy/+ytqpzS2glkOADWDs46gKpSIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpeehCWqvRfezZJ9tWCaNbgNm9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYWYwZjE3NjQtZjE2MS0z MmFlLWExMGMtY2Q0YmNiOTVkMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz7WPaeZe/QBhOxMs9ZkTAVF7EWIXAUN87APlEzXYNtzgq3mGdKhXlo IVt11DVsbPovW6lg1zzMXNLtDIpMECES3m7RyIU0eMAfdYwOEvWK7EXN5JZKsrOr vMdoTpqJUgJEweZtRvarD4WF0oVQ0QFmmdyUs3c4uRPvp8bSdt8qR4oEk2pY7RjF FvN1tV0BoFWpUTOTEAA1CMbzQVraGzT6RARarR5ET1U9C6snPt5SVoIIbgwQKNve GIgsQjw8R9tKKFwRyey16WXhC3S1E/i4rhxbMlAdkPfYD2xkQnszLuuV2I0EY6NO 7OeZ7unA81IDXf1RoVVtbNBIgDc2OyE= -----END CERTIFICATE-----Generated at Sun Apr 6 00:04:31 2025 by rpki-client