$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa File: 5e0a4b4d-6867-3931-a668-268f7f2e4994.roa (raw, json) Hash identifier: MAKU/d/xfNhxqk2aYl6FEq4/QY/udnKjwbvJ0V65I0k= Subject key identifier: D8:68:74:7B:FE:A7:68:E2:BD:29:D9:D2:C0:9B:AB:A1:58:A1:0B:19 Certificate issuer: /CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72 Certificate serial: 010D0C9F4328584B2CF6E2C749AD8839B463196C Authority key identifier: 67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 88.218.35.0/24 maxlen: 24 188.241.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e2:c7:49:ad:88:39:b4:63:19:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=06af87b1-27cf-4f63-ad25-919e266c6e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:52:b2:ae:24:33:6a:89:d3:31:0b:ab:14: 21:b3:39:e8:c4:5d:b4:3e:a5:f9:4a:34:03:92:09: 42:b5:b2:c2:c9:c0:78:77:05:7d:eb:c5:a9:86:33: 7c:64:51:80:21:88:98:90:45:5d:4a:50:38:42:a0: 07:1a:a5:91:e3:33:8a:3a:a5:c0:10:02:66:c8:93: 0f:e8:a5:9b:a7:a8:2b:4c:60:d9:97:51:aa:c7:d9: 89:3c:b3:50:7c:a1:ae:09:7f:19:07:45:b9:b4:41: d7:17:94:49:a5:28:54:a4:3e:9e:a1:d3:21:46:80: b6:99:ba:5c:a5:c3:eb:64:18:42:09:a1:4f:cb:16: 6b:1d:bb:95:71:65:5e:4e:b0:27:92:31:66:86:68: f3:a4:c3:92:61:27:56:e4:09:d0:a4:41:37:cd:94: 32:18:71:51:ec:e7:49:a7:36:c0:3a:3f:6d:2d:0c: c7:97:bf:14:e0:33:de:29:3a:4a:82:ed:91:1e:ea: ab:0d:cd:f7:23:87:c6:78:f1:b0:aa:3f:10:a0:b3: 8f:e8:35:a2:a9:33:b3:0e:53:71:b5:be:db:93:c6: 35:ac:1d:7c:99:44:bd:28:3d:46:6b:27:af:d8:24: 40:39:b4:a2:8a:56:8b:83:0e:89:68:88:49:82:d2: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:74:7B:FE:A7:68:E2:BD:29:D9:D2:C0:9B:AB:A1:58:A1:0B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl X509v3 Authority Key Identifier: keyid:67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer sbgp-ipAddrBlock: critical IPv4: 88.218.35.0/24 188.241.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:33:59:48:4e:06:2e:ae:29:ce:0d:3a:f9:ab:dc:8e:f7:1d: 49:a7:f5:68:14:7a:26:e0:b1:8c:bb:0e:7b:a9:3b:6d:e9:26: f6:2c:9b:3e:27:4b:f8:71:4d:9f:de:2a:8c:2c:98:5a:e8:c6: fa:1a:cf:cd:34:de:a7:c1:24:77:24:d0:72:df:fa:2d:a7:14: 3c:20:9a:e6:6f:b2:68:7a:a4:ad:e1:69:e4:65:08:52:17:ac: 53:25:a6:d1:d6:60:16:c5:4b:2c:87:b8:b1:1a:29:79:47:95: f1:15:a7:00:bd:d1:95:f6:b7:82:f6:0b:ee:89:10:e2:29:cf: 08:dd:51:6b:4a:33:5c:f4:00:b4:cb:03:6d:f5:f8:91:7d:4a: 7c:ff:d8:7d:e7:ed:4e:36:d2:53:4d:82:46:d3:4d:d2:84:e2: 07:19:5c:41:28:43:c9:5e:39:17:1f:65:f2:06:d0:af:15:eb: 09:df:03:ba:e5:a7:39:de:0c:c3:a0:0b:23:e3:94:38:e1:89: 3d:44:f8:cc:b4:ae:8e:ee:23:0d:eb:e0:fd:92:79:e7:ec:be: 78:7e:bd:83:ff:60:df:e6:87:33:1a:1e:83:e2:57:57:50:24: d8:da:5f:e9:93:14:27:06:32:78:84:1b:d2:1a:8f:25:fa:ca: a9:43:09:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEss9uLHSa2IObRjGWwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzYTQxNmYtNmYzNi00NGM2LTg0ZWYtOGQ1MzE0YjEw YTcyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDZhZjg3YjEtMjdjZi00ZjYzLWFkMjUtOTE5ZTI2NmM2ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwBSsq4kM2qJ0zELqxQhsznoxF20PqX5SjQD kglCtbLCycB4dwV968WphjN8ZFGAIYiYkEVdSlA4QqAHGqWR4zOKOqXAEAJmyJMP 6KWbp6grTGDZl1Gqx9mJPLNQfKGuCX8ZB0W5tEHXF5RJpShUpD6eodMhRoC2mbpc pcPrZBhCCaFPyxZrHbuVcWVeTrAnkjFmhmjzpMOSYSdW5AnQpEE3zZQyGHFR7OdJ pzbAOj9tLQzHl78U4DPeKTpKgu2RHuqrDc33I4fGePGwqj8QoLOP6DWiqTOzDlNx tb7bk8Y1rB18mUS9KD1Gayev2CRAObSiilaLgw6JaIhJgtJHkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNhodHv+p2jivSnZ0sCbq6FYoQsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZTNh NDE2Zi02ZjM2LTQ0YzYtODRlZi04ZDUzMTRiMTBhNzIvNWUwYTRiNGQtNjg2Ny0z OTMxLWE2NjgtMjY4ZjdmMmU0OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2UzYTQxNmYtNmYzNi00NGM2LTg0 ZWYtOGQ1MzE0YjEwYTcyLzNlM2E0MTZmLTZmMzYtNDRjNi04NGVmLThkNTMxNGIx MGE3Mi5jcmwwHwYDVR0jBBgwFoAUZ5zppAiCqwb8ORObK2jcJYdA8pswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZTNhNDE2Zi02ZjM2LTQ0YzYtODRlZi04ZDUz MTRiMTBhNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNojAwQA vPHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL4zWUhOBi6uKc4NOvmr3I73HUmn9WgUeibgsYy7DnupO23p JvYsmz4nS/hxTZ/eKowsmFroxvoaz8003qfBJHck0HLf+i2nFDwgmuZvsmh6pK3h aeRlCFIXrFMlptHWYBbFSyyHuLEaKXlHlfEVpwC90ZX2t4L2C+6JEOIpzwjdUWtK M1z0ALTLA231+JF9Snz/2H3n7U420lNNgkbTTdKE4gcZXEEoQ8leORcfZfIG0K8V 6wnfA7rlpzneDMOgCyPjlDjhiT1E+My0ro7uIw3r4P2Seefsvnh+vYP/YN/mhzMa HoPiV1dQJNjaX+mTFCcGMniEG9IajyX6yqlDCWM= -----END CERTIFICATE-----Generated at Wed Sep 17 00:25:01 2025 by rpki-client