
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
File: 0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa (raw, json)
Hash identifier: zLMMzf+DPFkdrQ4vJBbd8806x1Gz1zHnS6xJUdMG3DA=
Subject key identifier: 35:D6:C0:61:26:97:D7:EB:64:DA:26:A5:A4:2D:6C:D8:BB:43:37:4D
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584DAF101A21C85CF44270346A40
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
Signing time: Fri 01 May 2026 01:00:24 +0000
ROA not before: Fri 01 May 2026 01:00:24 +0000
ROA not after: Thu 30 Jul 2026 01:00:24 +0000
asID: 202276
IP address blocks: 136.228.221.0/24 maxlen: 24
136.228.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:af:10:1a:21:c8:5c:f4:42:70:34:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: May 1 01:00:24 2026 GMT
Not After : Jul 30 01:00:24 2026 GMT
Subject: CN=06cef6c9-9cb5-4c77-bcbb-03eb1d1e560b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:80:a0:8d:24:3d:54:7b:63:ed:ef:24:d8:
64:6b:e5:ac:b0:3a:01:a1:0b:df:c3:4e:40:d2:15:
28:bf:aa:81:4a:7f:2b:61:d8:8d:de:ff:98:c6:f0:
09:9b:2a:6e:2b:1d:24:45:fc:a4:81:34:b8:4e:f1:
d4:a5:39:e9:2f:08:46:48:e3:a4:9c:96:bd:ae:a6:
43:b2:26:62:70:6f:34:19:22:a1:74:07:9a:06:92:
b1:eb:aa:cc:ee:b4:bc:cf:79:fa:ab:d1:09:14:87:
1a:a9:fd:07:cf:0a:41:6b:bc:b1:5b:88:24:ef:e4:
62:9f:94:23:9b:78:ae:91:7b:18:3a:7d:1b:c2:34:
e1:5c:c3:bf:c8:af:49:9c:80:52:4a:7a:5a:a5:6e:
f0:45:27:86:c7:10:13:52:9d:64:64:fa:ab:db:2d:
c6:a9:61:1c:b0:a8:6d:83:85:02:90:74:0d:d1:f6:
d5:e0:58:f1:1c:99:aa:cf:93:4f:5c:50:39:54:29:
80:28:c6:6c:41:67:7a:72:44:4a:b3:58:45:1e:3e:
b0:b1:43:9e:f0:7b:24:6b:84:b1:93:7f:74:ac:73:
6b:f3:6f:24:0f:a9:0b:99:64:1e:6d:9b:7e:af:df:
9d:4b:63:60:1c:6d:43:e5:a4:77:b8:42:01:cd:6f:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D6:C0:61:26:97:D7:EB:64:DA:26:A5:A4:2D:6C:D8:BB:43:37:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.221.0/24
136.228.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:fe:f0:b2:b2:e0:ac:c2:c1:1e:1d:16:f0:a2:75:80:6a:c9:
ae:98:b6:38:ea:25:f6:bd:67:c0:bb:74:44:f8:3f:5b:34:29:
ee:04:ba:cb:d2:8c:8e:91:2e:0a:89:01:de:2f:54:ee:92:d0:
0d:fc:be:24:95:8d:c7:b3:a1:21:93:d6:2c:00:66:81:31:2a:
9d:df:3f:d5:12:3b:a2:ab:cb:29:ab:2a:99:8b:8b:00:90:72:
ed:e6:9b:af:a4:35:25:92:a4:8a:9d:11:1c:b0:59:8f:82:d7:
f6:43:3d:4c:9b:ab:f7:07:aa:b9:7c:44:c9:80:39:82:54:9b:
5f:55:26:11:61:5b:62:51:10:25:c9:4d:1f:97:e3:c6:40:2b:
2c:8f:61:66:4a:5c:7b:42:14:54:82:de:e7:5b:b9:8a:18:d1:
e2:1a:1f:08:de:de:4d:12:a0:34:db:51:4c:d3:37:3e:a8:de:
34:f7:b3:e0:85:0c:87:b2:aa:cc:dc:83:26:ac:85:d9:11:07:
43:32:f1:29:34:ae:60:d6:fe:e6:ac:20:1b:c0:fd:4d:23:09:
11:3e:72:81:12:3f:21:f1:40:6f:25:7e:dd:bd:0a:db:5b:25:
95:e3:59:44:57:36:75:4f:5f:ad:e1:ef:28:2d:40:b7:d0:3b:
cc:a9:2d:31
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2vEBohyFz0QnA0akAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk
MDZjZWY2YzktOWNiNS00Yzc3LWJjYmItMDNlYjFkMWU1NjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqqAoI0kPVR7Y+3vJNhka+WssDoBoQvfw05A
0hUov6qBSn8rYdiN3v+YxvAJmypuKx0kRfykgTS4TvHUpTnpLwhGSOOknJa9rqZD
siZicG80GSKhdAeaBpKx66rM7rS8z3n6q9EJFIcaqf0HzwpBa7yxW4gk7+Rin5Qj
m3iukXsYOn0bwjThXMO/yK9JnIBSSnpapW7wRSeGxxATUp1kZPqr2y3GqWEcsKht
g4UCkHQN0fbV4FjxHJmqz5NPXFA5VCmAKMZsQWd6ckRKs1hFHj6wsUOe8Hska4Sx
k390rHNr828kD6kLmWQebZt+r9+dS2NgHG1D5aR3uEIBzW+eRwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDXWwGEml9frZNompaQtbNi7QzdNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFlMTVkNDktZTUxMy0z
NzQ1LWIzZjktNjZlYmM2NGEyYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiOTdAwQA
iOTwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAD7+8LKy4KzCwR4dFvCidYBqya6YtjjqJfa9Z8C7dET4P1s0
Ke4EusvSjI6RLgqJAd4vVO6S0A38viSVjcezoSGT1iwAZoExKp3fP9USO6Kryymr
KpmLiwCQcu3mm6+kNSWSpIqdERywWY+C1/ZDPUybq/cHqrl8RMmAOYJUm19VJhFh
W2JRECXJTR+X48ZAKyyPYWZKXHtCFFSC3udbuYoY0eIaHwje3k0SoDTbUUzTNz6o
3jT3s+CFDIeyqszcgyashdkRB0My8Sk0rmDW/uasIBvA/U0jCRE+coESPyHxQG8l
ft29CttbJZXjWURXNnVPX63h7ygtQLfQO8ypLTE=
-----END CERTIFICATE-----
Generated at Wed May 13 09:06:25 2026 by rpki-client