$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa File: 40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa (raw, json) Hash identifier: uR0DVHFQVKdxRU5IfXPhx9E9OEPpBiLpn51ntK3b+vQ= Subject key identifier: 9B:D9:FA:DF:E4:D5:B5:1A:E2:CE:63:62:0A:A1:05:53:7F:50:64:76 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584DC29AE400528C7708DE53BB80 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 137922 IP address blocks: 136.228.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:e4:00:52:8c:77:08:de:53:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=8fd94ace-fa82-455e-bde2-d17911bf86ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:4c:4f:ae:3d:08:f9:2d:f1:a2:64:a1:a1: 23:1a:52:22:2f:cb:88:0a:e7:a3:7f:9e:45:aa:e2: f1:30:1a:d2:60:3c:05:fe:8f:8e:91:3d:06:d5:a5: 47:4d:a8:8d:01:c8:d1:35:58:e0:aa:86:43:30:0b: 35:6b:4a:07:79:c1:b1:3c:07:8a:a9:45:50:2b:48: ed:46:e4:69:4d:ee:a0:93:fd:2b:3d:f0:1b:de:cd: 57:02:74:a8:b3:53:ce:1b:e8:1e:54:3d:53:2d:e3: a4:db:3f:87:b0:b3:63:7f:11:90:21:f9:ba:da:5d: cc:7e:d0:3b:6d:74:67:07:82:c2:d8:33:34:16:2a: 30:ea:ef:47:e2:1c:fa:dc:00:5e:d4:31:cc:5e:94: bb:11:bb:30:ed:49:82:db:b3:dd:02:86:31:f9:ff: 27:21:ca:e9:81:6f:d7:08:96:19:02:5d:d5:c1:00: ae:4d:27:70:37:9d:40:ff:70:d2:5e:25:f7:42:e4: 0e:d7:da:1f:ec:97:01:01:e7:28:f8:dd:b6:cd:8e: 39:6e:d6:35:9d:00:fd:98:91:57:85:b8:ae:37:bc: 19:4f:51:1f:b6:b9:9e:79:bb:20:69:4a:54:c3:f7: 44:c4:21:79:f6:10:c7:65:ba:d0:01:59:1c:de:3f: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D9:FA:DF:E4:D5:B5:1A:E2:CE:63:62:0A:A1:05:53:7F:50:64:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/40d309ca-6f78-34ed-8d85-31d8b7e2e50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:88:28:4d:76:8f:4e:6b:a5:a2:9b:74:fb:4b:00:1f:a5:8b: 2c:32:3b:9d:02:27:1b:9c:a3:17:14:37:da:9d:ee:8e:17:8b: 4f:53:71:ea:7c:89:28:1a:d7:36:20:4e:33:e8:d0:c8:1a:9b: b3:b8:a9:3e:ef:e4:6b:fd:1b:bc:26:28:fa:ad:21:c3:f4:bd: e6:0c:2d:ab:7b:c9:80:eb:2d:cb:d2:9b:51:d8:e0:fd:db:e6: 5a:5f:e3:6c:90:48:f6:e9:7b:00:27:1d:5f:73:00:9b:51:0e: af:63:14:af:12:94:5f:63:7e:01:89:63:eb:19:27:0e:f6:39: 12:6c:1a:ad:b8:95:cf:a3:a2:6f:4f:07:a8:fa:57:3f:7c:21: 9b:ac:59:4f:72:e5:f6:ba:f9:9e:d1:b2:62:2c:d6:e1:8c:fb: 62:01:d4:d0:e2:9e:3a:f2:4f:8c:6f:88:0c:85:c2:56:27:5b: 2f:9a:54:11:61:05:e8:8d:60:43:2e:03:b1:9e:f8:94:07:ff: 1c:45:d9:a4:cc:0d:fc:4c:71:97:6a:5a:b4:cb:14:10:f4:e1: 0f:43:89:3c:ea:65:76:20:74:bf:f1:1b:dc:52:de:65:30:cd: bb:99:e3:42:26:8e:4f:8a:69:50:12:69:e4:bd:4b:10:66:48: 80:86:12:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuQAUox3CN5Tu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk OGZkOTRhY2UtZmE4Mi00NTVlLWJkZTItZDE3OTExYmY4NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiFMT649CPkt8aJkoaEjGlIiL8uICuejf55F quLxMBrSYDwF/o+OkT0G1aVHTaiNAcjRNVjgqoZDMAs1a0oHecGxPAeKqUVQK0jt RuRpTe6gk/0rPfAb3s1XAnSos1POG+geVD1TLeOk2z+HsLNjfxGQIfm62l3MftA7 bXRnB4LC2DM0Fiow6u9H4hz63ABe1DHMXpS7Ebsw7UmC27PdAoYx+f8nIcrpgW/X CJYZAl3VwQCuTSdwN51A/3DSXiX3QuQO19of7JcBAeco+N22zY45btY1nQD9mJFX hbiuN7wZT1EftrmeebsgaUpUw/dExCF59hDHZbrQAVkc3j9uqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvZ+t/k1bUa4s5jYgqhBVN/UGR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNDBkMzA5Y2EtNmY3OC0z NGVkLThkODUtMzFkOGI3ZTJlNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+IKE12j05rpaKbdPtLAB+liywyO50CJxucoxcUN9qd7o4Xi09Tcep8 iSga1zYgTjPo0Mgam7O4qT7v5Gv9G7wmKPqtIcP0veYMLat7yYDrLcvSm1HY4P3b 5lpf42yQSPbpewAnHV9zAJtRDq9jFK8SlF9jfgGJY+sZJw72ORJsGq24lc+jom9P B6j6Vz98IZusWU9y5fa6+Z7RsmIs1uGM+2IB1NDinjryT4xviAyFwlYnWy+aVBFh BeiNYEMuA7Ge+JQH/xxF2aTMDfxMcZdqWrTLFBD04Q9DiTzqZXYgdL/xG9xS3mUw zbuZ40Imjk+KaVASaeS9SxBmSICGEpI= -----END CERTIFICATE-----Generated at Wed May 13 12:17:37 2026 by rpki-client