$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa File: 410c888b-87d0-38d4-abe0-40515be0096e.roa (raw, json) Hash identifier: wkdtSMVEPqbyKpgop/zY+7aoaH6jS0N5mFTsqAWUMHA= Subject key identifier: 18:86:61:2B:3D:0C:33:CF:7F:AB:A9:80:5A:6B:04:1D:19:7D:BA:BA Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584DBD05902231E03587458B7200 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 396253 IP address blocks: 136.228.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:90:22:31:e0:35:87:45:8b:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=98e21d6f-c1da-486c-bb01-2ceeb8fdc577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:19:91:14:83:ab:76:55:db:c0:cf:d6:14:5b: d1:7b:82:60:ca:1e:a9:46:0c:54:15:83:41:60:a6: 35:19:2e:4c:97:73:a9:e0:03:64:70:0c:79:d9:a5: d6:60:8f:d0:09:fd:b8:b6:c8:99:46:74:3e:a3:75: 6e:84:13:35:21:8c:5a:33:60:5e:81:58:1f:97:10: ee:93:f2:b2:bd:43:ce:70:f9:34:a1:cd:7e:c2:5b: 49:3d:c0:09:8d:d4:e4:86:a8:3e:59:0a:db:4a:e3: 34:21:4e:d7:72:42:48:79:b7:96:45:ca:22:93:27: d3:9c:00:a2:17:91:1d:27:db:23:37:60:a8:a2:94: 23:39:9b:5c:32:c0:e1:7a:e9:7c:ce:fb:3e:44:42: 76:d1:29:c6:23:dd:59:d6:2b:f9:91:61:34:59:25: b9:c4:34:c9:99:b1:b8:11:d4:e3:99:02:fa:4d:a4: f2:a8:24:3d:45:6b:2c:73:7f:78:e9:3b:d9:b9:b4: 51:8e:a5:5a:b6:57:1b:51:81:31:c9:9d:fb:c8:12: c2:ee:98:fd:44:b5:78:76:19:6a:51:48:ef:8c:2c: 95:e9:07:3f:67:63:9d:aa:95:6e:95:3c:ec:5b:ee: ca:e4:1a:cd:2e:68:39:a8:82:0e:45:58:ab:0c:16: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:86:61:2B:3D:0C:33:CF:7F:AB:A9:80:5A:6B:04:1D:19:7D:BA:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f6:6f:bf:ba:25:42:a8:c3:82:a8:96:15:71:40:e4:cb:6e: d0:ac:7b:2c:bd:35:67:66:5f:67:6c:91:0e:0b:6c:ae:90:2f: 78:78:ae:36:e5:8b:eb:7e:5a:7e:a8:68:0b:9c:e4:5b:e8:4a: ce:fc:74:03:0d:ac:13:7a:06:35:af:73:fa:a0:f5:0a:88:fe: f5:bb:66:55:48:53:d7:1e:b2:8a:de:63:e4:a2:56:27:87:ad: 8d:5a:80:bf:69:36:d6:ec:49:fa:8d:30:b9:14:86:8a:12:c1: 26:50:bf:7a:04:fb:48:f0:1c:85:4f:fe:c1:2d:9a:82:a1:68: 9c:72:2b:d6:51:a0:86:c3:a4:3f:7d:3d:bc:ee:ad:97:65:0f: d1:1d:90:a4:0e:30:95:0c:a7:49:d6:0a:46:af:03:59:a1:de: e2:5f:c1:c7:47:8f:69:77:d3:ec:fb:be:62:79:cb:96:ae:03: 42:92:c7:a9:c3:20:f5:1c:1b:a0:86:b0:2b:43:3a:7e:dc:93: e3:b5:cd:82:9f:cb:db:2a:0d:1e:24:f5:f6:ea:40:dc:a0:e3: 05:53:09:50:74:d4:63:0d:82:58:d7:78:7e:37:5f:0c:5b:c3: ce:b1:a5:69:cf:a4:dc:34:58:38:be:42:a9:43:24:0d:ab:5f: e5:88:a3:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZAiMeA1h0WLcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk OThlMjFkNmYtYzFkYS00ODZjLWJiMDEtMmNlZWI4ZmRjNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxmRFIOrdlXbwM/WFFvRe4Jgyh6pRgxUFYNB YKY1GS5Ml3Op4ANkcAx52aXWYI/QCf24tsiZRnQ+o3VuhBM1IYxaM2BegVgflxDu k/KyvUPOcPk0oc1+wltJPcAJjdTkhqg+WQrbSuM0IU7XckJIebeWRcoikyfTnACi F5EdJ9sjN2CoopQjOZtcMsDheul8zvs+REJ20SnGI91Z1iv5kWE0WSW5xDTJmbG4 EdTjmQL6TaTyqCQ9RWssc3946TvZubRRjqVatlcbUYExyZ37yBLC7pj9RLV4dhlq UUjvjCyV6Qc/Z2OdqpVulTzsW+7K5BrNLmg5qIIORVirDBbJewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiGYSs9DDPPf6upgFprBB0Zfbq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNDEwYzg4OGItODdkMC0z OGQ0LWFiZTAtNDA1MTViZTAwOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj2b7+6JUKow4KolhVxQOTLbtCseyy9NWdmX2dskQ4LbK6QL3h4rjbl i+t+Wn6oaAuc5FvoSs78dAMNrBN6BjWvc/qg9QqI/vW7ZlVIU9cesoreY+SiVieH rY1agL9pNtbsSfqNMLkUhooSwSZQv3oE+0jwHIVP/sEtmoKhaJxyK9ZRoIbDpD99 PbzurZdlD9EdkKQOMJUMp0nWCkavA1mh3uJfwcdHj2l30+z7vmJ5y5auA0KSx6nD IPUcG6CGsCtDOn7ck+O1zYKfy9sqDR4k9fbqQNyg4wVTCVB01GMNgljXeH43Xwxb w86xpWnPpNw0WDi+QqlDJA2rX+WIo+s= -----END CERTIFICATE-----Generated at Wed May 13 15:42:55 2026 by rpki-client