$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa File: 80a5fef1-d368-337d-a043-77c11e4d550e.roa (raw, json) Hash identifier: pnNLvG6I7xtr1BKb1R1XwSAKt6pzSAFCoeAH+qfHnKI= Subject key identifier: FA:DF:BF:E9:BE:CD:04:1A:A9:20:02:DF:3F:32:D0:21:A2:DA:94:0D Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584DC29AE4111E5345018C824F00 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 396253 IP address blocks: 136.228.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:e4:11:1e:53:45:01:8c:82:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=9754b094-345c-4caf-9525-2ce79c0ce0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:d1:3f:af:b8:9b:93:b0:97:53:3d:6a:bd: d1:47:3d:71:9f:26:34:09:9a:8d:1b:d3:c0:58:e9: 81:65:de:8c:5e:03:30:cd:8f:b9:04:ac:84:6c:7c: 9d:8a:c0:43:37:41:a1:80:d0:0a:a7:67:71:e1:dd: 6f:38:c1:19:42:ae:3a:9c:1b:66:27:ee:4b:fd:8b: b6:a7:92:44:58:c7:0e:79:5b:8c:90:49:84:49:0b: 31:31:e8:57:6e:e5:f8:90:d3:f8:fe:59:17:f4:01: 47:8f:f5:5a:05:ec:80:bc:82:e4:01:ec:86:61:6b: 74:cf:07:26:85:55:6c:06:1f:03:ee:6e:9b:d0:00: e0:d6:09:a8:26:77:1b:2e:f6:f0:88:82:79:28:3a: 3e:28:a4:ab:d1:8a:65:dd:70:c7:ff:14:bd:92:ca: 84:a1:a1:37:ae:dd:15:8b:78:33:51:fa:da:eb:03: a1:33:e8:3f:6f:54:5c:5d:dd:42:9f:5b:ca:c3:2d: b3:df:be:3b:92:04:2f:79:13:ff:cb:e1:26:35:fd: 80:d0:70:6e:df:e2:7d:eb:b8:cf:8b:0c:8f:14:2b: 5e:91:a4:49:a3:3e:fd:4a:78:50:3b:69:1f:96:d6: 5f:7d:1f:19:f1:e8:75:31:08:04:a6:6c:df:90:0a: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DF:BF:E9:BE:CD:04:1A:A9:20:02:DF:3F:32:D0:21:A2:DA:94:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/80a5fef1-d368-337d-a043-77c11e4d550e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b2:b6:45:bc:c4:f7:f2:e1:d9:9e:ab:cf:b1:f7:44:8f:55: a1:5a:2f:24:f1:92:21:72:4b:0b:d3:61:2c:52:f4:47:db:c5: af:27:cd:27:4f:02:9c:29:b7:94:cf:11:0a:ab:7a:60:e9:f9: 3b:10:71:be:65:74:92:55:1a:c4:10:b6:8c:71:15:87:73:59: 8f:b3:b2:8e:5d:04:14:7d:fa:8f:ae:4e:c3:83:3f:65:2a:c0: 0c:4f:fd:e8:36:33:3e:7d:ed:5e:65:64:f7:a0:53:35:be:ff: 5b:2f:94:4d:cb:22:af:1b:10:c6:fd:c0:f7:91:99:d8:77:d9: 4d:44:79:e5:19:c8:94:d1:ac:d6:2d:54:68:1f:e4:b1:0b:c0: e3:1f:19:86:90:c0:d9:c4:ed:3c:75:f2:68:b5:41:a2:4c:c4: 6b:d8:ac:87:3d:66:d9:01:bf:c7:52:6d:00:6f:75:c0:1e:d0: b0:fb:2e:3f:6d:9b:87:58:c3:af:5b:2e:14:30:00:08:6c:c7: 21:b8:88:f5:99:9e:4f:f0:81:7c:97:29:71:fa:51:21:a1:7a: 21:a6:67:0e:ec:80:32:aa:7e:cf:dc:fb:cf:20:83:58:2b:87: 0f:5e:40:8f:8d:6a:66:5c:3c:e9:ac:f6:ee:97:b7:84:28:4e: 6b:b0:45:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuQRHlNFAYyCTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk OTc1NGIwOTQtMzQ1Yy00Y2FmLTk1MjUtMmNlNzljMGNlMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZTRP6+4m5Owl1M9ar3RRz1xnyY0CZqNG9PA WOmBZd6MXgMwzY+5BKyEbHydisBDN0GhgNAKp2dx4d1vOMEZQq46nBtmJ+5L/Yu2 p5JEWMcOeVuMkEmESQsxMehXbuX4kNP4/lkX9AFHj/VaBeyAvILkAeyGYWt0zwcm hVVsBh8D7m6b0ADg1gmoJncbLvbwiIJ5KDo+KKSr0Ypl3XDH/xS9ksqEoaE3rt0V i3gzUfra6wOhM+g/b1RcXd1Cn1vKwy2z3747kgQveRP/y+EmNf2A0HBu3+J967jP iwyPFCtekaRJoz79SnhQO2kfltZffR8Z8eh1MQgEpmzfkAqoRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrfv+m+zQQaqSAC3z8y0CGi2pQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODBhNWZlZjEtZDM2OC0z MzdkLWEwNDMtNzdjMTFlNGQ1NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2ytkW8xPfy4dmeq8+x90SPVaFaLyTxkiFySwvTYSxS9Efbxa8nzSdP Apwpt5TPEQqremDp+TsQcb5ldJJVGsQQtoxxFYdzWY+zso5dBBR9+o+uTsODP2Uq wAxP/eg2Mz597V5lZPegUzW+/1svlE3LIq8bEMb9wPeRmdh32U1EeeUZyJTRrNYt VGgf5LELwOMfGYaQwNnE7Tx18mi1QaJMxGvYrIc9ZtkBv8dSbQBvdcAe0LD7Lj9t m4dYw69bLhQwAAhsxyG4iPWZnk/wgXyXKXH6USGheiGmZw7sgDKqfs/c+88gg1gr hw9eQI+NamZcPOms9u6Xt4QoTmuwReM= -----END CERTIFICATE-----Generated at Wed May 13 16:08:50 2026 by rpki-client