$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa File: aaa144f2-cbcb-3cce-9036-1350d18085ff.roa (raw, json) Hash identifier: 8J4093/u/G/88wS+SGwoU4fr+MeIV4Q/gLpgAMVSwZg= Subject key identifier: 0F:E3:7B:94:DE:88:6C:5E:2D:89:AB:45:0B:EE:C0:76:48:12:50:E1 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F31B7BD52AD063777C5404600 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 202276 IP address blocks: 136.228.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bd:52:ad:06:37:77:c5:40:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=02d6265d-a0ff-4ea5-8dee-c1e70cc06a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:e0:ab:fb:47:eb:2a:dd:ae:95:10:23:cd: bf:99:81:2d:5f:d9:d4:f5:71:c1:c6:e0:86:5d:cb: 97:5d:ed:3c:29:a1:fe:a4:f3:1f:cc:a1:a3:26:38: 1e:02:79:ec:69:95:ea:15:29:72:67:8e:4a:22:fb: 62:d1:f8:7f:5d:51:f4:07:35:82:99:45:d4:13:c3: 40:58:df:95:4a:fd:61:a6:a1:a9:e1:6f:b7:4e:41: f1:15:84:9b:45:81:4b:1e:e1:e8:66:f7:53:40:26: d9:2a:f5:92:aa:b2:a7:06:2e:08:e6:25:69:54:14: bc:d8:01:b8:a5:a4:36:39:64:56:bb:21:19:2a:70: 32:d1:89:88:dd:8c:35:bc:77:68:21:07:c8:e7:e6: 4e:a3:2a:2e:6e:ad:45:4e:a6:01:d4:66:8c:45:8f: 9a:70:0f:73:80:b7:ea:44:ef:fc:7c:3d:47:c6:30: 5b:96:1c:ca:d9:6b:24:e4:78:f1:71:37:d5:c6:b8: 5d:b3:d3:f9:de:76:e6:80:d8:ff:3c:76:ff:e0:0a: c0:3e:6b:16:6c:83:35:32:78:78:e8:21:b9:9d:20: 01:8b:eb:bd:ba:09:fb:1b:2a:9d:b9:66:c3:1d:a4: 0a:e8:a4:90:69:2a:b4:a1:77:38:f3:52:24:da:45: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E3:7B:94:DE:88:6C:5E:2D:89:AB:45:0B:EE:C0:76:48:12:50:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/aaa144f2-cbcb-3cce-9036-1350d18085ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d1:c1:f3:30:24:2b:ac:3a:94:85:53:0f:8d:5e:73:a0:4e: f8:d0:4a:7b:3c:95:c0:6f:ef:a8:57:80:59:ee:42:cc:1f:68: 18:57:79:31:4f:2b:f8:ff:a1:5a:bf:d3:6d:90:0f:f6:93:18: 4c:76:ee:d6:97:5e:33:e6:d5:4c:88:c9:15:1f:19:b2:5a:0b: a9:94:f8:9b:ef:40:a7:ed:97:9e:88:36:24:8a:2d:c4:d8:35: b9:cd:cf:3b:68:e6:48:38:7c:72:06:ee:01:08:52:c4:93:d3: 75:61:65:9a:d1:f7:70:8c:84:d0:7a:00:d6:63:d7:08:98:02: 20:27:d5:88:34:bb:83:f2:26:30:87:59:80:24:1c:26:ea:90: fb:f2:87:7b:ba:a7:55:5b:cb:da:71:f8:25:dc:1c:82:24:70: 72:d2:02:a9:63:1b:35:0d:0e:1a:32:fc:fb:c3:f2:06:1f:be: e4:d1:02:88:64:a3:b5:db:0b:52:e7:73:b1:41:79:54:ab:50: 66:99:21:fb:45:80:69:4d:e0:21:2c:64:e9:95:0f:c3:be:21: 5f:7a:6b:fe:27:86:e1:ca:4e:4f:12:36:97:6f:a8:73:b9:58: b0:b0:86:75:4b:11:be:2c:4a:3a:4b:df:47:91:4f:31:06:58: c3:ce:9c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt71SrQY3d8VARgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MDJkNjI2NWQtYTBmZi00ZWE1LThkZWUtYzFlNzBjYzA2YTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU/gq/tH6yrdrpUQI82/mYEtX9nU9XHBxuCG XcuXXe08KaH+pPMfzKGjJjgeAnnsaZXqFSlyZ45KIvti0fh/XVH0BzWCmUXUE8NA WN+VSv1hpqGp4W+3TkHxFYSbRYFLHuHoZvdTQCbZKvWSqrKnBi4I5iVpVBS82AG4 paQ2OWRWuyEZKnAy0YmI3Yw1vHdoIQfI5+ZOoyoubq1FTqYB1GaMRY+acA9zgLfq RO/8fD1HxjBblhzK2Wsk5HjxcTfVxrhds9P53nbmgNj/PHb/4ArAPmsWbIM1Mnh4 6CG5nSABi+u9ugn7GyqduWbDHaQK6KSQaSq0oXc481Ik2kWOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/je5TeiGxeLYmrRQvuwHZIElDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYWFhMTQ0ZjItY2JjYi0z Y2NlLTkwMzYtMTM1MGQxODA4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/RwfMwJCusOpSFUw+NXnOgTvjQSns8lcBv76hXgFnuQswfaBhXeTFP K/j/oVq/022QD/aTGEx27taXXjPm1UyIyRUfGbJaC6mU+JvvQKftl56INiSKLcTY NbnNzzto5kg4fHIG7gEIUsST03VhZZrR93CMhNB6ANZj1wiYAiAn1Yg0u4PyJjCH WYAkHCbqkPvyh3u6p1Vby9px+CXcHIIkcHLSAqljGzUNDhoy/PvD8gYfvuTRAohk o7XbC1Lnc7FBeVSrUGaZIftFgGlN4CEsZOmVD8O+IV96a/4nhuHKTk8SNpdvqHO5 WLCwhnVLEb4sSjpL30eRTzEGWMPOnHc= -----END CERTIFICATE-----Generated at Sun Sep 27 01:20:58 2026 by rpki-client