
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
File: b0de3829-996c-3682-a413-a04ea7aae3cd.roa (raw, json)
Hash identifier: TRQ6WKcdJF//l9EHBlsUhu359SMHbP10LwOlm3Dw6Qo=
Subject key identifier: 9D:EA:28:2E:00:AF:49:4A:EF:8A:9D:E6:0B:7B:0E:87:9B:76:DF:3A
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F4328584F5A32DC506328FAF2B9A66C00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 396253
IP address blocks: 136.228.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:32:dc:50:63:28:fa:f2:b9:a6:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=eaf0ac79-f516-44cc-9935-a20ac53a0659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:fe:ab:d1:f7:e3:23:64:92:38:85:1f:e9:
77:19:4c:05:c2:bf:40:fe:26:1a:fa:74:d3:37:65:
22:2c:f2:ae:74:85:a0:90:84:ab:d8:70:b6:8e:2c:
37:18:6d:29:af:f9:d3:2d:31:24:45:e8:6d:cf:db:
fd:e7:34:1f:24:af:0f:5d:16:b4:14:93:b6:fd:4e:
83:3a:06:f6:4c:9a:0b:89:54:b3:32:38:2b:07:72:
c9:23:b9:ba:43:23:73:00:73:2a:e7:c6:26:2f:18:
05:33:b0:42:f9:bf:84:5c:fe:f8:dd:e8:54:38:aa:
64:68:13:2c:7d:c7:55:e3:ec:4b:53:01:34:e9:19:
22:b2:62:79:32:42:6e:bc:f7:fd:20:ca:29:a4:f5:
a0:00:4e:18:3e:c5:47:87:80:98:8c:57:6e:13:63:
b4:a1:97:47:16:a4:5e:a0:16:27:5e:df:9e:d9:cf:
37:79:12:04:d2:8e:cb:ce:7a:7f:f1:1f:6c:aa:1d:
3c:0e:a8:39:3c:92:83:ee:ba:a7:f0:be:38:32:3b:
19:e6:a6:23:fe:fb:2a:c5:75:a5:91:b4:c6:7f:c2:
8c:09:f0:5c:d3:14:37:0d:02:02:e9:f9:cc:04:3f:
7a:a4:37:e4:9a:a8:9a:38:5d:20:3a:64:f1:e6:2d:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:28:2E:00:AF:49:4A:EF:8A:9D:E6:0B:7B:0E:87:9B:76:DF:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b0de3829-996c-3682-a413-a04ea7aae3cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:f1:49:60:e0:16:cf:8f:7a:19:b1:e1:f6:e3:30:68:68:14:
ed:fd:da:ee:73:2b:85:12:07:47:9b:29:2d:38:f5:70:9a:7f:
b6:95:06:91:63:84:f7:be:80:d5:d8:dd:bd:2e:74:c2:79:41:
a5:c6:74:ae:f8:26:a1:47:46:77:41:c0:3a:e4:18:12:2e:99:
c6:53:07:f9:98:19:39:fb:30:0f:a0:bc:f2:66:ae:45:4f:0a:
94:83:9b:c2:13:ed:37:e9:21:c2:d7:32:46:57:92:01:17:b4:
b0:a8:5e:3e:44:e1:fb:41:da:75:a9:2f:94:a2:ff:e1:8c:ee:
6a:4d:7f:0a:70:27:8c:19:77:2c:14:97:9b:37:d1:6c:65:12:
34:07:9a:bd:0a:80:b3:b9:0d:2a:42:7e:ae:19:89:88:52:89:
46:70:ed:f1:7b:47:db:e6:da:4a:68:d1:df:6b:bd:68:02:3c:
63:98:82:50:76:14:d1:58:79:89:a2:69:e3:38:62:1a:90:ae:
21:90:d9:42:22:ac:d6:05:8a:8c:eb:a3:5b:c1:3b:49:d6:6b:
f2:15:be:5f:1b:d0:d7:55:36:f6:81:c9:dd:a2:eb:df:eb:41:
b2:3d:e2:ef:ab:f0:b0:ab:4a:30:59:ba:be:a8:9b:44:3c:15:
52:15:0f:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtxQYyj68rmmbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWFmMGFjNzktZjUxNi00NGNjLTk5MzUtYTIwYWM1M2EwNjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qf+q9H34yNkkjiFH+l3GUwFwr9A/iYa+nTT
N2UiLPKudIWgkISr2HC2jiw3GG0pr/nTLTEkRehtz9v95zQfJK8PXRa0FJO2/U6D
Ogb2TJoLiVSzMjgrB3LJI7m6QyNzAHMq58YmLxgFM7BC+b+EXP743ehUOKpkaBMs
fcdV4+xLUwE06RkismJ5MkJuvPf9IMoppPWgAE4YPsVHh4CYjFduE2O0oZdHFqRe
oBYnXt+e2c83eRIE0o7Lznp/8R9sqh08Dqg5PJKD7rqn8L44MjsZ5qYj/vsqxXWl
kbTGf8KMCfBc0xQ3DQIC6fnMBD96pDfkmqiaOF0gOmTx5i0Z/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3qKC4Ar0lK74qd5gt7Doebdt86MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYjBkZTM4MjktOTk2Yy0z
NjgyLWE0MTMtYTA0ZWE3YWFlM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiOTIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXxSWDgFs+Pehmx4fbjMGhoFO392u5zK4USB0ebKS049XCaf7aVBpFj
hPe+gNXY3b0udMJ5QaXGdK74JqFHRndBwDrkGBIumcZTB/mYGTn7MA+gvPJmrkVP
CpSDm8IT7TfpIcLXMkZXkgEXtLCoXj5E4ftB2nWpL5Si/+GM7mpNfwpwJ4wZdywU
l5s30WxlEjQHmr0KgLO5DSpCfq4ZiYhSiUZw7fF7R9vm2kpo0d9rvWgCPGOYglB2
FNFYeYmiaeM4YhqQriGQ2UIirNYFiozro1vBO0nWa/IVvl8b0NdVNvaByd2i69/r
QbI94u+r8LCrSjBZur6om0Q8FVIVD2E=
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:13:00 2026 by rpki-client