$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa File: b5345dc5-a721-346f-a285-62853822bb1b.roa (raw, json) Hash identifier: 6hGCE7fxEtWQdOHUXSee0zAmznqikReFauoPeX+Q01A= Subject key identifier: 27:96:47:77:AA:0F:B8:3F:83:46:40:EC:06:16:D2:72:F2:56:3A:71 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D3F64D3AA936221676E547FC0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 137922 IP address blocks: 136.228.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d3:aa:93:62:21:67:6e:54:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=c9d370fd-50ae-4432-92d4-cc67e23b0ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:cc:fb:f6:00:79:44:20:a8:8a:0a:3b:67: 7c:f1:47:84:62:45:51:da:38:b9:db:af:08:55:65: 76:23:45:d4:68:11:06:93:da:d1:a8:c8:9b:3d:16: b0:21:84:67:f1:4c:34:41:da:f7:ba:63:1f:80:b7: 43:31:34:ab:d4:8e:2d:10:28:b6:e2:0a:2e:47:49: 9b:11:6a:e8:28:3c:db:78:95:83:15:ba:e3:21:ff: 30:1c:61:f9:81:ce:bb:ac:99:15:26:f4:59:ce:e1: bd:ed:b4:3f:e1:01:22:17:26:bc:62:37:8e:08:f2: 0f:7b:6b:04:c0:92:53:eb:d1:62:df:5e:da:57:14: 47:0e:92:00:16:c0:07:65:bd:04:0d:a5:4b:00:ad: c5:25:f8:c2:c5:b1:a8:7b:16:35:e8:33:8a:43:a3: b0:ef:14:25:df:5e:b3:3d:3f:5f:5c:c7:7b:44:4c: b2:d5:7e:38:90:f8:e4:9e:f9:04:47:3b:9e:00:7e: dd:66:42:54:25:02:00:d2:97:d1:73:04:31:f8:fb: 5b:76:24:ba:53:22:ef:80:06:81:97:4e:59:a5:00: 00:f5:a4:e3:a5:f5:61:07:a7:6d:79:d7:59:6d:62: 20:81:eb:47:e0:73:9d:1b:ed:ec:4f:5d:aa:ee:e6: 79:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:47:77:AA:0F:B8:3F:83:46:40:EC:06:16:D2:72:F2:56:3A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d6:24:58:95:49:a3:9a:1f:4e:d8:b4:12:4a:30:e9:11:10: 6b:08:8c:91:19:f6:ac:a8:90:6f:9c:a0:98:a2:f4:d5:2d:07: d7:04:8f:35:e6:63:29:d1:fa:9d:de:7f:36:26:97:ab:73:e0: d2:a8:c7:bf:95:22:80:de:eb:e5:a9:7d:6f:df:1f:ae:d7:d7: 3e:f3:84:cd:d4:15:ec:ea:21:38:29:ef:11:49:66:b7:b9:3a: 1e:a0:ba:e7:47:56:0e:a7:24:00:01:fa:05:47:e0:03:3e:38: 68:01:90:21:67:34:25:2f:ce:37:8b:31:42:0f:6d:94:57:50: a5:1d:57:29:ea:c8:e2:1e:5f:9b:3e:8e:43:d3:8d:83:1a:5a: aa:d6:b4:89:ee:e3:ef:89:ec:c8:2c:8f:f0:65:82:e4:80:60: fa:fa:b9:cb:ed:30:31:92:60:58:ba:53:e4:f4:50:be:b8:5f: 2e:f8:56:f6:42:d1:e9:ad:57:1a:c1:b8:15:43:11:76:ca:2c: 45:39:69:9a:b5:f3:3c:b4:6a:a8:af:99:fb:8d:b6:29:a6:3e: 23:82:b5:60:b1:46:47:6a:b4:6a:14:fe:59:73:cf:83:b1:9d: dd:8b:fb:63:4e:b0:fb:34:c2:6a:ea:b3:db:4b:d9:63:65:2a: 2d:0e:f7:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNOqk2IhZ25Uf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YzlkMzcwZmQtNTBhZS00NDMyLTkyZDQtY2M2N2UyM2IwZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNXM+/YAeUQgqIoKO2d88UeEYkVR2ji5268I VWV2I0XUaBEGk9rRqMibPRawIYRn8Uw0Qdr3umMfgLdDMTSr1I4tECi24gouR0mb EWroKDzbeJWDFbrjIf8wHGH5gc67rJkVJvRZzuG97bQ/4QEiFya8YjeOCPIPe2sE wJJT69Fi317aVxRHDpIAFsAHZb0EDaVLAK3FJfjCxbGoexY16DOKQ6Ow7xQl316z PT9fXMd7REyy1X44kPjknvkERzueAH7dZkJUJQIA0pfRcwQx+PtbdiS6UyLvgAaB l05ZpQAA9aTjpfVhB6dteddZbWIggetH4HOdG+3sT12q7uZ5qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeWR3eqD7g/g0ZA7AYW0nLyVjpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYjUzNDVkYzUtYTcyMS0z NDZmLWEyODUtNjI4NTM4MjJiYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOTmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDWJFiVSaOaH07YtBJKMOkREGsIjJEZ9qyokG+coJii9NUtB9cEjzXm YynR+p3efzYml6tz4NKox7+VIoDe6+WpfW/fH67X1z7zhM3UFezqITgp7xFJZre5 Oh6guudHVg6nJAAB+gVH4AM+OGgBkCFnNCUvzjeLMUIPbZRXUKUdVynqyOIeX5s+ jkPTjYMaWqrWtInu4++J7Mgsj/BlguSAYPr6ucvtMDGSYFi6U+T0UL64Xy74VvZC 0emtVxrBuBVDEXbKLEU5aZq18zy0aqivmfuNtimmPiOCtWCxRkdqtGoU/llzz4Ox nd2L+2NOsPs0wmrqs9tL2WNlKi0O99E= -----END CERTIFICATE-----Generated at Thu Mar 26 20:11:21 2026 by rpki-client