$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa File: ca8043ea-396c-309b-a025-9ec7cd6f267f.roa (raw, json) Hash identifier: HSLSOqZYoygXRwIKglKOPoxUMUYelKM3OAgYn3dkBUs= Subject key identifier: F4:21:A3:8C:10:22:74:28:54:2C:F3:F0:AF:B4:0A:D1:4E:9C:F7:70 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584DB1DAC7B1BDAB1BA476EDE5C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 137922 IP address blocks: 136.228.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:c7:b1:bd:ab:1b:a4:76:ed:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=d03dcc8f-a5b8-419e-aebc-d8ff26709f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:ab:da:89:a4:a6:05:c9:5c:32:86:48:87: 57:24:6d:2d:f6:e9:2f:a6:b9:73:b7:0e:43:3a:22: c8:e6:6d:45:0f:bd:fa:1c:1e:4e:41:6d:ce:ac:8d: 91:08:0b:cb:d7:ea:a2:54:70:c0:e1:f4:04:e2:12: da:db:f6:f1:d5:7d:53:b7:06:3c:b3:39:d7:3b:78: a5:c8:84:df:75:69:a4:98:10:fd:98:6c:5d:69:8f: ac:99:59:6d:53:1d:de:cb:a2:38:bc:b9:ee:74:21: a1:c9:67:24:81:43:e0:03:ae:e9:4d:40:68:26:9a: 0e:8d:0a:0d:5c:9b:35:52:45:d3:44:9e:55:93:e5: b2:83:9c:ff:49:41:ef:ac:4a:5c:33:78:c3:79:85: 1b:0e:b0:85:76:08:35:56:4e:68:cc:c8:36:ad:e7: 91:9f:41:a2:07:c2:8c:a4:a4:81:58:ee:ed:e2:73: 77:a0:7f:e5:4d:40:4f:14:06:ac:09:ec:d5:f5:30: 40:45:9e:46:83:4b:f9:e3:d9:76:15:39:2e:f5:22: 01:dd:68:d5:89:4e:4d:93:fa:b2:ff:a3:f3:34:9f: 3d:50:fa:19:b6:96:6b:1c:86:84:67:9e:c3:fb:7a: 0a:42:82:e3:d8:f1:f4:0f:23:bd:a3:89:10:1c:01: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:21:A3:8C:10:22:74:28:54:2C:F3:F0:AF:B4:0A:D1:4E:9C:F7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:10:60:f0:78:64:df:48:22:f7:f9:fd:a3:19:69:f6:40:a4: b7:60:ca:dc:13:fc:d1:9b:39:d4:52:12:d4:34:98:6e:4f:60: b5:44:4b:81:6b:6e:27:01:d2:13:12:a2:2e:f7:d4:77:6f:e2: 9b:85:10:59:25:09:9c:57:c5:38:db:db:7d:cb:43:84:4a:f7: 74:85:9f:b1:82:c0:4c:81:7b:82:de:d6:a1:50:7f:0e:a4:ba: fa:b6:b2:3f:9a:47:31:ab:c6:d2:04:6e:7d:09:11:cd:35:be: 42:21:54:aa:17:a0:1b:b1:db:7a:03:31:04:97:b4:0f:50:cc: bd:9a:b2:ca:6d:36:3d:a1:9e:14:03:a0:8b:86:87:3a:d8:dc: 7d:44:b9:7a:a1:94:59:ad:2d:08:c5:20:cb:7d:94:61:7f:a4: 79:61:db:58:c2:0d:a2:88:4c:91:c4:4e:5a:41:6f:4b:b0:d3: 45:52:d5:fc:08:bc:a4:05:49:45:b9:82:70:f9:66:9a:00:e5: 02:fc:7b:d4:8a:b2:d2:ef:c1:d1:1f:50:0b:bc:bb:b0:4f:8c: fe:f6:6d:f9:5c:e2:9c:7e:c7:2e:f2:82:05:91:04:46:ce:89: e2:72:ed:83:10:4e:34:7d:74:c3:08:c0:bd:f1:01:c8:45:29: 5f:0f:4a:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2sexvasbpHbt5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk ZDAzZGNjOGYtYTViOC00MTllLWFlYmMtZDhmZjI2NzA5ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKir2omkpgXJXDKGSIdXJG0t9ukvprlztw5D OiLI5m1FD736HB5OQW3OrI2RCAvL1+qiVHDA4fQE4hLa2/bx1X1TtwY8sznXO3il yITfdWmkmBD9mGxdaY+smVltUx3ey6I4vLnudCGhyWckgUPgA67pTUBoJpoOjQoN XJs1UkXTRJ5Vk+Wyg5z/SUHvrEpcM3jDeYUbDrCFdgg1Vk5ozMg2reeRn0GiB8KM pKSBWO7t4nN3oH/lTUBPFAasCezV9TBARZ5Gg0v549l2FTku9SIB3WjViU5Nk/qy /6PzNJ89UPoZtpZrHIaEZ57D+3oKQoLj2PH0DyO9o4kQHAENRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQho4wQInQoVCzz8K+0CtFOnPdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2E4MDQzZWEtMzk2Yy0z MDliLWEwMjUtOWVjN2NkNmYyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgQYPB4ZN9IIvf5/aMZafZApLdgytwT/NGbOdRSEtQ0mG5PYLVES4Fr bicB0hMSoi731Hdv4puFEFklCZxXxTjb233LQ4RK93SFn7GCwEyBe4Le1qFQfw6k uvq2sj+aRzGrxtIEbn0JEc01vkIhVKoXoBux23oDMQSXtA9QzL2assptNj2hnhQD oIuGhzrY3H1EuXqhlFmtLQjFIMt9lGF/pHlh21jCDaKITJHETlpBb0uw00VS1fwI vKQFSUW5gnD5ZpoA5QL8e9SKstLvwdEfUAu8u7BPjP72bflc4px+xy7yggWRBEbO ieJy7YMQTjR9dMMIwL3xAchFKV8PSrs= -----END CERTIFICATE-----Generated at Wed May 13 12:00:31 2026 by rpki-client