$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa File: ca8043ea-396c-309b-a025-9ec7cd6f267f.roa (raw, json) Hash identifier: 5GA+aP2al7+hrELVLC4KIuV1QudursBci+RSIjJpq6c= Subject key identifier: 43:17:24:43:48:C4:85:32:B4:78:0D:C0:D1:3E:34:4A:1E:0D:BE:37 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584E921FA10B419BD1B4AF87D480 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 137922 IP address blocks: 136.228.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a1:0b:41:9b:d1:b4:af:87:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=03b42f00-3165-4377-8d4a-8ec3def6b0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:66:bd:00:82:11:1e:28:c8:83:76:20:fc:38: 1d:f1:ad:97:c4:fb:c5:be:04:54:f0:67:1c:cd:33: 15:f2:01:1f:06:09:b0:3c:ff:a9:67:2f:86:2e:f0: bf:b9:fd:3c:59:ab:7c:38:d3:c1:6f:25:31:f7:69: 32:58:e1:e2:ce:bf:5e:4c:84:45:2c:27:03:7c:98: bc:6a:34:35:68:d8:25:f8:f4:61:03:fc:0c:bb:c7: e9:ea:cf:4b:12:50:26:1c:bc:0b:33:a6:a8:3f:e0: 0b:c3:da:af:5d:8b:be:da:98:2c:ca:99:c0:28:46: 97:3e:79:73:7c:36:10:63:38:34:0f:6e:b0:b5:98: 6b:87:c0:ec:b7:06:1f:d3:19:82:84:27:a9:ad:bf: 98:74:08:5b:ad:97:18:d2:dd:ac:40:d3:f7:c9:69: 57:ec:11:8c:98:f9:58:09:fe:10:b2:3e:b4:2a:b7: 35:7e:8c:0f:8a:bc:49:1a:01:a7:56:ba:b4:2f:9c: 69:76:e1:8e:98:a3:8d:8e:27:21:6a:b7:1a:8e:ab: 4b:33:82:8d:35:b1:1c:8d:30:75:d8:90:db:e4:e5: c9:8b:9f:03:9b:78:62:06:8f:38:4f:a6:81:1b:ef: 67:5f:f4:a3:8d:4a:3b:ce:2d:e5:a9:fd:66:67:e4: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:17:24:43:48:C4:85:32:B4:78:0D:C0:D1:3E:34:4A:1E:0D:BE:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:07:3a:32:53:71:d8:80:30:41:de:25:9d:d3:b1:ed:2f:fb: a9:0d:db:b5:3c:7b:b8:10:c5:2b:ea:ab:4e:91:ad:4d:0d:bf: a3:48:3b:92:66:18:c3:20:98:a4:b4:c7:b0:f5:ab:3c:6a:b0: 0b:e9:97:15:bf:9f:f4:cb:bb:64:5a:0f:77:a4:c8:af:6a:82: e8:4c:37:3d:31:1b:67:58:d1:50:f5:78:ec:a8:45:bd:b9:5a: 0e:93:ef:5f:bc:0d:73:0e:4f:61:92:13:18:cd:c1:6e:8e:28: fb:64:3a:d3:6f:2b:d4:f9:52:da:7a:07:7b:20:00:54:2c:6b: dd:10:f6:01:15:fd:b3:0c:7d:0b:d8:4c:ca:cd:74:e7:49:37: 9d:f4:60:fc:9a:5a:45:c6:2a:e0:04:b2:2a:f8:52:a8:30:57: 4a:0c:8a:26:61:4a:09:aa:92:a3:37:11:8f:19:7c:07:6a:71: 27:d4:9b:d5:fe:53:df:7e:8a:2f:fa:c0:90:aa:82:31:22:89: 1c:bf:dd:35:92:ff:b3:a8:46:a3:d0:a3:92:fb:d5:1b:2e:91: 48:df:f2:93:69:48:51:a8:93:42:8a:29:d3:33:4e:ee:e2:0c: d3:b3:2c:19:01:bf:48:5d:0e:57:6e:6a:e7:19:a2:fb:46:af: 97:f0:b2:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6ELQZvRtK+H1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk MDNiNDJmMDAtMzE2NS00Mzc3LThkNGEtOGVjM2RlZjZiMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ma9AIIRHijIg3Yg/Dgd8a2XxPvFvgRU8Gcc zTMV8gEfBgmwPP+pZy+GLvC/uf08Wat8ONPBbyUx92kyWOHizr9eTIRFLCcDfJi8 ajQ1aNgl+PRhA/wMu8fp6s9LElAmHLwLM6aoP+ALw9qvXYu+2pgsypnAKEaXPnlz fDYQYzg0D26wtZhrh8DstwYf0xmChCeprb+YdAhbrZcY0t2sQNP3yWlX7BGMmPlY Cf4Qsj60Krc1fowPirxJGgGnVrq0L5xpduGOmKONjicharcajqtLM4KNNbEcjTB1 2JDb5OXJi58Dm3hiBo84T6aBG+9nX/SjjUo7zi3lqf1mZ+RgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMXJENIxIUytHgNwNE+NEoeDb43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2E4MDQzZWEtMzk2Yy0z MDliLWEwMjUtOWVjN2NkNmYyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoHOjJTcdiAMEHeJZ3Tse0v+6kN27U8e7gQxSvqq06RrU0Nv6NIO5Jm GMMgmKS0x7D1qzxqsAvplxW/n/TLu2RaD3ekyK9qguhMNz0xG2dY0VD1eOyoRb25 Wg6T71+8DXMOT2GSExjNwW6OKPtkOtNvK9T5Utp6B3sgAFQsa90Q9gEV/bMMfQvY TMrNdOdJN530YPyaWkXGKuAEsir4UqgwV0oMiiZhSgmqkqM3EY8ZfAdqcSfUm9X+ U99+ii/6wJCqgjEiiRy/3TWS/7OoRqPQo5L71RsukUjf8pNpSFGok0KKKdMzTu7i DNOzLBkBv0hdDlduaucZovtGr5fwsk0= -----END CERTIFICATE-----Generated at Fri Jul 24 13:05:08 2026 by rpki-client