$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa File: ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa (raw, json) Hash identifier: TiSydCf/diI8pED3diIotJSCZ4EHjFwwiAdGSS2mpp8= Subject key identifier: 91:40:43:BA:D8:08:0D:61:88:67:9C:44:4E:9A:1D:AB:5B:4D:57:8E Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F3E47D59BACF99D050F8FD760 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 137922 IP address blocks: 136.228.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d5:9b:ac:f9:9d:05:0f:8f:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=0e3c4984-8eb3-4008-9877-8d3497687148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:c7:d6:a8:7d:e3:ca:de:be:2a:f8:f0:98: 03:5d:40:4a:62:7e:2a:d1:77:b1:4e:e2:b7:00:4f: 70:0c:d5:b5:7d:a0:fe:4f:9b:f4:87:7d:e9:a4:d1: ba:d9:27:50:63:d2:f3:24:28:e8:f3:f7:af:41:d3: 38:cc:c0:09:b6:17:57:07:c5:43:b1:8d:cb:48:35: 1e:90:68:b7:df:63:fb:17:b6:b8:08:34:9b:d2:9d: 40:47:01:98:d7:cf:3f:ea:f4:30:38:09:4c:2c:05: 9c:9f:b4:50:25:6f:0f:e0:29:a2:0d:f5:66:67:bf: a7:03:96:8e:6e:52:d5:4d:a2:a0:d9:82:7d:b7:e3: 55:5a:e2:45:af:d0:1c:e2:9e:8a:9b:95:a1:98:f1: 14:2b:0a:70:aa:9c:c6:86:ad:19:6f:87:d0:17:63: e4:09:c5:9f:28:35:8b:fd:9d:e3:c0:ec:e7:50:a5: 48:05:21:f4:03:19:3b:fd:09:a1:95:57:34:2a:0e: 43:1f:32:1b:86:3a:fa:29:28:92:1f:28:c2:2d:e0: 11:79:31:cd:ba:cd:9f:2b:d8:e8:8d:23:12:b1:b9: 68:ed:c1:a2:3e:48:89:78:75:3b:4b:41:65:cb:4c: e1:d0:58:28:92:e6:32:75:fe:0a:02:1b:56:8f:7d: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:40:43:BA:D8:08:0D:61:88:67:9C:44:4E:9A:1D:AB:5B:4D:57:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ccab405b-58c3-3a5e-af87-5a9db74d0c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:97:fb:13:fb:6f:ac:4f:52:b0:c5:f7:42:87:ae:37:81:f3: dc:a0:1f:4e:41:1a:92:03:5a:bd:1e:b5:ee:30:d2:1f:ce:45: 64:74:9b:9e:e2:e9:27:40:45:88:36:cb:e1:9d:9e:55:d9:82: cf:8b:51:2d:d4:ab:04:ae:d8:3f:3b:3c:a2:d7:48:23:21:fa: b9:a5:78:53:27:52:4d:c0:5b:c8:70:0b:ed:43:75:9a:64:e4: 88:03:1f:83:10:3f:45:bf:f5:bf:38:42:a8:d1:df:a1:02:a6: e7:09:77:37:7c:db:45:98:06:6d:67:39:04:aa:c1:0b:f5:3e: 21:85:14:ea:7c:d3:cf:63:3a:17:2c:b4:82:41:fb:17:de:b7: d9:ae:49:41:94:44:33:ef:b8:93:7c:fe:a3:64:33:84:87:5a: 36:f5:bd:0e:42:96:c0:6b:21:a4:55:d4:5d:a6:95:74:ec:90: e8:35:05:2f:d7:6f:30:b1:cd:68:62:02:c4:8c:e0:15:d6:73: 42:ea:85:27:cb:64:e9:bf:81:5e:26:2c:f7:0a:68:9e:08:df: dd:98:5e:a0:f5:18:41:84:e3:05:b8:4d:60:a2:7e:ea:f8:df: d7:70:38:5b:2b:c9:7d:eb:51:5d:0b:ec:0d:e7:3a:d3:f6:d5: 61:0b:ef:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9WbrPmdBQ+P12AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MGUzYzQ5ODQtOGViMy00MDA4LTk4NzctOGQzNDk3Njg3MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVvH1qh948revir48JgDXUBKYn4q0XexTuK3 AE9wDNW1faD+T5v0h33ppNG62SdQY9LzJCjo8/evQdM4zMAJthdXB8VDsY3LSDUe kGi332P7F7a4CDSb0p1ARwGY188/6vQwOAlMLAWcn7RQJW8P4CmiDfVmZ7+nA5aO blLVTaKg2YJ9t+NVWuJFr9Ac4p6Km5WhmPEUKwpwqpzGhq0Zb4fQF2PkCcWfKDWL /Z3jwOznUKVIBSH0Axk7/QmhlVc0Kg5DHzIbhjr6KSiSHyjCLeAReTHNus2fK9jo jSMSsblo7cGiPkiJeHU7S0Fly0zh0FgokuYydf4KAhtWj31tCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFAQ7rYCA1hiGecRE6aHatbTVeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2NhYjQwNWItNThjMy0z YTVlLWFmODctNWE5ZGI3NGQwYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWX+xP7b6xPUrDF90KHrjeB89ygH05BGpIDWr0ete4w0h/ORWR0m57i 6SdARYg2y+GdnlXZgs+LUS3UqwSu2D87PKLXSCMh+rmleFMnUk3AW8hwC+1DdZpk 5IgDH4MQP0W/9b84QqjR36ECpucJdzd820WYBm1nOQSqwQv1PiGFFOp8089jOhcs tIJB+xfet9muSUGURDPvuJN8/qNkM4SHWjb1vQ5ClsBrIaRV1F2mlXTskOg1BS/X bzCxzWhiAsSM4BXWc0LqhSfLZOm/gV4mLPcKaJ4I392YXqD1GEGE4wW4TWCifur4 39dwOFsryX3rUV0L7A3nOtP21WEL7yA= -----END CERTIFICATE-----Generated at Mon Sep 28 20:40:56 2026 by rpki-client