$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e700d517-df73-3fd6-9d99-9c18beba1d57.roa File: e700d517-df73-3fd6-9d99-9c18beba1d57.roa (raw, json) Hash identifier: qWJclbUOaKwwhquazWXzREkhWGlT93cH6214Y6cKsu0= Subject key identifier: 2D:5D:FF:F8:F1:99:D6:ED:B0:37:99:BE:3A:BB:E3:CC:E3:BD:43:D5 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D3F64D399C1AAA6FE04FF4B70 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e700d517-df73-3fd6-9d99-9c18beba1d57.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396253 IP address blocks: 136.228.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d3:99:c1:aa:a6:fe:04:ff:4b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=82a2f5fb-5324-4392-b21c-a1a855876e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:8c:c1:77:c4:54:87:c5:09:03:e5:84:4e: fb:b2:b7:c3:3b:a0:7f:3e:ea:bb:21:de:22:81:ee: 4e:87:80:96:40:a6:a2:9c:1a:be:73:e4:1d:62:35: b8:64:86:db:9c:66:e6:4d:3c:ba:d7:9a:6d:f8:29: b2:56:e3:a3:d3:5d:5a:06:c1:89:71:96:64:9b:de: 2d:e2:b0:c9:a7:ae:22:e7:46:b3:19:8f:90:58:1c: 8f:72:53:dc:d6:9b:a4:32:e7:88:53:22:52:01:47: a5:5f:ff:29:f3:57:b6:d0:01:30:b8:71:f4:4f:91: db:d1:fe:53:84:05:19:f8:17:0f:51:2a:84:d2:01: 3c:00:03:08:7e:32:59:25:5d:dd:1e:e0:08:4a:98: 12:1f:b4:8d:f5:48:66:4d:40:2d:ff:f9:6f:d9:3f: 98:34:ca:e6:fe:9f:ef:f0:e9:ce:9b:69:57:ca:8c: 0f:1a:ee:41:71:d2:92:83:30:89:b6:dd:53:7b:0b: 8a:bc:4a:14:57:83:13:d6:42:d6:07:69:85:7f:c6: c0:78:4a:16:d3:93:59:73:ea:95:1a:a7:89:f3:ac: 36:07:f9:37:e5:38:36:84:17:4c:3b:19:f9:fa:6f: 3f:68:b7:19:20:49:8c:b6:71:dc:8c:2b:2c:e3:aa: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5D:FF:F8:F1:99:D6:ED:B0:37:99:BE:3A:BB:E3:CC:E3:BD:43:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e700d517-df73-3fd6-9d99-9c18beba1d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1a:97:a5:46:77:1c:d0:f8:c3:5c:22:9f:c2:c5:cf:86:a5: ef:ea:fe:ce:54:55:92:ed:33:32:e5:19:18:a4:95:d5:f0:7c: a4:08:36:96:b9:82:1d:6c:9f:02:06:4e:a1:e1:e6:a6:26:b0: a5:fd:72:1c:a8:2a:03:36:85:dd:9a:dd:b0:33:4d:88:9d:4e: e8:2d:82:21:04:e2:0d:cd:1f:e8:bc:75:ad:85:77:b0:9b:9f: 40:2b:3e:c1:f3:2e:b9:6a:e6:cb:b7:24:71:eb:02:48:24:0e: 54:f5:82:51:c1:34:2e:ce:09:f1:e3:26:8e:01:1d:9d:f7:69: 1c:1e:59:10:8a:ee:f3:4c:3d:7a:9a:ad:40:1c:a1:14:16:ac: ac:37:6a:70:c2:e0:7e:65:89:4e:22:42:46:9d:d4:7e:43:9c: 0f:c9:34:13:4e:a3:2f:e9:1e:5f:e3:ca:9b:19:34:0a:34:2f: 2e:f2:db:ec:be:45:78:48:c4:fd:46:56:50:a2:d2:a2:f5:e0: 5b:04:14:5a:dd:06:87:05:66:bb:68:eb:b4:3c:fc:52:b7:fd: 3c:a7:2b:16:7b:92:06:06:27:d1:ff:2e:60:70:e8:a6:76:a4: e8:d9:c3:e7:cd:dd:66:b0:dd:d3:42:95:08:6a:50:9b:b7:45: 88:e2:ae:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNOZwaqm/gT/S3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ODJhMmY1ZmItNTMyNC00MzkyLWIyMWMtYTFhODU1ODc2ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU2MwXfEVIfFCQPlhE77srfDO6B/Puq7Id4i ge5Oh4CWQKainBq+c+QdYjW4ZIbbnGbmTTy615pt+CmyVuOj011aBsGJcZZkm94t 4rDJp64i50azGY+QWByPclPc1pukMueIUyJSAUelX/8p81e20AEwuHH0T5Hb0f5T hAUZ+BcPUSqE0gE8AAMIfjJZJV3dHuAISpgSH7SN9UhmTUAt//lv2T+YNMrm/p/v 8OnOm2lXyowPGu5BcdKSgzCJtt1TewuKvEoUV4MT1kLWB2mFf8bAeEoW05NZc+qV GqeJ86w2B/k35Tg2hBdMOxn5+m8/aLcZIEmMtnHcjCss46qdjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1d//jxmdbtsDeZvjq748zjvUPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTcwMGQ1MTctZGY3My0z ZmQ2LTlkOTktOWMxOGJlYmExZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8al6VGdxzQ+MNcIp/Cxc+Gpe/q/s5UVZLtMzLlGRikldXwfKQINpa5 gh1snwIGTqHh5qYmsKX9chyoKgM2hd2a3bAzTYidTugtgiEE4g3NH+i8da2Fd7Cb n0ArPsHzLrlq5su3JHHrAkgkDlT1glHBNC7OCfHjJo4BHZ33aRweWRCK7vNMPXqa rUAcoRQWrKw3anDC4H5liU4iQkad1H5DnA/JNBNOoy/pHl/jypsZNAo0Ly7y2+y+ RXhIxP1GVlCi0qL14FsEFFrdBocFZrto67Q8/FK3/TynKxZ7kgYGJ9H/LmBw6KZ2 pOjZw+fN3Waw3dNClQhqUJu3RYjirsk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:32:02 2026 by rpki-client