$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa File: ea31493e-fb8b-3c77-a212-6b2e1708156a.roa (raw, json) Hash identifier: PGBXDPKkpBQfJ4gXPycIWAy9hsPnJs3ZH/Soc280bHM= Subject key identifier: 9A:DB:74:26:09:EB:FA:4F:84:09:2A:49:E4:97:C3:9C:11:BB:1E:AB Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D359FA83BD2D9D50A7B704B00 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 202276 IP address blocks: 136.228.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a8:3b:d2:d9:d5:0a:7b:70:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=9b6f7063-9d43-4db7-94a8-0d5a3b1d7759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:aa:34:36:7e:70:5f:25:59:79:a0:c7:63: 2f:59:b6:95:77:44:78:ee:62:1f:03:41:60:8c:0a: 4e:ac:a0:7c:29:5c:54:f6:29:9d:87:01:f6:33:06: 66:33:18:89:39:a7:da:0c:ab:97:04:f1:5b:e9:13: 04:f3:8e:a3:47:a2:e8:94:7a:3d:75:c4:aa:ae:14: 4e:31:d6:ae:50:32:4a:bb:33:d7:1b:72:c1:02:01: 97:4e:50:e4:6e:48:5b:55:00:ec:58:5e:81:09:a1: ef:98:9c:11:36:b4:02:2e:96:3b:c5:e7:66:91:58: 4c:97:80:9c:b8:a9:2e:10:24:e5:85:9d:1c:f3:3c: ec:e8:fa:72:fa:fb:27:f6:75:c7:0e:04:5a:c7:25: 75:b5:9a:b8:3e:5f:f4:b4:44:0b:7b:6f:dd:29:a2: 21:94:6c:04:60:8a:20:15:c8:f1:c7:7f:cb:5a:c8: a7:fe:ea:23:a8:74:a8:ad:33:14:b2:87:29:01:ce: bd:54:fa:05:2a:3f:8f:23:4a:ee:64:78:60:ca:d3: c1:78:5f:56:42:d7:2d:a1:29:01:cc:b9:24:dd:17: 6a:e7:9e:9d:58:0d:87:30:9f:97:8c:69:b0:f5:41: f6:98:16:23:5a:c4:d8:37:a2:53:5e:e5:db:b3:f8: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:74:26:09:EB:FA:4F:84:09:2A:49:E4:97:C3:9C:11:BB:1E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ea31493e-fb8b-3c77-a212-6b2e1708156a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e1:27:f8:40:d2:c0:0d:fe:0a:23:01:61:81:dc:55:c3:5e: 8d:92:7c:78:17:d7:4f:76:cd:a4:8e:1f:92:bf:6c:4e:48:39: ad:05:ca:5d:77:7e:f8:63:10:43:89:01:e7:43:8f:f4:1f:89: 92:52:c3:4f:2a:cd:5d:6d:34:fd:79:a7:60:26:78:16:9a:6b: ef:82:77:08:50:de:8b:da:b9:81:1e:41:60:d0:9c:3c:35:50: d2:32:4e:36:ac:72:aa:ae:c3:34:11:c2:d2:5b:6d:9a:f1:b5: 5b:91:0d:6d:a6:30:63:8d:e9:e5:12:ef:83:57:99:48:22:d5: 2b:f3:b0:2f:b6:e7:1a:a3:c9:66:72:8e:39:df:4b:5e:b8:0a: 69:d9:36:a4:7e:55:a8:ac:0e:b2:03:ca:a4:bd:87:74:5d:f2: cc:13:99:98:6b:36:d7:61:64:eb:ba:a7:96:14:05:82:9f:af: 49:e4:01:81:cc:c2:18:b3:ce:34:69:14:f0:6e:cf:7a:4a:84: ac:12:45:29:89:6a:0e:24:c1:f1:fe:21:89:90:31:6a:d2:63: 66:d7:06:40:48:5d:14:b8:be:99:f4:61:e2:d9:eb:cb:38:83: 12:25:e6:19:1c:7a:f8:cc:a7:6d:f0:09:2d:e2:c3:f6:98:db: 6c:f0:0f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6g70tnVCntwSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OWI2ZjcwNjMtOWQ0My00ZGI3LTk0YTgtMGQ1YTNiMWQ3NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLaqNDZ+cF8lWXmgx2MvWbaVd0R47mIfA0Fg jApOrKB8KVxU9imdhwH2MwZmMxiJOafaDKuXBPFb6RME846jR6LolHo9dcSqrhRO MdauUDJKuzPXG3LBAgGXTlDkbkhbVQDsWF6BCaHvmJwRNrQCLpY7xedmkVhMl4Cc uKkuECTlhZ0c8zzs6Ppy+vsn9nXHDgRaxyV1tZq4Pl/0tEQLe2/dKaIhlGwEYIog Fcjxx3/LWsin/uojqHSorTMUsocpAc69VPoFKj+PI0ruZHhgytPBeF9WQtctoSkB zLkk3Rdq556dWA2HMJ+XjGmw9UH2mBYjWsTYN6JTXuXbs/hTJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrbdCYJ6/pPhAkqSeSXw5wRux6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZWEzMTQ5M2UtZmI4Yi0z Yzc3LWEyMTItNmIyZTE3MDgxNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvhJ/hA0sAN/gojAWGB3FXDXo2SfHgX1092zaSOH5K/bE5IOa0Fyl13 fvhjEEOJAedDj/QfiZJSw08qzV1tNP15p2AmeBaaa++CdwhQ3ovauYEeQWDQnDw1 UNIyTjascqquwzQRwtJbbZrxtVuRDW2mMGON6eUS74NXmUgi1SvzsC+25xqjyWZy jjnfS164CmnZNqR+VaisDrIDyqS9h3Rd8swTmZhrNtdhZOu6p5YUBYKfr0nkAYHM whizzjRpFPBuz3pKhKwSRSmJag4kwfH+IYmQMWrSY2bXBkBIXRS4vpn0YeLZ68s4 gxIl5hkcevjMp23wCS3iw/aY22zwDzA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:22 2026 by rpki-client