$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa File: 0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa (raw, json) Hash identifier: CUIvfN04ihrSvNqlJD91F1VMuly64UcA5jSen931o84= Subject key identifier: 54:2F:3C:1A:AF:C3:E2:12:27:BA:C2:EB:8D:C8:A4:95:64:6A:54:D4 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F31B7BD448FB30BB67A7486C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 202276 IP address blocks: 136.228.221.0/24 maxlen: 24 136.228.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bd:44:8f:b3:0b:b6:7a:74:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=09126d58-7ad0-45c6-ac1e-d13abd51d858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ff:a8:10:8d:37:88:96:bb:c9:9a:f7:75:09: dd:2b:90:a4:14:af:2e:f6:0d:8e:16:d0:7c:c0:0a: 12:fb:06:82:91:b0:f2:43:09:8b:4c:69:2d:2f:06: 03:d1:c9:3c:96:55:50:17:12:8a:98:29:8f:18:52: 6b:b4:bc:7f:e5:91:18:cd:70:2e:fb:75:8b:80:62: f0:d6:5c:d5:0c:00:72:a8:22:4e:d2:e6:c8:f9:9f: 28:35:e4:8a:db:f8:66:e0:03:93:c7:16:c9:b8:44: 51:20:74:a8:fc:20:a4:23:03:f6:ae:f0:39:ad:dd: 53:14:62:bc:ab:23:b2:39:04:a7:55:dc:01:c8:33: de:60:b4:65:40:5f:60:68:1e:14:20:81:28:1d:a6: 2c:71:8e:e4:d7:f3:41:23:cf:41:01:84:d4:47:7e: a7:e8:44:59:8c:42:a5:68:5d:e5:3e:05:92:6e:98: 5d:70:8b:c7:11:00:c2:26:c8:ed:4d:54:62:24:f5: 1f:67:6d:5f:19:fa:47:3a:bd:2f:76:34:68:dc:bd: ce:0a:ae:fb:ae:c9:7d:fa:ad:46:06:9b:0a:0c:00: b2:3e:11:57:ba:54:16:04:90:8f:93:c6:fd:dd:19: b6:26:1c:32:24:fc:4e:ea:92:93:6f:b1:ec:60:85: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2F:3C:1A:AF:C3:E2:12:27:BA:C2:EB:8D:C8:A4:95:64:6A:54:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0ae15d49-e513-3745-b3f9-66ebc64a2b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.221.0/24 136.228.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e9:25:55:f1:a5:42:89:ca:15:b8:4e:cf:a4:75:b0:80:3a: bc:50:f9:09:fb:58:8c:5e:17:52:fa:4f:c6:c4:a0:25:8d:3d: 97:d7:e9:43:eb:27:68:8c:2c:8e:b3:62:5e:22:95:a9:fd:b4: 53:f1:b7:a1:41:ec:f3:bd:1b:f4:03:6e:6b:c2:30:c7:04:81: f6:88:86:1f:50:fe:12:3f:a4:ce:77:8d:bf:e4:9f:d6:4f:dd: 75:0c:52:25:9a:62:52:60:08:46:93:3f:da:45:5d:bd:77:e3: 56:67:8c:a8:4e:65:de:64:22:ad:f2:34:49:e9:5a:64:b2:20: b1:ea:f7:4b:5b:2e:8e:b1:75:a5:0f:c5:da:29:4e:b9:79:31: 21:50:7b:17:df:60:86:46:b1:4b:3c:f8:4e:5f:e7:ce:cc:d4: 2b:11:4d:f8:af:f1:00:32:a9:7f:3c:4e:e1:49:5f:7a:8e:2f: 91:be:79:12:76:77:ab:0e:f4:8e:3f:81:22:3f:23:68:16:e3: 4d:ad:77:05:79:b6:45:ea:87:fc:f8:91:40:77:8c:cd:c8:a6: 02:b0:bc:b6:cf:de:82:ae:0d:cb:b6:0e:c4:17:6d:49:fb:ae: 82:a0:57:ea:bf:99:a0:31:6e:e0:53:4b:56:66:57:4e:f3:07: ab:bb:89:93 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8xt71Ej7MLtnp0hsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MDkxMjZkNTgtN2FkMC00NWM2LWFjMWUtZDEzYWJkNTFkODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/+oEI03iJa7yZr3dQndK5CkFK8u9g2OFtB8 wAoS+waCkbDyQwmLTGktLwYD0ck8llVQFxKKmCmPGFJrtLx/5ZEYzXAu+3WLgGLw 1lzVDAByqCJO0ubI+Z8oNeSK2/hm4AOTxxbJuERRIHSo/CCkIwP2rvA5rd1TFGK8 qyOyOQSnVdwByDPeYLRlQF9gaB4UIIEoHaYscY7k1/NBI89BAYTUR36n6ERZjEKl aF3lPgWSbphdcIvHEQDCJsjtTVRiJPUfZ21fGfpHOr0vdjRo3L3OCq77rsl9+q1G BpsKDACyPhFXulQWBJCPk8b93Rm2JhwyJPxO6pKTb7HsYIXesQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFQvPBqvw+ISJ7rC643IpJVkalTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFlMTVkNDktZTUxMy0z NzQ1LWIzZjktNjZlYmM2NGEyYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiOTdAwQA iOTwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGPpJVXxpUKJyhW4Ts+kdbCAOrxQ+Qn7WIxeF1L6T8bEoCWN PZfX6UPrJ2iMLI6zYl4ilan9tFPxt6FB7PO9G/QDbmvCMMcEgfaIhh9Q/hI/pM53 jb/kn9ZP3XUMUiWaYlJgCEaTP9pFXb1341ZnjKhOZd5kIq3yNEnpWmSyILHq90tb Lo6xdaUPxdopTrl5MSFQexffYIZGsUs8+E5f587M1CsRTfiv8QAyqX88TuFJX3qO L5G+eRJ2d6sO9I4/gSI/I2gW402tdwV5tkXqh/z4kUB3jM3IpgKwvLbP3oKuDcu2 DsQXbUn7roKgV+q/maAxbuBTS1ZmV07zB6u7iZM= -----END CERTIFICATE-----Generated at Tue Sep 22 22:49:55 2026 by rpki-client