$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa File: 410c888b-87d0-38d4-abe0-40515be0096e.roa (raw, json) Hash identifier: 2Sf00232jFKmD5LMcSoTSdm+MRA7boCx8hK5+E8Ai+M= Subject key identifier: 22:95:F8:7D:11:AA:13:30:F4:DD:41:D2:0E:F9:BB:33:B0:9C:87:62 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F3FAD31B11128D1779F6AD7B0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 396253 IP address blocks: 136.228.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:31:b1:11:28:d1:77:9f:6a:d7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=28458d29-81ba-4577-b950-2b0f54c1a5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:ca:5e:6e:ba:2e:ee:0f:a3:b8:da:f9:4c: b8:5f:c4:04:04:70:99:90:76:83:d6:5b:64:69:1e: 3c:c0:ec:8d:45:6e:00:fc:62:fb:97:6e:df:78:5a: 77:eb:5f:1e:81:59:ac:b9:0b:ae:e3:7b:f2:73:c0: cf:6d:cf:9d:4b:8f:42:18:d2:27:07:4a:e4:66:0b: 9b:53:96:ad:c8:f2:41:be:15:25:2d:42:fc:d2:bb: 84:8e:ad:2b:a1:c5:fb:d0:a7:7d:c7:fd:3f:3b:b8: 32:4b:08:f6:6e:63:fe:4d:46:01:cf:13:9f:aa:b2: 6b:99:eb:75:15:8d:29:1b:eb:12:71:ab:fe:e4:c0: ae:ab:05:6f:39:63:1c:23:d4:57:45:4d:1c:7b:a4: 7e:91:f1:67:90:13:24:c8:c6:ba:27:31:9b:a3:ce: db:88:35:53:da:12:ab:93:f7:ac:96:b4:8d:e2:63: 05:f8:47:e5:42:85:fa:c8:6c:7e:f5:c5:4a:6d:c9: bc:d7:20:19:b0:94:8a:fb:38:ef:17:72:dc:52:42: 35:2b:21:7d:d5:0b:e9:38:b9:08:58:c5:5b:4a:5a: e5:3e:3a:ae:83:d6:38:a6:b7:3b:0c:6b:a3:f7:dc: 93:5a:a8:e3:3b:41:6a:90:0c:2c:f1:79:be:8a:10: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:95:F8:7D:11:AA:13:30:F4:DD:41:D2:0E:F9:BB:33:B0:9C:87:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/410c888b-87d0-38d4-abe0-40515be0096e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:78:9f:8d:9b:e7:a8:07:5c:7a:c8:01:40:a9:94:a9:3c:7e: ee:a2:cd:4f:57:cb:4b:f3:71:8c:fa:10:33:0c:1d:a2:88:b3: 10:d2:3f:86:47:7d:68:ce:d2:7c:86:a3:d5:f6:45:79:d3:23: 8e:15:80:6b:76:8b:e6:23:e2:f2:24:44:90:84:96:e7:f6:b0: a9:cf:e4:f9:13:1f:48:5d:5a:ab:71:17:fd:29:c5:a4:d4:b9: cd:f6:45:dd:ad:5f:ac:d2:a8:18:00:82:5b:57:a0:af:f7:48: d7:51:97:b9:d7:b6:90:3c:9f:a8:af:a3:dc:41:1f:64:42:d6: 5f:a3:16:a9:2f:02:0d:13:21:1d:ba:11:1c:61:a4:db:c8:05: fb:dd:f6:90:b2:08:e6:5c:1a:b0:3b:84:38:eb:46:e3:15:f5: 46:09:94:91:38:1d:05:e8:99:13:bf:17:f2:a2:b8:84:e5:a4: be:39:9e:d9:21:b0:73:57:d6:f8:71:8a:39:a4:3e:1e:23:70: a2:97:40:7c:a6:a7:ea:a4:90:51:34:ed:fc:de:3e:f0:6a:7b: 06:85:5e:a6:49:d9:62:88:f5:3b:06:21:1e:5f:2b:20:46:19: 63:83:b3:3d:76:69:24:c4:cf:e2:3f:58:a2:66:c3:58:54:e5: c4:e1:d9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTGxESjRd59q17AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk Mjg0NThkMjktODFiYS00NTc3LWI5NTAtMmIwZjU0YzFhNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5bKXm66Lu4Po7ja+Uy4X8QEBHCZkHaD1ltk aR48wOyNRW4A/GL7l27feFp3618egVmsuQuu43vyc8DPbc+dS49CGNInB0rkZgub U5atyPJBvhUlLUL80ruEjq0rocX70Kd9x/0/O7gySwj2bmP+TUYBzxOfqrJrmet1 FY0pG+sScav+5MCuqwVvOWMcI9RXRU0ce6R+kfFnkBMkyMa6JzGbo87biDVT2hKr k/eslrSN4mMF+EflQoX6yGx+9cVKbcm81yAZsJSK+zjvF3LcUkI1KyF91QvpOLkI WMVbSlrlPjqug9Y4prc7DGuj99yTWqjjO0FqkAws8Xm+ihDLwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKV+H0RqhMw9N1B0g75uzOwnIdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNDEwYzg4OGItODdkMC0z OGQ0LWFiZTAtNDA1MTViZTAwOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp4n42b56gHXHrIAUCplKk8fu6izU9Xy0vzcYz6EDMMHaKIsxDSP4ZH fWjO0nyGo9X2RXnTI44VgGt2i+Yj4vIkRJCEluf2sKnP5PkTH0hdWqtxF/0pxaTU uc32Rd2tX6zSqBgAgltXoK/3SNdRl7nXtpA8n6ivo9xBH2RC1l+jFqkvAg0TIR26 ERxhpNvIBfvd9pCyCOZcGrA7hDjrRuMV9UYJlJE4HQXomRO/F/KiuITlpL45ntkh sHNX1vhxijmkPh4jcKKXQHymp+qkkFE07fzePvBqewaFXqZJ2WKI9TsGIR5fKyBG GWODsz12aSTEz+I/WKJmw1hU5cTh2Qc= -----END CERTIFICATE-----Generated at Sun Oct 11 21:55:06 2026 by rpki-client