$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa File: a4111b8e-0a64-3b24-9389-e0763deb2b01.roa (raw, json) Hash identifier: XN+TyQVaLQn4t56KGXRtcFWrBwYF4OuM50Cxe+SLK3Y= Subject key identifier: 27:59:8A:07:65:22:AA:FA:8A:2F:8A:8A:9A:E7:17:AB:AB:97:0D:DB Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584CF42225137A936B8183789380 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 202276 IP address blocks: 136.228.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:25:13:7a:93:6b:81:83:78:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=d8b24581-5947-4e6d-8edb-5996ca1019db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:3a:94:d6:17:6f:d4:f4:41:6b:75:f0:83: 69:f2:f0:04:a7:a0:c9:01:2a:82:9c:85:a9:d7:89: 2a:92:91:14:41:4f:3f:5d:a1:5a:07:7b:cd:fd:47: e6:d2:99:ce:f3:a6:48:ea:43:cc:98:56:85:3d:18: 38:d0:b0:7f:59:68:11:ae:6a:b6:76:ea:fc:b0:66: ba:5b:5a:f7:b9:77:74:7a:01:bc:04:77:c9:c5:fb: 8f:db:1a:fc:f2:e7:ab:9c:33:90:c5:2b:e1:75:2b: cf:93:e6:4f:3b:c0:52:cb:61:62:a8:ff:e8:e1:64: ca:b5:38:bc:84:9a:28:9a:ab:52:e1:8c:bb:85:37: 15:d6:ab:53:14:47:fb:b1:11:64:30:14:df:ef:f9: 6f:b6:ee:5e:15:e0:8a:3f:e3:23:5a:37:55:85:09: f6:23:4b:90:5d:9a:66:62:8f:fc:66:c1:da:da:df: 8d:74:15:1c:78:74:5f:7b:35:ee:c9:a5:90:4d:83: 89:0c:e9:6c:96:20:58:97:6f:36:47:e7:6b:7e:14: b9:70:7d:1c:d2:6b:f6:c0:11:21:65:7b:b9:b5:2a: 22:0a:06:aa:6b:e4:1e:e8:60:a2:82:ed:d7:57:86: fb:b3:70:0b:5d:64:9b:53:49:ae:ca:aa:c4:d6:68: b9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:59:8A:07:65:22:AA:FA:8A:2F:8A:8A:9A:E7:17:AB:AB:97:0D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b7:e4:ae:ca:8d:24:17:13:40:0b:a2:cf:a5:f7:a5:83:3d: 25:b8:9a:fa:8e:ed:77:bc:7f:91:c5:e4:75:97:d7:d8:38:3b: ad:9a:27:e7:10:7a:cb:01:4a:6d:58:4c:f2:4e:35:17:19:54: 8e:27:0a:13:d7:0e:f4:53:f4:ac:1b:7a:91:56:cc:d6:8a:52: d6:8f:7b:c0:20:ac:92:f8:bc:ef:94:26:29:0d:ac:6a:a5:f9: 89:e8:0e:f3:8f:51:da:29:66:9a:c7:54:9f:4e:71:94:2b:83: ca:e7:73:e1:74:60:32:ad:32:08:aa:54:97:54:34:3a:24:ab: 9c:14:ef:03:da:41:15:07:3d:67:62:ad:8a:af:c8:ab:51:1b: d3:dd:64:3c:fe:26:13:7f:44:b9:0c:dd:5d:1c:c8:f4:8e:3a: 22:36:75:d2:a7:bf:47:58:b0:2b:d3:0b:a3:15:04:7c:f0:91: db:2d:0d:e4:17:b4:e0:a1:07:da:b3:d8:2b:a1:1e:0f:27:e8: c2:2c:3f:7a:9a:93:a3:0c:4d:b7:1c:dd:78:c2:87:14:8a:51: 3e:57:1e:91:b6:e0:b6:06:b1:37:bd:ef:4e:1d:ec:07:74:c1: 00:e7:7b:00:26:48:94:f2:5d:b5:e1:3f:97:b2:a5:64:20:d9: 6c:57:9a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiUTepNrgYN4k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk ZDhiMjQ1ODEtNTk0Ny00ZTZkLThlZGItNTk5NmNhMTAxOWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOU6lNYXb9T0QWt18INp8vAEp6DJASqCnIWp 14kqkpEUQU8/XaFaB3vN/Ufm0pnO86ZI6kPMmFaFPRg40LB/WWgRrmq2dur8sGa6 W1r3uXd0egG8BHfJxfuP2xr88uernDOQxSvhdSvPk+ZPO8BSy2FiqP/o4WTKtTi8 hJoomqtS4Yy7hTcV1qtTFEf7sRFkMBTf7/lvtu5eFeCKP+MjWjdVhQn2I0uQXZpm Yo/8ZsHa2t+NdBUceHRfezXuyaWQTYOJDOlsliBYl282R+drfhS5cH0c0mv2wBEh ZXu5tSoiCgaqa+Qe6GCigu3XV4b7s3ALXWSbU0muyqrE1mi5TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdZigdlIqr6ii+KiprnF6urlw3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTQxMTFiOGUtMGE2NC0z YjI0LTkzODktZTA3NjNkZWIyYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW35K7KjSQXE0ALos+l96WDPSW4mvqO7Xe8f5HF5HWX19g4O62aJ+cQ essBSm1YTPJONRcZVI4nChPXDvRT9KwbepFWzNaKUtaPe8AgrJL4vO+UJikNrGql +YnoDvOPUdopZprHVJ9OcZQrg8rnc+F0YDKtMgiqVJdUNDokq5wU7wPaQRUHPWdi rYqvyKtRG9PdZDz+JhN/RLkM3V0cyPSOOiI2ddKnv0dYsCvTC6MVBHzwkdstDeQX tOChB9qz2CuhHg8n6MIsP3qak6MMTbcc3XjChxSKUT5XHpG24LYGsTe9704d7Ad0 wQDnewAmSJTyXbXhP5eypWQg2WxXmog= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:37 2026 by rpki-client