$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa File: a4111b8e-0a64-3b24-9389-e0763deb2b01.roa (raw, json) Hash identifier: OOvWxjwKULSOef+qokblCMPgeR1Rv/r5vHyE2HoaRTs= Subject key identifier: 7A:C0:AB:F6:6C:5B:21:6B:10:DD:BA:F2:00:05:A8:FA:14:44:4A:75 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F4973E64A2A92574275A94580 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 202276 IP address blocks: 136.228.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e6:4a:2a:92:57:42:75:a9:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=25d963e9-37b5-4d99-a19d-2064b93ee1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:1b:63:ab:fa:8f:fb:b3:37:05:6d:76:b2: b8:b7:bf:08:7d:62:da:8c:00:76:da:04:9a:bf:c7: ec:77:cd:21:b7:e2:bb:35:04:13:2c:3e:94:6c:89: cb:64:c7:90:d3:d9:88:01:8b:01:b7:50:98:22:8c: 14:69:8e:c4:f3:f1:7b:ec:35:ec:4c:ed:f9:83:18: 46:ab:87:d3:10:fb:d9:6e:ba:a7:89:5b:95:01:a4: 5f:71:e7:f4:43:1b:24:43:e3:14:c0:1b:bc:97:a2: af:52:c7:1c:15:54:14:1d:48:53:14:8d:59:eb:93: 75:ae:51:dc:59:6f:9d:b4:00:f9:88:ce:4a:b2:48: 45:27:77:42:64:3c:b9:cf:7d:f9:62:e7:46:e7:82: c7:39:56:81:71:9d:f4:15:9e:f1:00:d8:5a:c8:5e: 55:0e:76:3e:af:81:18:e9:3f:97:37:95:90:06:54: 01:fd:8f:de:e2:9a:35:b4:06:5d:76:e9:97:73:3c: 91:68:f1:5f:49:82:2a:03:ba:60:3f:34:93:fd:b6: 1d:bb:ff:89:f0:bd:07:7a:0f:11:e1:61:96:7c:bc: c1:70:37:b5:27:6c:02:8a:4d:ad:8a:53:b3:bf:4b: 99:37:59:88:c0:f6:d4:05:80:f5:50:7f:69:bd:3e: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:AB:F6:6C:5B:21:6B:10:DD:BA:F2:00:05:A8:FA:14:44:4A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a4111b8e-0a64-3b24-9389-e0763deb2b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:34:89:da:7d:92:c3:db:49:56:12:11:7d:fb:c8:28:a1:e2: 71:ff:87:b3:e8:7e:11:26:52:73:8b:90:f0:7b:ff:c4:ec:6a: a7:37:87:e3:8d:38:46:d0:9d:5a:85:a3:66:f7:18:dc:7a:24: e2:b1:27:e3:d7:41:34:6d:88:df:5f:75:28:1b:36:0d:71:b8: 20:33:ed:44:d5:af:16:27:60:5c:24:32:0f:b5:ae:44:10:0f: 73:9e:07:88:5e:d4:5c:23:9a:f7:cc:9f:dc:36:5a:06:ee:ba: 41:9c:e2:cc:0d:ec:03:90:cb:9e:7b:85:c0:05:bb:78:5c:9b: 21:82:9e:32:d9:79:ab:69:e0:13:d5:9d:a1:62:be:1f:eb:cf: 8a:e9:61:35:4f:cd:85:41:0e:77:f7:44:d9:41:48:22:bc:88: 3b:dc:be:24:75:5f:a7:8a:47:37:cf:16:64:ef:07:2d:43:f0: 76:7d:83:42:50:a1:f9:7f:ae:3e:dc:b1:9c:39:a6:c3:72:b1: 9f:27:02:28:bb:c7:de:31:e0:c0:19:42:ab:5f:c1:bc:f3:50: 5a:18:58:6f:fc:83:ea:5b:90:38:c7:63:e7:77:2f:0b:34:bd: ac:34:c5:d8:16:14:e5:09:f2:a7:02:73:f9:67:9c:fe:9a:9d: ff:e1:ee:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+ZKKpJXQnWpRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjVkOTYzZTktMzdiNS00ZDk5LWExOWQtMjA2NGI5M2VlMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl20bY6v6j/uzNwVtdrK4t78IfWLajAB22gSa v8fsd80ht+K7NQQTLD6UbInLZMeQ09mIAYsBt1CYIowUaY7E8/F77DXsTO35gxhG q4fTEPvZbrqniVuVAaRfcef0QxskQ+MUwBu8l6KvUsccFVQUHUhTFI1Z65N1rlHc WW+dtAD5iM5KskhFJ3dCZDy5z335YudG54LHOVaBcZ30FZ7xANhayF5VDnY+r4EY 6T+XN5WQBlQB/Y/e4po1tAZddumXczyRaPFfSYIqA7pgPzST/bYdu/+J8L0Heg8R 4WGWfLzBcDe1J2wCik2tilOzv0uZN1mIwPbUBYD1UH9pvT4rcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrAq/ZsWyFrEN268gAFqPoUREp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTQxMTFiOGUtMGE2NC0z YjI0LTkzODktZTA3NjNkZWIyYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM0idp9ksPbSVYSEX37yCih4nH/h7PofhEmUnOLkPB7/8Tsaqc3h+ON OEbQnVqFo2b3GNx6JOKxJ+PXQTRtiN9fdSgbNg1xuCAz7UTVrxYnYFwkMg+1rkQQ D3OeB4he1FwjmvfMn9w2WgbuukGc4swN7AOQy557hcAFu3hcmyGCnjLZeatp4BPV naFivh/rz4rpYTVPzYVBDnf3RNlBSCK8iDvcviR1X6eKRzfPFmTvBy1D8HZ9g0JQ ofl/rj7csZw5psNysZ8nAii7x94x4MAZQqtfwbzzUFoYWG/8g+pbkDjHY+d3Lws0 vaw0xdgWFOUJ8qcCc/lnnP6anf/h7iE= -----END CERTIFICATE-----Generated at Mon Sep 28 01:00:02 2026 by rpki-client