$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa File: c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa (raw, json) Hash identifier: d9GE29GZX00iigOrhJpXVILfpq6Deap8OvL2bvbuF6A= Subject key identifier: 3A:4A:A6:A3:91:90:9C:71:4B:0F:7B:69:92:29:EE:28:22:3E:F5:49 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584CED278705CC6FAED6384EE400 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 137922 IP address blocks: 136.228.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:87:05:cc:6f:ae:d6:38:4e:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=1fdb1796-4b07-4f5a-9de6-af273efd0637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a8:8c:03:1d:99:50:77:3f:1b:89:4d:6d:78: 12:79:e8:8a:96:95:3e:1f:5c:42:43:22:43:6a:62: 4e:cd:f1:3b:36:b3:f9:2f:4e:79:e6:6a:87:8a:e3: 20:24:30:97:6b:3f:cf:d0:91:19:03:3d:ae:eb:ce: 5d:4d:74:b1:37:1d:ce:72:9d:e9:20:8b:1f:e0:d0: 36:37:9e:2f:7c:f1:e3:c7:c9:4c:7a:db:95:43:35: 2c:ac:4b:99:f9:06:ac:ee:0e:e6:4d:65:5f:b8:34: 96:a1:2f:05:e7:99:63:0b:44:c5:a4:4b:26:da:6a: ad:03:c0:8c:7a:3b:8b:ef:76:5f:63:f6:26:b4:ff: a7:51:b9:50:5d:d6:de:3d:84:49:38:23:11:01:53: 62:e0:c3:0c:c4:23:45:5a:1e:47:ec:4c:87:55:62: 96:4d:25:c7:18:fd:95:cc:a0:3e:f6:3c:43:a0:e1: cf:fe:ca:e3:e4:fa:7c:b4:75:5c:04:07:21:cd:41: ac:90:64:18:b8:f7:56:a5:19:a8:d6:6f:b7:0b:9e: 98:75:66:ff:4f:df:57:1b:bf:df:22:e6:57:3d:41: b7:52:54:22:41:9f:21:e0:2b:fb:3d:9c:ea:c6:52: 86:08:d3:26:8b:68:c1:9e:32:33:82:d3:a2:31:a7: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4A:A6:A3:91:90:9C:71:4B:0F:7B:69:92:29:EE:28:22:3E:F5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c853aaef-ddeb-3167-94bf-02b2d2d663a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:25:d1:2d:ac:c2:59:56:99:c4:40:0b:82:2d:4d:b5:ad:5c: c1:d4:55:bf:4a:8b:0c:87:45:1d:a3:df:65:17:83:b7:ae:46: 82:b0:40:e8:b8:43:e3:76:8a:31:bb:4b:25:2c:f5:bb:8b:0a: a1:4c:fc:43:30:2f:8f:e0:2d:80:80:43:31:44:a9:46:50:a8: b1:3e:3b:89:18:a7:da:c3:09:bc:24:76:5c:f4:b9:dd:ce:c0: fe:aa:71:99:f5:5c:2a:31:fe:03:4b:b3:1f:b8:ca:bd:80:60: b0:0b:9e:fa:44:2b:64:ce:cb:b3:4a:b4:38:74:7a:9c:ef:3b: 59:ca:5c:5c:18:7b:f5:58:38:1f:22:5f:97:24:e1:f8:0d:50: 20:82:a4:78:66:a6:25:ce:a2:d8:20:0d:88:7b:32:ce:d6:14: 25:5a:9e:c1:cc:34:b9:ca:e0:ce:2d:1d:9d:14:c1:53:24:fe: 31:d3:75:5c:91:b4:d9:36:31:d7:55:0f:88:48:2a:f4:2f:43: 95:74:82:c7:f2:45:d1:15:81:d0:1a:74:48:6b:90:bf:90:46: 9c:a7:d0:5a:0e:fc:53:1c:b0:84:fc:f1:b4:ab:8c:06:99:35: ac:81:d7:6c:43:20:2c:42:5a:ca:40:5c:29:53:15:a0:40:e0: 3b:87:88:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4cFzG+u1jhO5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk MWZkYjE3OTYtNGIwNy00ZjVhLTlkZTYtYWYyNzNlZmQwNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaiMAx2ZUHc/G4lNbXgSeeiKlpU+H1xCQyJD amJOzfE7NrP5L0555mqHiuMgJDCXaz/P0JEZAz2u685dTXSxNx3Ocp3pIIsf4NA2 N54vfPHjx8lMetuVQzUsrEuZ+Qas7g7mTWVfuDSWoS8F55ljC0TFpEsm2mqtA8CM ejuL73ZfY/YmtP+nUblQXdbePYRJOCMRAVNi4MMMxCNFWh5H7EyHVWKWTSXHGP2V zKA+9jxDoOHP/srj5Pp8tHVcBAchzUGskGQYuPdWpRmo1m+3C56YdWb/T99XG7/f IuZXPUG3UlQiQZ8h4Cv7PZzqxlKGCNMmi2jBnjIzgtOiMacTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpKpqORkJxxSw97aZIp7igiPvVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYzg1M2FhZWYtZGRlYi0z MTY3LTk0YmYtMDJiMmQyZDY2M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgl0S2swllWmcRAC4ItTbWtXMHUVb9KiwyHRR2j32UXg7euRoKwQOi4 Q+N2ijG7SyUs9buLCqFM/EMwL4/gLYCAQzFEqUZQqLE+O4kYp9rDCbwkdlz0ud3O wP6qcZn1XCox/gNLsx+4yr2AYLALnvpEK2TOy7NKtDh0epzvO1nKXFwYe/VYOB8i X5ck4fgNUCCCpHhmpiXOotggDYh7Ms7WFCVansHMNLnK4M4tHZ0UwVMk/jHTdVyR tNk2MddVD4hIKvQvQ5V0gsfyRdEVgdAadEhrkL+QRpyn0FoO/FMcsIT88bSrjAaZ NayB12xDICxCWspAXClTFaBA4DuHiH0= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:49 2026 by rpki-client