$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa File: ca8043ea-396c-309b-a025-9ec7cd6f267f.roa (raw, json) Hash identifier: acF4cKmy1K50vIImB5kJXCZwS92EAXMQ8+TSb4OrUbw= Subject key identifier: FA:15:47:68:99:71:FB:66:E7:6F:9D:56:44:0D:F3:19:D5:E7:65:19 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584CD13CA6441B8A820EE254B040 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 137922 IP address blocks: 136.228.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:a6:44:1b:8a:82:0e:e2:54:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=72d72eb4-9396-4753-9b35-4f373784897a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:04:69:9c:70:55:e4:cb:52:e7:38:78:19: 1f:58:1c:b6:c0:1c:5d:14:09:b3:4f:70:ea:d8:af: 86:da:10:c9:65:d3:7d:a6:6d:6d:ed:54:bf:c2:c8: ad:e1:27:a1:65:0c:7f:c3:6d:51:b3:f9:ed:20:63: 18:26:ad:74:ac:07:73:55:09:52:49:9b:32:d7:55: a7:32:f2:0d:8f:2d:bd:ac:8d:11:7b:38:c4:e6:1a: 10:bd:c8:ca:4c:d6:57:32:5d:73:20:ca:d8:14:57: b6:e6:b3:30:80:0a:81:d8:ef:d4:17:a9:b7:98:4b: b1:60:c5:29:11:4b:61:72:0b:d4:30:e9:d7:ca:e2: 02:0a:8d:d3:1d:4e:4b:f9:2b:af:ee:9c:95:a4:ca: be:b3:85:bc:d1:aa:c9:25:4c:ef:20:34:52:51:e5: b4:5f:ee:0e:05:10:d7:2a:83:36:6f:69:78:53:57: 5e:7c:dd:10:5f:a0:4a:07:97:b0:e3:34:a2:48:21: aa:66:4d:0d:fb:09:16:2a:6e:7e:fb:61:47:f4:3a: af:01:a0:fa:19:1e:bc:67:59:da:a7:81:a9:28:ff: 1f:95:c9:04:3b:33:4c:49:f4:07:d5:9c:30:1a:d1: a9:da:7c:b0:90:ea:04:29:b5:0a:3b:45:16:dd:2a: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:47:68:99:71:FB:66:E7:6F:9D:56:44:0D:F3:19:D5:E7:65:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e9:87:03:2d:df:04:a4:4f:f2:a7:88:09:07:6e:b0:f7:84: 71:75:52:3f:73:11:05:ee:8a:28:a9:c6:51:f7:e5:4a:f5:66: 01:98:3f:21:5b:a8:96:5d:b8:be:bc:06:ba:36:f2:b8:df:bd: 79:f2:73:f6:9e:b9:0a:53:a9:fc:2b:d2:0f:7e:1b:4d:02:9d: 6b:c2:74:35:40:db:47:19:7b:97:80:2f:42:83:61:7f:af:6d: f1:e6:96:cc:15:d5:d4:83:86:28:96:aa:c0:78:4a:38:52:34: 3e:59:81:06:54:29:e9:c9:f5:d2:bd:dc:a0:21:a4:a1:06:83: 3d:e4:16:fc:11:b9:e9:0f:93:f0:d1:37:d9:ad:2a:d3:f3:f7: 0d:88:4d:e0:21:23:7f:06:f1:d0:b8:dc:32:21:17:10:ca:e7: f8:6e:a6:24:21:f9:62:27:73:54:6d:44:2d:cb:e1:3b:2d:7e: 61:a8:2d:69:48:ec:07:9b:a6:33:bc:6d:77:b1:c5:3e:3a:77: 45:18:55:c7:37:0d:1c:29:d9:48:e5:ba:20:b3:1e:f7:a2:8b: 97:63:aa:e2:bd:82:a5:24:ac:ef:92:b8:7c:fb:8d:78:88:92: 49:ac:72:2d:53:30:23:d8:eb:33:e5:fc:76:2a:70:c2:fe:54: 3d:31:07:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKZEG4qCDuJUsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk NzJkNzJlYjQtOTM5Ni00NzUzLTliMzUtNGYzNzM3ODQ4OTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/IEaZxwVeTLUuc4eBkfWBy2wBxdFAmzT3Dq 2K+G2hDJZdN9pm1t7VS/wsit4SehZQx/w21Rs/ntIGMYJq10rAdzVQlSSZsy11Wn MvINjy29rI0RezjE5hoQvcjKTNZXMl1zIMrYFFe25rMwgAqB2O/UF6m3mEuxYMUp EUthcgvUMOnXyuICCo3THU5L+Suv7pyVpMq+s4W80arJJUzvIDRSUeW0X+4OBRDX KoM2b2l4U1defN0QX6BKB5ew4zSiSCGqZk0N+wkWKm5++2FH9DqvAaD6GR68Z1na p4GpKP8flckEOzNMSfQH1ZwwGtGp2nywkOoEKbUKO0UW3SqNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoVR2iZcftm52+dVkQN8xnV52UZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2E4MDQzZWEtMzk2Yy0z MDliLWEwMjUtOWVjN2NkNmYyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPphwMt3wSkT/KniAkHbrD3hHF1Uj9zEQXuiiipxlH35Ur1ZgGYPyFb qJZduL68Bro28rjfvXnyc/aeuQpTqfwr0g9+G00CnWvCdDVA20cZe5eAL0KDYX+v bfHmlswV1dSDhiiWqsB4SjhSND5ZgQZUKenJ9dK93KAhpKEGgz3kFvwRuekPk/DR N9mtKtPz9w2ITeAhI38G8dC43DIhFxDK5/hupiQh+WInc1RtRC3L4TstfmGoLWlI 7AebpjO8bXexxT46d0UYVcc3DRwp2UjluiCzHveii5djquK9gqUkrO+SuHz7jXiI kkmsci1TMCPY6zPl/HYqcML+VD0xB2o= -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:12 2026 by rpki-client