$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa File: ca8043ea-396c-309b-a025-9ec7cd6f267f.roa (raw, json) Hash identifier: RTWDvd/ax6qXv/bicPL32c08XqPLJlbmLR378R9CEPw= Subject key identifier: CD:B5:15:2B:22:7B:94:04:B9:4F:87:46:4B:0A:BC:D8:47:79:F9:B5 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F34826C05BD4A72D211B78000 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 137922 IP address blocks: 136.228.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6c:05:bd:4a:72:d2:11:b7:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=1cdf0c06-de5f-4acb-a796-6f9ca9923c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:94:1a:a6:6a:b4:90:43:6a:04:d3:9f:58: 94:ce:80:a3:2f:82:0e:ac:16:d9:69:ed:aa:e7:f0: e7:7b:b3:dc:61:d2:b1:7b:c7:ae:b5:46:89:73:0c: 00:96:ae:38:25:54:f4:3e:e2:b5:d8:a5:7d:df:c8: 20:b9:a9:9f:72:db:ad:2e:b1:41:82:57:b4:e3:d8: 38:b2:a1:e4:1a:9a:8c:17:8a:eb:7c:24:42:4d:1a: 7c:b8:4c:06:29:b5:d1:b1:88:85:2b:52:d8:fd:64: 6b:e9:12:77:a3:ff:f5:30:93:8e:75:ff:e6:55:38: 2c:f6:f3:3a:c5:d0:8d:10:b9:90:59:32:f3:1c:1f: 8e:56:ce:f3:e6:a0:2d:e8:08:79:4c:61:6f:49:89: 5a:68:68:6c:e9:ce:f5:2d:a7:33:49:06:c9:80:da: 51:f7:2e:fb:35:55:1b:9b:81:b5:d3:18:e4:a1:ac: 1e:f8:58:fe:1c:6f:99:a6:f1:3b:bf:a0:ab:07:30: be:c7:2a:a5:0c:0b:9d:d9:5b:96:69:f6:67:08:ed: ed:5f:c4:40:c8:6c:21:ca:f6:dc:10:98:52:ae:7e: 88:ef:e6:a3:2e:52:5b:d7:d1:d8:1a:ed:cf:e2:98: bb:88:35:db:5b:4b:e3:00:8f:c4:7d:2f:1e:32:6f: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B5:15:2B:22:7B:94:04:B9:4F:87:46:4B:0A:BC:D8:47:79:F9:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ca8043ea-396c-309b-a025-9ec7cd6f267f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d2:55:4f:61:56:27:87:99:da:b5:cc:d9:2c:86:81:e5:cb: 98:19:14:70:46:2f:53:64:f4:bd:25:6b:87:1a:de:d6:f2:d1: 55:51:cb:d0:cd:79:e5:30:eb:b7:85:8e:e4:f7:b7:f0:60:13: 98:b3:8a:20:99:c4:fc:3f:f3:d2:46:e7:f9:ea:64:aa:2e:2b: c4:18:56:97:ba:92:68:dd:53:38:8b:a3:6a:5e:96:ca:85:fa: 17:86:57:90:49:8a:9f:a2:60:6f:c7:f0:82:72:fc:9a:90:41: 2f:a9:67:36:fa:e4:39:3b:6d:c8:fb:37:eb:36:25:b2:47:3a: 3c:ac:5f:a6:6a:ca:de:bd:f0:02:40:ef:db:09:17:be:bb:1e: 89:5b:d8:c5:53:1e:04:85:b1:ad:d9:9e:52:73:1f:5b:04:4d: e6:93:32:5f:e0:46:9f:16:0c:79:9d:4b:5a:52:dc:bf:79:01: 13:70:e8:fa:d8:5d:f9:e7:c2:41:bb:c6:2b:6f:0f:75:8c:af: dd:a0:a7:44:fd:cc:01:99:8f:1d:d1:d6:bd:e0:e1:58:20:41: 96:48:fa:a4:8a:24:27:98:b8:75:fd:83:34:cd:cc:45:78:fd: 72:7b:9a:10:12:46:97:25:bf:a6:16:fd:6b:67:be:3e:c8:49: f8:35:d5:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gmwFvUpy0hG3gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk MWNkZjBjMDYtZGU1Zi00YWNiLWE3OTYtNmY5Y2E5OTIzYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ6UGqZqtJBDagTTn1iUzoCjL4IOrBbZae2q 5/Dne7PcYdKxe8eutUaJcwwAlq44JVT0PuK12KV938gguamfctutLrFBgle049g4 sqHkGpqMF4rrfCRCTRp8uEwGKbXRsYiFK1LY/WRr6RJ3o//1MJOOdf/mVTgs9vM6 xdCNELmQWTLzHB+OVs7z5qAt6Ah5TGFvSYlaaGhs6c71LaczSQbJgNpR9y77NVUb m4G10xjkoawe+Fj+HG+ZpvE7v6CrBzC+xyqlDAud2VuWafZnCO3tX8RAyGwhyvbc EJhSrn6I7+ajLlJb19HYGu3P4pi7iDXbW0vjAI/EfS8eMm+0CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM21FSsie5QEuU+HRksKvNhHefm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2E4MDQzZWEtMzk2Yy0z MDliLWEwMjUtOWVjN2NkNmYyNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzSVU9hVieHmdq1zNkshoHly5gZFHBGL1Nk9L0la4ca3tby0VVRy9DN eeUw67eFjuT3t/BgE5iziiCZxPw/89JG5/nqZKouK8QYVpe6kmjdUziLo2pelsqF +heGV5BJip+iYG/H8IJy/JqQQS+pZzb65Dk7bcj7N+s2JbJHOjysX6Zqyt698AJA 79sJF767Holb2MVTHgSFsa3ZnlJzH1sETeaTMl/gRp8WDHmdS1pS3L95ARNw6PrY XfnnwkG7xitvD3WMr92gp0T9zAGZjx3R1r3g4VggQZZI+qSKJCeYuHX9gzTNzEV4 /XJ7mhASRpclv6YW/Wtnvj7ISfg11QM= -----END CERTIFICATE-----Generated at Tue Oct 6 17:03:01 2026 by rpki-client