$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa File: e218169e-d661-33ed-b65c-0a3b861e3023.roa (raw, json) Hash identifier: WX7QVx68KYPT29WP6zvFqcx83c5U4U5d5EI0WZLSB4Y= Subject key identifier: A2:21:57:1C:A4:21:55:1B:B2:AC:E7:E4:11:63:3C:32:5C:61:F7:4A Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D07ACEFEE0DEE58CA58F6F200 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 396253 IP address blocks: 136.228.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ef:ee:0d:ee:58:ca:58:f6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=956e5251-c595-402b-87b9-074a1982eb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:85:3e:65:a0:76:18:f1:45:5c:5a:48:f4: 80:57:2c:cf:ed:80:bf:88:c7:b5:64:30:22:0a:c5: 0e:1b:4d:2d:7a:ab:09:50:09:f2:4d:d4:99:18:41: 69:a5:4a:a6:c4:9d:e3:61:63:6b:f8:6c:0e:4d:89: 6d:a4:dd:32:43:a6:7a:94:af:41:91:b6:44:89:89: e1:92:cc:db:1e:62:65:2e:3b:79:2e:6b:b6:8c:60: 19:73:b9:da:bf:4d:fb:41:59:31:3b:94:8c:50:51: 9a:c6:e4:49:43:44:31:22:68:aa:cc:d1:81:69:28: c3:6a:fc:73:56:f8:34:be:49:cc:d7:a1:1d:33:25: 8f:08:a9:33:65:70:85:46:10:92:85:cd:d8:46:ca: f7:45:39:18:96:03:c3:8c:bc:77:96:86:26:9f:cc: c2:d2:c1:1d:40:d3:4c:b1:0d:d3:25:de:26:95:e9: d9:ec:bd:20:68:7c:59:40:98:7d:08:ad:03:28:4b: 0f:b7:a9:c6:9a:0a:91:59:6f:4b:26:d7:f0:26:95: 4a:63:cf:cb:93:01:53:b4:b0:02:c1:a7:82:61:0c: 90:2c:18:d2:e9:55:8c:0e:38:c0:06:67:df:b1:b9: 8f:fd:5b:07:a3:b9:a5:d8:19:42:27:3b:21:be:b1: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:21:57:1C:A4:21:55:1B:B2:AC:E7:E4:11:63:3C:32:5C:61:F7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b5:9e:31:74:09:55:c2:71:e8:c5:2c:c4:77:a4:23:10:d5: 21:50:fe:dc:fb:29:61:8a:8a:a0:c6:9c:0a:65:e4:a7:b7:bb: f0:73:b7:64:91:b5:3d:a2:d7:44:8e:97:0e:c9:bc:38:9d:a9: 21:cb:6e:91:9a:55:77:d5:6d:2f:a7:ea:84:41:3e:4d:1c:43: f5:f5:cb:39:ba:ac:df:aa:cf:30:31:0b:ac:63:a7:99:72:e0: ca:c9:f1:26:f9:36:3e:54:91:f1:0a:d5:25:d7:0a:e8:91:3c: c6:29:e9:ad:d1:9a:d8:d4:d9:0d:d9:71:fe:f2:ce:67:89:ae: e9:a3:09:4e:f5:6a:2a:5b:e0:9f:63:12:9b:4c:7d:13:09:7f: 66:68:ae:0f:15:a5:00:cb:ba:b4:73:d3:c5:ff:72:be:a9:43: 21:da:55:42:03:da:19:e4:29:d8:d3:5d:f4:94:5b:42:e5:0a: f8:e2:5a:1d:28:c0:4a:67:cd:fc:28:27:db:10:56:f7:36:12: 5a:2b:ce:7f:22:5b:14:b7:4e:d0:d0:f3:c5:1e:cc:2b:3f:c0: d2:b3:d8:9b:de:99:05:64:9f:d0:21:09:43:5d:48:5a:07:6f: a8:15:b5:6d:61:09:8a:10:24:79:1f:18:bc:cb:59:38:92:64: bd:09:0d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrO/uDe5Yylj28gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk OTU2ZTUyNTEtYzU5NS00MDJiLTg3YjktMDc0YTE5ODJlYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58OFPmWgdhjxRVxaSPSAVyzP7YC/iMe1ZDAi CsUOG00teqsJUAnyTdSZGEFppUqmxJ3jYWNr+GwOTYltpN0yQ6Z6lK9BkbZEiYnh kszbHmJlLjt5Lmu2jGAZc7nav037QVkxO5SMUFGaxuRJQ0QxImiqzNGBaSjDavxz Vvg0vknM16EdMyWPCKkzZXCFRhCShc3YRsr3RTkYlgPDjLx3loYmn8zC0sEdQNNM sQ3TJd4mlenZ7L0gaHxZQJh9CK0DKEsPt6nGmgqRWW9LJtfwJpVKY8/LkwFTtLAC waeCYQyQLBjS6VWMDjjABmffsbmP/VsHo7ml2BlCJzshvrENywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIhVxykIVUbsqzn5BFjPDJcYfdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTIxODE2OWUtZDY2MS0z M2VkLWI2NWMtMGEzYjg2MWUzMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiOT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe1njF0CVXCcejFLMR3pCMQ1SFQ/tz7KWGKiqDGnApl5Ke3u/Bzt2SR tT2i10SOlw7JvDidqSHLbpGaVXfVbS+n6oRBPk0cQ/X1yzm6rN+qzzAxC6xjp5ly 4MrJ8Sb5Nj5UkfEK1SXXCuiRPMYp6a3RmtjU2Q3Zcf7yzmeJrumjCU71aipb4J9j EptMfRMJf2Zorg8VpQDLurRz08X/cr6pQyHaVUID2hnkKdjTXfSUW0LlCvjiWh0o wEpnzfwoJ9sQVvc2Elorzn8iWxS3TtDQ88UezCs/wNKz2JvemQVkn9AhCUNdSFoH b6gVtW1hCYoQJHkfGLzLWTiSZL0JDds= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:37 2026 by rpki-client