$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa File: e8611f34-0183-3bbb-8727-d8dac426f2a2.roa (raw, json) Hash identifier: jeJBLhdt7irRPfmmp187omFtBBuDMJH+lhqIg+ZWj2I= Subject key identifier: 50:C6:0F:35:62:8C:9C:60:D7:E5:21:F2:92:D1:FB:27:C4:9A:CF:BB Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F45428832AEB56B1115E51480 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396253 IP address blocks: 136.228.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:88:32:ae:b5:6b:11:15:e5:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=f85db1c0-f834-4458-befc-c28f44caa3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:43:3c:ff:c9:17:18:ee:77:ca:a9:3b:69: 37:ad:d6:11:03:e3:70:4a:48:58:09:03:58:79:24: 7f:51:23:a9:00:26:c4:30:a8:fe:fc:4b:6f:6b:61: 05:aa:0f:d7:f8:20:c6:a1:44:f3:58:f1:9e:ac:a1: 9a:f2:49:f4:6b:94:4d:2a:11:28:8b:2c:b9:df:52: af:68:16:bd:34:24:67:c6:d1:9d:47:cc:8b:2d:4c: b6:21:a8:a1:88:11:00:e3:c5:8e:d6:af:cf:59:e6: ae:60:81:aa:47:ff:da:e0:e3:79:f4:9d:61:a1:f6: 9d:c5:6a:05:6a:d5:42:f3:5e:4b:08:a6:2a:ce:dd: a5:85:57:ff:3a:15:07:a0:09:50:eb:52:b2:58:34: 85:a9:34:be:31:a2:34:c1:c6:87:8e:59:cd:a7:a6: 05:4e:0a:92:99:b1:bd:d4:14:e7:30:ad:bd:e2:ca: 62:88:3c:0a:3c:85:6d:70:44:b4:d6:de:4b:23:06: a3:da:0b:49:12:f8:88:e7:7e:c6:f5:98:37:26:0f: 5a:56:21:07:23:c7:3c:0f:50:a0:37:ae:af:3b:2d: d9:20:1d:0b:58:45:d7:6e:93:b0:fe:94:85:5c:5b: 48:44:5e:0a:66:3a:d6:12:cc:be:59:9e:f9:dd:89: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C6:0F:35:62:8C:9C:60:D7:E5:21:F2:92:D1:FB:27:C4:9A:CF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e8611f34-0183-3bbb-8727-d8dac426f2a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d5:7b:68:84:76:fa:49:bf:fb:97:51:2c:cd:cb:8b:36:0d: ce:12:ba:6a:09:5f:20:c9:5b:e6:50:75:37:d9:d6:d5:bd:a1: a1:77:19:7b:b8:91:55:4b:5c:e0:88:53:8d:be:2c:70:68:66: 15:63:4b:3a:06:77:2c:51:4f:91:17:ab:37:aa:a0:35:0d:54: 23:94:79:85:c3:73:68:80:b2:d7:de:28:59:1c:ed:e0:18:9c: c9:0b:52:57:29:63:69:a4:4f:3e:1f:0f:eb:51:dd:b6:52:9d: f7:c8:ad:b8:d8:5e:d6:d0:25:89:d4:dc:f5:e2:c0:df:e0:fa: d7:78:6f:4d:57:05:79:7b:3a:40:3b:0c:96:21:a3:71:de:0b: 52:6a:70:c8:4f:01:fd:fb:49:b7:a3:22:8b:f8:85:0f:96:fb: b6:7e:f2:f0:24:3b:b7:e0:dd:a0:6b:8b:e6:ea:70:e2:53:48: cc:26:fa:4d:31:16:2c:a0:3a:e2:67:9a:6f:ad:bf:82:07:01: af:a3:03:32:82:4e:83:e7:06:34:dc:c6:e2:37:37:6a:d3:d5: ef:3c:0a:f0:2b:cb:fc:09:47:85:8d:1e:19:0f:29:64:35:07: 28:0c:00:1c:8f:44:96:73:7e:6d:7a:13:fd:a7:aa:24:67:6b: 76:01:d7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQogyrrVrERXlFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk Zjg1ZGIxYzAtZjgzNC00NDU4LWJlZmMtYzI4ZjQ0Y2FhM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwJDPP/JFxjud8qpO2k3rdYRA+NwSkhYCQNY eSR/USOpACbEMKj+/Etva2EFqg/X+CDGoUTzWPGerKGa8kn0a5RNKhEoiyy531Kv aBa9NCRnxtGdR8yLLUy2IaihiBEA48WO1q/PWeauYIGqR//a4ON59J1hofadxWoF atVC815LCKYqzt2lhVf/OhUHoAlQ61KyWDSFqTS+MaI0wcaHjlnNp6YFTgqSmbG9 1BTnMK294spiiDwKPIVtcES01t5LIwaj2gtJEviI537G9Zg3Jg9aViEHI8c8D1Cg N66vOy3ZIB0LWEXXbpOw/pSFXFtIRF4KZjrWEsy+WZ753Yk3swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDGDzVijJxg1+Uh8pLR+yfEms+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTg2MTFmMzQtMDE4My0z YmJiLTg3MjctZDhkYWM0MjZmMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELVe2iEdvpJv/uXUSzNy4s2Dc4SumoJXyDJW+ZQdTfZ1tW9oaF3GXu4 kVVLXOCIU42+LHBoZhVjSzoGdyxRT5EXqzeqoDUNVCOUeYXDc2iAstfeKFkc7eAY nMkLUlcpY2mkTz4fD+tR3bZSnffIrbjYXtbQJYnU3PXiwN/g+td4b01XBXl7OkA7 DJYho3HeC1JqcMhPAf37SbejIov4hQ+W+7Z+8vAkO7fg3aBri+bqcOJTSMwm+k0x FiygOuJnmm+tv4IHAa+jAzKCToPnBjTcxuI3N2rT1e88CvAry/wJR4WNHhkPKWQ1 BygMAByPRJZzfm16E/2nqiRna3YB11A= -----END CERTIFICATE-----Generated at Sun Oct 4 15:25:12 2026 by rpki-client