$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa File: df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa (raw, json) Hash identifier: AFpNKFalgKxVxrxkLkCpNmMhbp2bjycwJ8aIDQkmhnk= Subject key identifier: 3B:E3:7B:71:80:0A:41:52:DE:FA:32:02:57:DF:19:7F:69:EC:2F:7A Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422 Certificate serial: 010D0C9F4328584F4C3D455B456072B0A32C5A00 Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 401307 IP address blocks: 136.228.47.0/24 maxlen: 24 136.228.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:45:5b:45:60:72:b0:a3:2c:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bcaf08d4-573e-4a14-828e-b2ed1f0ad8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:9a:9a:02:64:a4:7c:4a:96:5b:ec:0f:30: 2d:fb:df:b4:36:b7:52:25:b6:b6:ed:b1:35:be:d3: 32:62:2d:de:27:2e:ed:49:54:7b:81:0c:26:ff:f9: 02:24:f3:b8:52:17:7f:e9:8f:99:ee:9e:9e:af:e2: 43:bb:3c:3b:85:d4:ca:2d:f0:4f:cf:e3:dd:ce:ed: f1:99:80:44:78:a4:f1:71:61:b5:71:55:f1:77:51: cd:18:89:2e:7c:24:eb:2f:96:76:5e:51:90:00:37: 72:78:66:28:76:69:97:4d:3e:0c:e9:ae:d3:cf:89: 99:11:c1:24:9b:26:8a:dd:7a:4e:00:12:8c:0e:fe: e7:a4:db:60:30:83:ac:07:d5:16:f1:54:94:ad:6e: 3a:16:c0:b1:d0:8f:db:99:a9:17:16:cc:92:18:c5: 1a:d4:63:85:e8:c9:52:6c:08:58:66:1f:b3:1f:be: 90:57:90:dc:a4:a4:5f:b1:76:eb:1c:84:47:63:e2: d5:26:9e:61:88:e8:bb:29:b7:f4:38:fd:15:51:63: 77:c9:4b:d4:c0:f0:78:c1:cb:51:9d:4b:5e:4b:7f: 02:37:da:0a:ac:2a:78:6d:cc:60:7e:d9:a1:14:6e: cd:4f:2a:d7:f7:6e:fc:00:6e:5b:9a:d8:a5:88:82: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:7B:71:80:0A:41:52:DE:FA:32:02:57:DF:19:7F:69:EC:2F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl X509v3 Authority Key Identifier: keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer sbgp-ipAddrBlock: critical IPv4: 136.228.47.0/24 136.228.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:03:ff:ce:1a:04:d2:b6:55:c5:37:01:18:1a:98:be:d4:d5: 54:41:47:f5:56:7c:d5:e2:ad:03:1c:f7:2d:64:f4:0c:f4:02: 25:00:e6:99:e6:4b:40:71:6e:ac:ee:9c:71:74:53:23:d0:f5: 2a:a2:b7:8e:00:62:a9:60:1b:e7:fa:22:bc:1f:ee:a6:be:72: 56:03:38:09:ec:de:7e:6f:19:c5:79:63:0e:77:f3:23:fd:5b: 70:de:ac:9d:a2:36:68:be:b4:84:e8:d0:34:3d:41:9a:0b:69: 8e:b8:33:9e:e4:fe:30:d0:f6:07:bf:65:5e:e0:bc:c2:26:2d: e8:50:37:09:4d:b7:22:4d:71:48:76:ea:b5:de:2e:e3:89:87: 14:3a:00:d4:3e:4a:48:7b:01:09:5f:72:93:5b:76:53:b1:12: 25:9b:db:68:b1:b5:c7:c2:16:51:f7:38:e4:bc:91:ab:4b:59: 1f:f7:3a:bc:7f:14:62:a4:bb:89:74:a0:f6:bb:c8:17:d3:58: 9e:77:4e:cf:e2:dc:19:94:25:17:02:da:12:f6:2c:35:a7:e4: 33:10:d5:3b:84:ec:dd:0c:20:e0:1d:51:92:a9:97:a9:31:2f: 38:22:8a:f9:1c:d1:d7:5e:80:96:eb:77:87:95:3e:64:22:23: e8:8d:4a:81 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9MPUVbRWBysKMsWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl NDIyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmNhZjA4ZDQtNTczZS00YTE0LTgyOGUtYjJlZDFmMGFkOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEWamgJkpHxKllvsDzAt+9+0NrdSJba27bE1 vtMyYi3eJy7tSVR7gQwm//kCJPO4Uhd/6Y+Z7p6er+JDuzw7hdTKLfBPz+Pdzu3x mYBEeKTxcWG1cVXxd1HNGIkufCTrL5Z2XlGQADdyeGYodmmXTT4M6a7Tz4mZEcEk myaK3XpOABKMDv7npNtgMIOsB9UW8VSUrW46FsCx0I/bmakXFsySGMUa1GOF6MlS bAhYZh+zH76QV5DcpKRfsXbrHIRHY+LVJp5hiOi7Kbf0OP0VUWN3yUvUwPB4wctR nUteS38CN9oKrCp4bcxgftmhFG7NTyrX9278AG5bmtiliILPWQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDvje3GACkFS3voyAlffGX9p7C96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvZGYxZmZlMmEtYjkzOS0z MDNkLWI4NzUtYjc2ZjU0Y2Q2ZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi YmVjZGU0MjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiOQvAwQA iOQyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAgD/84aBNK2VcU3ARgamL7U1VRBR/VWfNXirQMc9y1k9Az0 AiUA5pnmS0BxbqzunHF0UyPQ9Sqit44AYqlgG+f6Irwf7qa+clYDOAns3n5vGcV5 Yw538yP9W3DerJ2iNmi+tITo0DQ9QZoLaY64M57k/jDQ9ge/ZV7gvMImLehQNwlN tyJNcUh26rXeLuOJhxQ6ANQ+Skh7AQlfcpNbdlOxEiWb22ixtcfCFlH3OOS8katL WR/3Orx/FGKku4l0oPa7yBfTWJ53Ts/i3BmUJRcC2hL2LDWn5DMQ1TuE7N0MIOAd UZKpl6kxLzgiivkc0ddegJbrd4eVPmQiI+iNSoE= -----END CERTIFICATE-----Generated at Mon Sep 28 22:49:35 2026 by rpki-client