$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa File: 38637c89-cc87-3358-8ba2-8284fe77e03e.roa (raw, json) Hash identifier: yCNSOZXMN/qUicpsrBwXojIchuoTcpwvLwNArk4KB0s= Subject key identifier: EA:AA:13:5E:08:6A:CB:9C:5D:10:01:25:EE:C6:15:A3:8C:BD:D4:DB Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584F4984FE294A505E845E6FF7E0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36492 IP address blocks: 136.22.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fe:29:4a:50:5e:84:5e:6f:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd9df08e-813f-4249-a791-5c8ed54e9423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:08:04:70:c8:12:54:92:f3:60:ca:33:22: ec:6b:d7:f8:d3:8b:6f:c3:5d:e3:b5:9e:57:58:4b: 7f:a6:43:79:56:53:6e:2c:ea:76:4d:d1:83:ad:a1: 37:47:87:bb:87:9c:24:af:4c:98:e9:a3:b0:7d:94: cb:6d:30:70:a0:73:f2:cf:13:38:20:56:be:47:fb: b4:23:74:07:91:17:9a:a8:ad:1f:eb:7a:44:a6:d1: 9f:d5:9c:73:5d:b8:83:9c:73:18:3b:7a:e5:c2:20: 3f:e1:4f:5d:ea:81:b1:d0:28:a9:07:70:a1:4b:46: 19:ed:62:7e:5d:10:76:41:ad:93:a4:86:89:8a:c9: 35:2e:29:c2:67:98:9b:b2:9c:9e:b8:aa:0e:a7:65: b7:0a:dd:3a:9e:89:db:aa:6f:a0:52:9f:47:da:ff: 14:fc:45:6a:ee:22:83:73:62:7f:1b:ba:5f:c5:e3: 31:f7:ed:01:a9:29:58:6d:57:d8:2e:93:d7:18:8b: a4:b0:13:23:f8:12:59:4c:9b:a6:2b:36:11:42:b0: 97:c4:ea:2b:d8:1c:d4:7c:0a:4c:36:97:a7:a4:ba: 60:f7:ae:1c:85:93:e7:9f:ef:e8:0e:eb:d5:e6:2f: 0e:b6:ea:bf:7c:7d:41:e0:0e:9a:d3:e7:8a:4a:ce: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:13:5E:08:6A:CB:9C:5D:10:01:25:EE:C6:15:A3:8C:BD:D4:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:66:b7:81:8f:fe:f5:f2:8c:96:c0:c8:e0:dd:18:b8:96:aa: 49:88:26:57:07:6f:d7:fa:d2:73:d2:9b:03:ec:a0:32:77:36: 07:d7:95:f3:d7:d8:9a:8e:d4:5e:56:64:ee:fa:be:f0:75:90: 74:38:3b:54:71:98:8d:c9:36:4c:0f:0a:37:2e:e4:bb:15:d0: a0:42:4e:72:df:2d:a3:38:88:e8:4f:7a:db:80:4b:c7:9d:9c: ee:40:09:50:c7:44:c3:55:70:f4:f7:6a:65:72:1e:d2:b6:92: 78:17:cd:38:78:00:15:00:0a:c7:0d:86:09:07:74:e5:9b:d7: 77:c7:be:4c:82:26:ae:56:bd:92:0a:9c:b3:01:cf:ed:92:3e: bc:48:b1:ee:50:af:79:3b:49:32:9a:0f:d9:24:72:e5:b5:5c: 0b:63:04:a2:58:7c:fe:dc:9e:34:48:be:f2:fc:57:23:4b:7a: 74:a3:cb:33:8e:6f:8c:1d:99:fc:15:a0:c1:e1:01:6f:41:a3: 09:bb:1a:83:27:d2:f5:8d:38:52:36:96:fb:16:64:29:48:8f: df:0d:c4:cc:9f:d9:01:a8:15:52:51:19:aa:a9:d0:71:ef:99: be:32:47:5b:68:91:2b:37:73:59:81:1a:b9:ad:ee:09:83:9b: 29:69:c1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhP4pSlBehF5v9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ5ZGYwOGUtODEzZi00MjQ5LWE3OTEtNWM4ZWQ1NGU5NDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3AIBHDIElSS82DKMyLsa9f404tvw13jtZ5X WEt/pkN5VlNuLOp2TdGDraE3R4e7h5wkr0yY6aOwfZTLbTBwoHPyzxM4IFa+R/u0 I3QHkReaqK0f63pEptGf1ZxzXbiDnHMYO3rlwiA/4U9d6oGx0CipB3ChS0YZ7WJ+ XRB2Qa2TpIaJisk1LinCZ5ibspyeuKoOp2W3Ct06nonbqm+gUp9H2v8U/EVq7iKD c2J/G7pfxeMx9+0BqSlYbVfYLpPXGIuksBMj+BJZTJumKzYRQrCXxOor2BzUfApM NpenpLpg964chZPnn+/oDuvV5i8Otuq/fH1B4A6a0+eKSs6n8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqqE14IasucXRABJe7GFaOMvdTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzg2MzdjODktY2M4Ny0z MzU4LThiYTItODI4NGZlNzdlMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5mt4GP/vXyjJbAyODdGLiWqkmIJlcHb9f60nPSmwPsoDJ3NgfXlfPX 2JqO1F5WZO76vvB1kHQ4O1RxmI3JNkwPCjcu5LsV0KBCTnLfLaM4iOhPetuAS8ed nO5ACVDHRMNVcPT3amVyHtK2kngXzTh4ABUACscNhgkHdOWb13fHvkyCJq5WvZIK nLMBz+2SPrxIse5Qr3k7STKaD9kkcuW1XAtjBKJYfP7cnjRIvvL8VyNLenSjyzOO b4wdmfwVoMHhAW9Bowm7GoMn0vWNOFI2lvsWZClIj98NxMyf2QGoFVJRGaqp0HHv mb4yR1tokSs3c1mBGrmt7gmDmylpwXU= -----END CERTIFICATE-----Generated at Fri Oct 9 20:36:59 2026 by rpki-client