$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/38c91404-d434-3999-bdce-2a2fc0ae7e6f.roa File: 38c91404-d434-3999-bdce-2a2fc0ae7e6f.roa (raw, json) Hash identifier: 6bLkBCA7fnq9DLUfCbL58okDb6XK4bDoMeBDOhfzMO4= Subject key identifier: 0A:88:D7:66:E1:1D:CD:7B:69:08:4B:A2:9B:D8:17:0C:BF:DC:E9:25 Certificate issuer: /CN=1594aa31-e667-4afc-88a7-f2130384e994 Certificate serial: 010D0C9F4328584F7917A894FE3F4BD01FC90BC0 Authority key identifier: 11:48:DC:EF:D7:66:C8:7F:01:CC:85:BE:A7:AE:43:97:9C:97:6A:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/38c91404-d434-3999-bdce-2a2fc0ae7e6f.roa Signing time: Mon 12 Oct 2026 02:35:56 +0000 ROA not before: Mon 12 Oct 2026 02:35:56 +0000 ROA not after: Sun 10 Jan 2027 03:35:56 +0000 asID: 4307 IP address blocks: 65.111.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/1594aa31-e667-4afc-88a7-f2130384e994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/1594aa31-e667-4afc-88a7-f2130384e994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:79:17:a8:94:fe:3f:4b:d0:1f:c9:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1594aa31-e667-4afc-88a7-f2130384e994 Validity Not Before: Oct 12 02:35:56 2026 GMT Not After : Jan 10 03:35:56 2027 GMT Subject: CN=58940c2c-2953-4d0a-bfda-a37c0fbb7490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:96:cc:79:3d:53:93:46:c5:7c:6f:0e:21:99: 06:61:28:96:9a:05:7e:6a:d4:7e:5e:a4:15:86:53: bb:8a:61:ad:8f:8d:ca:3c:51:b3:6a:d6:ea:dc:7b: 5e:ba:68:3d:bf:bc:8d:e8:9a:04:6e:dc:b4:7f:4b: 02:42:56:09:86:d0:4f:91:6d:60:c0:70:8f:52:c6: a6:a6:be:b1:70:b1:94:b4:04:9a:d6:0c:38:4b:34: ee:be:ba:f2:f5:25:7f:2a:d1:f2:94:47:f9:b4:08: f1:45:fb:e7:fa:a2:02:d5:1c:d4:8f:39:54:45:f7: 9a:ad:09:e8:e1:0d:b6:fe:85:4b:02:3a:3d:55:54: 19:11:7f:95:48:e0:a6:41:8d:ad:a6:65:13:de:4a: 6b:60:10:05:8f:ae:73:f7:6d:f9:3e:f9:cc:ad:c3: e2:da:d3:b8:03:66:85:ab:8b:a1:69:f9:ca:3f:46: fa:48:f8:e2:e6:5e:8a:eb:3d:69:9e:9e:38:0b:8d: 3c:cf:3c:51:41:c8:9d:e4:73:c4:41:f0:88:07:35: e3:ed:53:f7:28:fe:1d:fc:34:07:a2:06:c3:50:e9: ce:ba:70:77:d3:69:56:3f:0e:e6:f8:28:8c:b6:ea: 5a:89:8c:16:cd:87:90:d4:6e:8a:ad:7f:f0:2f:7e: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:D7:66:E1:1D:CD:7B:69:08:4B:A2:9B:D8:17:0C:BF:DC:E9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/38c91404-d434-3999-bdce-2a2fc0ae7e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/1594aa31-e667-4afc-88a7-f2130384e994.crl X509v3 Authority Key Identifier: keyid:11:48:DC:EF:D7:66:C8:7F:01:CC:85:BE:A7:AE:43:97:9C:97:6A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994.cer sbgp-ipAddrBlock: critical IPv4: 65.111.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d0:8d:76:e9:66:e4:5e:fc:35:69:42:fc:a7:c0:69:c0:9d: 01:7f:9e:e1:0f:cc:a3:a0:87:7a:de:78:c9:77:de:60:80:c8: ec:08:8d:54:2d:29:b2:5f:bf:9d:8f:d9:97:ff:1f:97:9c:de: 37:1d:55:32:d2:bb:33:e6:1c:34:1d:dc:5a:8f:b0:f1:a6:f9: d6:92:58:aa:92:53:b5:a2:b0:ed:ae:39:7e:95:9e:82:0d:16: 14:ca:3b:e9:93:4c:61:97:54:15:bc:b3:6f:78:17:a0:09:1b: 87:75:27:8e:7a:17:ff:52:ab:cd:30:ba:84:9a:76:4c:b8:aa: 6f:52:02:13:07:d8:bd:ae:71:bb:ae:0d:d2:01:dd:16:1e:9b: df:8b:cc:e9:c7:b6:25:8f:13:02:c4:07:bf:c4:6a:60:3b:84: a1:0f:7c:6e:11:d6:97:99:2e:36:d2:63:da:56:6f:97:9d:6c: 01:91:a4:76:81:65:c7:11:6a:90:49:1f:c6:49:c8:b4:08:f8: ef:9b:81:05:6d:b9:64:44:18:3c:28:08:dd:a8:0d:4f:01:3f: c6:d0:38:b5:58:0b:7f:b5:29:ba:e6:bc:f4:8c:57:66:c2:27: d1:68:40:95:d4:d7:7f:42:9f:89:7f:d5:b9:52:44:7c:9d:b1: ce:63:36:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE95F6iU/j9L0B/JC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU5NGFhMzEtZTY2Ny00YWZjLTg4YTctZjIxMzAzODRl OTk0MB4XDTI2MTAxMjAyMzU1NloXDTI3MDExMDAzMzU1NlowLzEtMCsGA1UEAxMk NTg5NDBjMmMtMjk1My00ZDBhLWJmZGEtYTM3YzBmYmI3NDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZbMeT1Tk0bFfG8OIZkGYSiWmgV+atR+XqQV hlO7imGtj43KPFGzatbq3Hteumg9v7yN6JoEbty0f0sCQlYJhtBPkW1gwHCPUsam pr6xcLGUtASa1gw4SzTuvrry9SV/KtHylEf5tAjxRfvn+qIC1RzUjzlURfearQno 4Q22/oVLAjo9VVQZEX+VSOCmQY2tpmUT3kprYBAFj65z9235PvnMrcPi2tO4A2aF q4uhafnKP0b6SPji5l6K6z1pnp44C408zzxRQcid5HPEQfCIBzXj7VP3KP4d/DQH ogbDUOnOunB302lWPw7m+CiMtupaiYwWzYeQ1G6KrX/wL360pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqI12bhHc17aQhLopvYFwy/3OklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xNTk0 YWEzMS1lNjY3LTRhZmMtODhhNy1mMjEzMDM4NGU5OTQvMzhjOTE0MDQtZDQzNC0z OTk5LWJkY2UtMmEyZmMwYWU3ZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMTU5NGFhMzEtZTY2Ny00YWZjLTg4 YTctZjIxMzAzODRlOTk0LzE1OTRhYTMxLWU2NjctNGFmYy04OGE3LWYyMTMwMzg0 ZTk5NC5jcmwwHwYDVR0jBBgwFoAUEUjc79dmyH8BzIW+p65Dl5yXaiwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xNTk0YWEzMS1lNjY3LTRhZmMtODhhNy1mMjEz MDM4NGU5OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQW/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLQjXbpZuRe/DVpQvynwGnAnQF/nuEPzKOgh3reeMl33mCAyOwIjVQt KbJfv52P2Zf/H5ec3jcdVTLSuzPmHDQd3FqPsPGm+daSWKqSU7WisO2uOX6VnoIN FhTKO+mTTGGXVBW8s294F6AJG4d1J456F/9Sq80wuoSadky4qm9SAhMH2L2ucbuu DdIB3RYem9+LzOnHtiWPEwLEB7/EamA7hKEPfG4R1peZLjbSY9pWb5edbAGRpHaB ZccRapBJH8ZJyLQI+O+bgQVtuWREGDwoCN2oDU8BP8bQOLVYC3+1KbrmvPSMV2bC J9FoQJXU139Cn4l/1blSRHydsc5jNrA= -----END CERTIFICATE-----Generated at Wed Nov 4 20:25:02 2026 by rpki-client