$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/3c720ef3-c27e-307f-a7da-fb73a7313d26.roa File: 3c720ef3-c27e-307f-a7da-fb73a7313d26.roa (raw, json) Hash identifier: N6Wsn76VK+ztJqBmX91NmbySp6hy8l2CMmItm+Pv/d8= Subject key identifier: 2E:71:97:1B:51:6A:BB:90:B8:E9:3F:B1:46:90:84:3D:E5:82:A6:6A Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72F99BAA5B3C6FD12FB50640 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/3c720ef3-c27e-307f-a7da-fb73a7313d26.roa Signing time: Fri 09 Oct 2026 22:00:32 +0000 ROA not before: Fri 09 Oct 2026 22:00:32 +0000 ROA not after: Thu 07 Jan 2027 23:00:32 +0000 asID: 6171 IP address blocks: 198.161.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:f9:9b:aa:5b:3c:6f:d1:2f:b5:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 22:00:32 2026 GMT Not After : Jan 7 23:00:32 2027 GMT Subject: CN=adac5afb-9f2d-4547-b295-da5230e4e461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:d5:d5:09:7b:96:63:70:68:d4:20:e9:97: 09:c3:17:fd:bd:90:89:8e:a8:d2:cd:5b:b6:b1:ed: 7f:b8:56:e7:d3:8d:68:7b:af:cd:6d:da:b2:c6:a9: d9:7d:23:e8:e4:c0:17:d6:d9:6b:aa:a9:fd:be:66: 7c:b0:d1:6c:0c:07:d4:56:f8:48:3b:72:89:2b:75: 3f:f7:80:83:86:ae:ce:88:1f:41:c8:8e:e8:bb:bd: 06:22:c5:d1:3e:53:3f:a1:8d:b7:63:b5:80:4c:a9: fa:b2:2f:15:35:d2:23:df:ab:e8:93:4f:3e:25:6f: d1:73:96:34:cd:50:95:16:47:a0:cf:f0:e9:e6:ac: cc:8d:17:cd:c8:18:23:89:0f:8a:25:a5:47:39:3f: ac:3d:c2:34:ec:72:5d:8f:75:a1:51:87:1e:ca:4b: 66:47:8a:4f:93:04:ce:1f:14:a0:bb:f2:27:14:88: c1:28:5c:cc:8f:a1:f5:b8:a9:c1:02:19:8e:70:23: a2:cb:16:2d:8f:c6:6f:6a:4d:69:5d:2c:8e:17:15: 9e:de:e0:cb:24:b7:a9:87:64:42:69:07:20:3e:be: 4f:64:6c:44:e8:4a:e0:87:f8:09:ae:49:8d:78:82: d5:7e:a4:b0:64:a4:52:de:48:6b:56:30:6d:91:89: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:71:97:1B:51:6A:BB:90:B8:E9:3F:B1:46:90:84:3D:E5:82:A6:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/3c720ef3-c27e-307f-a7da-fb73a7313d26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 198.161.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:86:64:f7:b0:e7:76:f7:4a:eb:40:cd:f1:87:b3:be:86:03: d8:87:66:ad:d0:2a:55:59:aa:f5:8d:da:46:fa:2d:a6:de:6d: 0d:17:4b:01:8c:f7:18:ac:d0:53:f9:5f:cf:90:58:92:4b:04: 6f:89:af:91:c7:fc:e3:0c:d8:0b:79:50:eb:be:f5:d7:f7:9b: 59:88:a9:a6:3e:fc:3e:48:b5:fe:df:03:b2:d9:d3:5f:8c:d2: a6:1d:a2:fa:3b:dd:b4:18:53:96:93:2a:b5:13:95:1b:4d:fa: ef:c7:da:9b:1c:ab:bd:fb:d5:1b:42:fa:9f:c9:e5:b8:84:a0: a1:b1:0f:93:de:ad:69:20:a4:ea:f5:cb:13:e3:ba:69:c9:a7: bf:d1:1f:24:6b:ee:76:6f:e8:b7:2c:13:8e:0f:54:4e:aa:0d: 9f:de:88:05:10:ff:27:35:13:9e:47:9c:48:dd:93:10:9c:a9: 71:27:44:f9:d7:be:96:06:81:b3:aa:12:af:22:77:71:39:71: 55:8f:5c:22:07:fa:88:3f:b3:8f:6b:ba:96:d2:3e:27:c5:7b: ce:7a:5f:c0:99:c2:96:d3:64:5e:de:1e:aa:7b:24:13:6b:5b: 68:10:9a:6c:ea:c0:24:04:04:81:a9:2e:9b:36:c2:68:5b:97: 15:b3:87:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+ZuqWzxv0S+1BkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIyMDAzMloXDTI3MDEwNzIzMDAzMlowLzEtMCsGA1UEAxMk YWRhYzVhZmItOWYyZC00NTQ3LWIyOTUtZGE1MjMwZTRlNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl/V1Ql7lmNwaNQg6ZcJwxf9vZCJjqjSzVu2 se1/uFbn041oe6/NbdqyxqnZfSPo5MAX1tlrqqn9vmZ8sNFsDAfUVvhIO3KJK3U/ 94CDhq7OiB9ByI7ou70GIsXRPlM/oY23Y7WATKn6si8VNdIj36vok08+JW/Rc5Y0 zVCVFkegz/Dp5qzMjRfNyBgjiQ+KJaVHOT+sPcI07HJdj3WhUYceyktmR4pPkwTO HxSgu/InFIjBKFzMj6H1uKnBAhmOcCOiyxYtj8Zvak1pXSyOFxWe3uDLJLeph2RC aQcgPr5PZGxE6Ergh/gJrkmNeILVfqSwZKRS3khrVjBtkYnZ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5xlxtRaruQuOk/sUaQhD3lgqZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvM2M3MjBlZjMtYzI3ZS0z MDdmLWE3ZGEtZmI3M2E3MzEzZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuGZPew53b3SutAzfGHs76GA9iHZq3QKlVZqvWN2kb6LabebQ0XSwGM 9xis0FP5X8+QWJJLBG+Jr5HH/OMM2At5UOu+9df3m1mIqaY+/D5Itf7fA7LZ01+M 0qYdovo73bQYU5aTKrUTlRtN+u/H2pscq7371RtC+p/J5biEoKGxD5PerWkgpOr1 yxPjumnJp7/RHyRr7nZv6LcsE44PVE6qDZ/eiAUQ/yc1E55HnEjdkxCcqXEnRPnX vpYGgbOqEq8id3E5cVWPXCIH+og/s49rupbSPifFe856X8CZwpbTZF7eHqp7JBNr W2gQmmzqwCQEBIGpLps2wmhblxWzh0U= -----END CERTIFICATE-----Generated at Sun Nov 1 14:44:46 2026 by rpki-client