$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/606d7fa2-926a-3bfd-88c9-b3a117a605cb.roa File: 606d7fa2-926a-3bfd-88c9-b3a117a605cb.roa (raw, json) Hash identifier: POTFe0xvaJjZDMHpgCBaZYia1BP4MxTeuJTCvmVKF0Y= Subject key identifier: 28:58:A1:D4:E0:98:4A:70:97:78:22:52:3F:CF:85:91:CD:28:58:72 Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72FAE6AB3FD0D558A28568F0 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/606d7fa2-926a-3bfd-88c9-b3a117a605cb.roa Signing time: Fri 09 Oct 2026 22:03:08 +0000 ROA not before: Fri 09 Oct 2026 22:03:08 +0000 ROA not after: Thu 07 Jan 2027 23:03:08 +0000 asID: 6171 IP address blocks: 207.34.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:fa:e6:ab:3f:d0:d5:58:a2:85:68:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 22:03:08 2026 GMT Not After : Jan 7 23:03:08 2027 GMT Subject: CN=c596847d-df2f-4849-abc4-f28ee89a37f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:fe:13:a2:4a:c8:08:12:f0:35:4a:9f:11: 7d:8f:64:1d:09:01:3b:e0:36:89:34:07:bd:c1:20: b5:ec:a3:fd:aa:7b:10:ed:ec:07:17:b7:63:32:f3: 31:c1:9e:61:b6:32:96:00:f4:06:06:04:a0:df:a8: a1:16:2d:f8:dc:83:29:91:ea:57:41:c9:2f:9e:5f: 2d:e1:7f:a0:a3:f0:f9:d1:97:40:c6:25:40:10:af: d7:12:53:1b:d4:c6:b3:d2:1c:cb:03:92:d1:17:1a: a0:8a:73:92:11:27:9b:6f:1f:56:26:09:11:64:97: ed:ff:12:e0:ed:99:40:ef:3d:dd:be:76:35:a5:4c: 47:b4:b8:c4:fd:cb:69:70:3b:6a:bc:3c:7a:a6:66: 1f:04:cf:8b:95:38:3b:e8:52:c5:c0:84:1a:90:a6: 35:52:8e:19:fa:d9:9c:88:8c:64:b7:ba:4d:87:6f: 4b:69:e9:ca:75:1d:df:ed:bf:c2:fa:21:5d:59:bd: ac:68:fd:ae:18:cc:69:76:0e:da:2d:49:55:c5:bb: 2f:c9:01:bc:f9:31:ba:1c:9c:3b:03:f1:e8:b8:35: 3f:a7:4c:3b:34:a1:57:af:a4:16:27:62:42:50:df: 68:ea:35:25:86:9f:88:66:a0:50:76:fc:3c:3c:ba: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:58:A1:D4:E0:98:4A:70:97:78:22:52:3F:CF:85:91:CD:28:58:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/606d7fa2-926a-3bfd-88c9-b3a117a605cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 207.34.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:81:0c:22:14:04:51:98:60:5b:2d:1c:c4:02:07:2d:d1:ba: bc:41:9e:a4:e6:c2:a1:d8:e6:44:05:e5:9d:43:dd:bb:63:9c: 74:97:14:ea:0a:a2:ad:cc:94:7e:7a:8a:85:2a:1b:83:b4:ce: 14:2f:6a:8d:4f:44:7c:85:40:02:d2:f1:73:f1:ae:fb:0b:0f: c6:5f:e4:3c:c8:06:3e:d4:6f:53:4d:45:1b:c8:72:2d:4e:52: fd:74:42:c1:12:06:d0:c5:6d:de:c7:eb:84:d5:4e:d5:6d:6d: 3c:56:ef:d2:cc:38:88:1e:83:e2:f4:22:6e:fa:35:4a:0c:c5: fc:25:d8:e6:8c:68:0f:da:a9:c9:4b:45:07:43:d1:76:a6:92: 79:01:17:27:f8:f2:bd:c3:7d:ee:9f:9c:10:f5:3a:4e:f3:f8: a7:5d:8e:c0:cf:49:d2:1f:e9:7f:7c:49:75:b5:e0:40:fe:82: 8e:21:53:16:5f:84:ae:fa:ef:05:8b:c2:b0:6f:1c:6a:aa:c7: 14:52:37:01:0c:f7:70:97:f2:44:16:6b:78:19:76:00:af:a7: 38:67:78:06:2e:5a:28:62:8d:af:22:86:c8:76:70:55:4f:9a: 10:aa:b6:23:91:f1:18:2d:ea:7c:ff:fc:3f:16:7f:9d:e1:2c: dc:91:25:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+uarP9DVWKKFaPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIyMDMwOFoXDTI3MDEwNzIzMDMwOFowLzEtMCsGA1UEAxMk YzU5Njg0N2QtZGYyZi00ODQ5LWFiYzQtZjI4ZWU4OWEzN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0r+E6JKyAgS8DVKnxF9j2QdCQE74DaJNAe9 wSC17KP9qnsQ7ewHF7djMvMxwZ5htjKWAPQGBgSg36ihFi343IMpkepXQckvnl8t 4X+go/D50ZdAxiVAEK/XElMb1Maz0hzLA5LRFxqginOSESebbx9WJgkRZJft/xLg 7ZlA7z3dvnY1pUxHtLjE/ctpcDtqvDx6pmYfBM+LlTg76FLFwIQakKY1Uo4Z+tmc iIxkt7pNh29LaenKdR3f7b/C+iFdWb2saP2uGMxpdg7aLUlVxbsvyQG8+TG6HJw7 A/HouDU/p0w7NKFXr6QWJ2JCUN9o6jUlhp+IZqBQdvw8PLqMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChYodTgmEpwl3giUj/PhZHNKFhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvNjA2ZDdmYTItOTI2YS0z YmZkLTg4YzktYjNhMTE3YTYwNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+BDCIUBFGYYFstHMQCBy3RurxBnqTmwqHY5kQF5Z1D3btjnHSXFOoK oq3MlH56ioUqG4O0zhQvao1PRHyFQALS8XPxrvsLD8Zf5DzIBj7Ub1NNRRvIci1O Uv10QsESBtDFbd7H64TVTtVtbTxW79LMOIgeg+L0Im76NUoMxfwl2OaMaA/aqclL RQdD0XamknkBFyf48r3Dfe6fnBD1Ok7z+KddjsDPSdIf6X98SXW14ED+go4hUxZf hK767wWLwrBvHGqqxxRSNwEM93CX8kQWa3gZdgCvpzhneAYuWihija8ihsh2cFVP mhCqtiOR8Rgt6nz//D8Wf53hLNyRJZA= -----END CERTIFICATE-----Generated at Tue Nov 3 22:26:55 2026 by rpki-client