$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/86c99779-ba33-3732-af0c-5d34474e29de.roa File: 86c99779-ba33-3732-af0c-5d34474e29de.roa (raw, json) Hash identifier: PjR+7CESevtVc7Yn+MfVwvffxPYPmjpbDDmPL9owG84= Subject key identifier: AC:9E:52:F9:76:6F:8C:FC:CA:55:DA:B1:39:81:E4:35:E0:56:B5:C8 Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72F96C29F49BC91B5E5F4040 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/86c99779-ba33-3732-af0c-5d34474e29de.roa Signing time: Fri 09 Oct 2026 22:00:09 +0000 ROA not before: Fri 09 Oct 2026 22:00:09 +0000 ROA not after: Thu 07 Jan 2027 23:00:09 +0000 asID: 6171 IP address blocks: 198.161.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:f9:6c:29:f4:9b:c9:1b:5e:5f:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 22:00:09 2026 GMT Not After : Jan 7 23:00:09 2027 GMT Subject: CN=e6f79b4e-c09c-4f54-9f1f-6a9fc8ffabeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:91:a0:a0:03:8e:62:5e:28:ea:8f:31:88: dc:c1:db:0d:07:05:73:3e:3a:34:8a:ac:76:44:6f: 0c:f4:f4:28:e2:11:30:ef:12:18:87:29:45:e4:c4: a1:7f:f7:17:0c:9d:30:35:29:dd:78:f9:b2:a6:fc: 07:ab:94:00:93:67:67:42:e1:bd:a0:58:0d:61:53: 3c:76:da:92:d2:a6:5b:8f:91:ee:c4:79:f4:77:2d: 25:7d:db:5d:fc:eb:0b:ce:06:9d:c5:81:91:f1:8d: 0d:1d:60:8a:6a:5e:80:75:e2:b3:87:ba:33:12:26: 93:4e:e5:80:19:de:42:f2:1f:43:ab:5a:48:7b:43: c4:a7:0c:d6:0c:4a:56:da:4f:c9:b8:bc:1c:7d:76: a4:20:de:90:0d:d1:65:8d:71:66:9b:c6:c2:dc:d6: e1:2b:51:a3:8e:86:d3:3b:64:cf:4d:0f:22:6f:fa: df:15:9c:8b:96:f6:7c:31:a0:e1:08:13:5b:b6:71: 79:bb:cb:31:27:21:f7:9a:ab:91:28:cb:fd:01:42: 15:10:1e:bc:a0:00:47:3a:e2:10:8d:93:ef:e9:88: 19:6f:0f:4d:60:b9:30:ab:8b:c1:73:a4:c1:7b:55: 89:7f:1c:f1:5f:0c:76:72:1b:38:8e:42:5a:79:27: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:52:F9:76:6F:8C:FC:CA:55:DA:B1:39:81:E4:35:E0:56:B5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/86c99779-ba33-3732-af0c-5d34474e29de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 198.161.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7c:e3:b9:88:cb:d0:5a:eb:aa:b3:78:7d:4c:ea:00:5f:bd: 3e:9c:76:c9:66:78:8e:31:2d:5d:78:4a:b0:45:08:d0:e4:76: 2a:14:4a:48:2d:09:ee:97:10:c8:db:ca:b2:cd:bb:a0:4e:db: 56:3d:b2:cf:6e:2d:54:bd:8d:21:6a:47:35:dc:c9:0e:eb:5d: f9:7c:81:fa:81:c3:05:51:92:9b:56:76:16:6f:7c:27:99:98: 81:02:4e:59:95:33:d5:95:86:08:d4:73:09:6a:35:8c:32:53: ae:02:9a:56:e9:29:cd:53:ce:3c:02:eb:81:fe:66:ab:84:70: 6a:d5:28:51:38:f1:6f:36:c5:e2:15:8a:b6:9d:56:f8:44:79: 41:0e:90:cd:06:b4:3a:64:5a:17:eb:ee:15:b4:1a:25:54:e2: 9b:ff:f8:76:d1:48:1f:e8:70:c5:4f:98:f3:71:da:9a:35:ae: 38:fd:d6:15:5b:e9:3f:63:ae:b9:43:0f:f3:95:3d:46:88:58: ba:36:0e:b4:65:df:4d:b2:82:1b:4b:1c:da:3e:5d:98:f2:14: 2c:ae:56:c5:34:fb:f8:a1:ea:36:a1:c9:fc:28:8a:f1:ad:00: 80:f9:e7:e2:c5:90:3c:34:c1:c6:4e:d3:00:83:c7:d8:80:0f: 05:a1:fd:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+Wwp9JvJG15fQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIyMDAwOVoXDTI3MDEwNzIzMDAwOVowLzEtMCsGA1UEAxMk ZTZmNzliNGUtYzA5Yy00ZjU0LTlmMWYtNmE5ZmM4ZmZhYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu6RoKADjmJeKOqPMYjcwdsNBwVzPjo0iqx2 RG8M9PQo4hEw7xIYhylF5MShf/cXDJ0wNSndePmypvwHq5QAk2dnQuG9oFgNYVM8 dtqS0qZbj5HuxHn0dy0lfdtd/OsLzgadxYGR8Y0NHWCKal6AdeKzh7ozEiaTTuWA Gd5C8h9Dq1pIe0PEpwzWDEpW2k/JuLwcfXakIN6QDdFljXFmm8bC3NbhK1GjjobT O2TPTQ8ib/rfFZyLlvZ8MaDhCBNbtnF5u8sxJyH3mquRKMv9AUIVEB68oABHOuIQ jZPv6YgZbw9NYLkwq4vBc6TBe1WJfxzxXwx2chs4jkJaeSerPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyeUvl2b4z8ylXasTmB5DXgVrXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvODZjOTk3NzktYmEzMy0z NzMyLWFmMGMtNWQzNDQ3NGUyOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF847mIy9Ba66qzeH1M6gBfvT6cdslmeI4xLV14SrBFCNDkdioUSkgt Ce6XEMjbyrLNu6BO21Y9ss9uLVS9jSFqRzXcyQ7rXfl8gfqBwwVRkptWdhZvfCeZ mIECTlmVM9WVhgjUcwlqNYwyU64CmlbpKc1TzjwC64H+ZquEcGrVKFE48W82xeIV iradVvhEeUEOkM0GtDpkWhfr7hW0GiVU4pv/+HbRSB/ocMVPmPNx2po1rjj91hVb 6T9jrrlDD/OVPUaIWLo2DrRl302yghtLHNo+XZjyFCyuVsU0+/ih6jahyfwoivGt AID55+LFkDw0wcZO0wCDx9iADwWh/W8= -----END CERTIFICATE-----Generated at Sun Nov 1 17:32:45 2026 by rpki-client