$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/9f5e33b4-3379-3f3d-9c2c-fd8bbe3f688b.roa File: 9f5e33b4-3379-3f3d-9c2c-fd8bbe3f688b.roa (raw, json) Hash identifier: pp0I+H0YmI10f7NC961+L/RtE+KvQHqV/j9AaOsvxiM= Subject key identifier: 3A:46:96:3E:ED:7C:12:BB:FA:88:A5:E3:1D:E3:A0:5B:C2:36:37:DF Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72F9002F253A4E0CB2596F80 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/9f5e33b4-3379-3f3d-9c2c-fd8bbe3f688b.roa Signing time: Fri 09 Oct 2026 21:59:18 +0000 ROA not before: Fri 09 Oct 2026 21:59:18 +0000 ROA not after: Thu 07 Jan 2027 22:59:18 +0000 asID: 6171 IP address blocks: 198.161.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:f9:00:2f:25:3a:4e:0c:b2:59:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 21:59:18 2026 GMT Not After : Jan 7 22:59:18 2027 GMT Subject: CN=d07025f2-c67e-47f1-bae3-5c4414b6ce6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:a2:aa:aa:db:80:c6:a8:67:64:aa:39:89: c0:df:f1:0b:a3:65:04:32:45:9d:73:77:95:2e:83: 88:a7:92:d6:8b:53:79:06:13:e3:4a:18:df:9c:32: 5f:fa:00:8f:69:96:b0:9a:5c:37:7b:d6:75:5e:53: 83:b3:ee:1f:d0:d9:ec:27:43:27:cd:7c:db:ff:30: 11:be:0b:b5:62:28:f0:23:0e:cf:97:58:45:9e:21: 30:af:fa:a4:03:c1:bf:53:5b:c5:7a:77:ca:3a:2b: ed:77:21:56:ad:03:2f:22:92:48:04:be:90:25:9b: 7f:6a:3b:da:3e:c8:57:77:c1:8e:15:e7:1f:48:e6: c6:7e:a3:f3:11:ab:36:02:c1:5e:6a:10:32:17:03: b6:d6:b9:8a:38:30:75:61:02:75:85:e7:b9:50:c9: be:5f:ac:da:0f:a1:50:24:7a:e3:e6:5f:f1:9c:8b: 7e:9c:55:9b:fc:63:b6:8c:12:1d:b0:6b:a0:b4:8d: 1c:18:fb:bd:20:77:90:01:fa:d4:c3:b9:9b:55:7f: 22:53:33:ca:cc:30:27:a9:ed:b1:ee:4f:b5:97:38: b5:50:88:e6:d0:67:d3:ce:92:59:86:ce:ea:99:d1: 45:02:f2:95:8b:3f:50:b6:84:4b:01:6e:18:b1:ef: 2a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:46:96:3E:ED:7C:12:BB:FA:88:A5:E3:1D:E3:A0:5B:C2:36:37:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/9f5e33b4-3379-3f3d-9c2c-fd8bbe3f688b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 198.161.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cd:ec:c5:f9:6b:68:10:07:59:98:6e:5a:66:a4:66:76:f9: 2b:d9:54:26:9e:c6:ba:f1:93:a3:04:6a:19:3f:aa:c4:e8:d1: ba:27:ff:25:77:c1:c1:fb:12:d0:7d:45:fb:9e:1f:c7:ee:9a: aa:8e:ac:d6:00:7f:25:80:98:7f:28:1b:49:8a:c3:11:56:d8: 7f:2e:56:67:ec:d8:22:80:25:d5:d7:f1:59:17:7a:96:69:15: 56:2a:66:72:76:0b:03:ef:5b:98:1b:6d:3e:b3:9b:0f:a5:6c: 88:36:68:8d:e9:1f:a8:d0:f8:6e:e6:46:71:95:1a:b7:dc:ed: 44:16:37:86:0a:17:81:d4:29:94:e6:78:8b:5c:14:bc:45:40: 84:e4:b9:c5:ca:ae:c1:1b:2d:2a:9b:97:28:38:8e:61:6e:73: 28:2a:27:a9:a0:8b:70:be:f2:44:28:75:2f:b8:b8:df:6b:12: 29:a1:09:60:74:c3:7e:5e:aa:0c:96:cc:a1:13:75:0f:0e:5a: d3:79:6a:5e:44:11:8f:e6:b6:aa:dd:e2:4d:89:ae:af:92:d2: 0e:ad:33:27:3d:24:9f:6b:0e:cc:b8:54:fd:2f:4b:5b:8d:d2: da:c0:5a:01:71:aa:a4:09:a8:66:0b:02:03:b9:56:11:bb:10: c1:e1:a6:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+QAvJTpODLJZb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIxNTkxOFoXDTI3MDEwNzIyNTkxOFowLzEtMCsGA1UEAxMk ZDA3MDI1ZjItYzY3ZS00N2YxLWJhZTMtNWM0NDE0YjZjZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrSiqqrbgMaoZ2SqOYnA3/ELo2UEMkWdc3eV LoOIp5LWi1N5BhPjShjfnDJf+gCPaZawmlw3e9Z1XlODs+4f0NnsJ0MnzXzb/zAR vgu1YijwIw7Pl1hFniEwr/qkA8G/U1vFenfKOivtdyFWrQMvIpJIBL6QJZt/ajva PshXd8GOFecfSObGfqPzEas2AsFeahAyFwO21rmKODB1YQJ1hee5UMm+X6zaD6FQ JHrj5l/xnIt+nFWb/GO2jBIdsGugtI0cGPu9IHeQAfrUw7mbVX8iUzPKzDAnqe2x 7k+1lzi1UIjm0GfTzpJZhs7qmdFFAvKViz9QtoRLAW4Yse8q1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpGlj7tfBK7+oil4x3joFvCNjffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvOWY1ZTMzYjQtMzM3OS0z ZjNkLTljMmMtZmQ4YmJlM2Y2ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbN7MX5a2gQB1mYblpmpGZ2+SvZVCaexrrxk6MEahk/qsTo0bon/yV3 wcH7EtB9RfueH8fumqqOrNYAfyWAmH8oG0mKwxFW2H8uVmfs2CKAJdXX8VkXepZp FVYqZnJ2CwPvW5gbbT6zmw+lbIg2aI3pH6jQ+G7mRnGVGrfc7UQWN4YKF4HUKZTm eItcFLxFQITkucXKrsEbLSqblyg4jmFucygqJ6mgi3C+8kQodS+4uN9rEimhCWB0 w35eqgyWzKETdQ8OWtN5al5EEY/mtqrd4k2Jrq+S0g6tMyc9JJ9rDsy4VP0vS1uN 0trAWgFxqqQJqGYLAgO5VhG7EMHhpts= -----END CERTIFICATE-----Generated at Sun Nov 1 14:44:39 2026 by rpki-client