$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/a198b2f0-9200-3d32-a47c-b40a6676d5b1.roa File: a198b2f0-9200-3d32-a47c-b40a6676d5b1.roa (raw, json) Hash identifier: qohlhBK1KEgkoF+N5l5KI1IVUBJ+F8ccXEzfH4r2mew= Subject key identifier: C4:AB:15:3C:01:BB:0E:F9:24:72:5A:7B:00:11:57:AE:C9:A3:A7:E9 Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72FBA66747F0747BF0B62D80 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/a198b2f0-9200-3d32-a47c-b40a6676d5b1.roa Signing time: Fri 09 Oct 2026 22:04:39 +0000 ROA not before: Fri 09 Oct 2026 22:04:39 +0000 ROA not after: Thu 07 Jan 2027 23:04:39 +0000 asID: 6171 IP address blocks: 204.209.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:fb:a6:67:47:f0:74:7b:f0:b6:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 22:04:39 2026 GMT Not After : Jan 7 23:04:39 2027 GMT Subject: CN=7757b6b8-a969-4d30-b8dc-b45bd7e1d3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:67:3a:63:07:09:e2:07:89:2a:c0:ed:aa:e8: e8:56:29:61:2a:6c:fc:18:7c:00:c2:92:b1:8b:a7: 27:53:cf:7b:8c:01:98:5b:a5:73:8b:da:73:ca:0b: 72:3e:fb:61:54:fd:73:d8:6c:4f:61:a4:54:9a:b2: 64:3b:75:33:70:41:80:8d:17:d1:c0:64:60:2b:8d: a5:65:59:e8:47:ce:48:59:4e:62:13:ae:b1:70:06: f1:76:a7:2d:b9:0e:d8:96:91:9c:52:5e:93:be:7c: 30:a0:1d:bb:97:53:fc:9b:ca:2c:a9:7d:e7:e2:bc: 3e:5c:b7:89:44:3b:c0:3e:ba:e1:b0:ec:1d:8a:39: 7e:85:c7:dd:73:9c:ce:77:0c:d5:a3:f5:96:35:65: b2:3a:e1:5c:de:c4:fe:e2:87:66:4e:fc:43:96:98: 6d:28:c7:70:1e:86:2c:b8:46:65:da:3a:81:8f:69: 32:bd:d5:b5:81:f5:0a:f4:65:3d:ff:8c:bb:19:76: 11:a8:03:1b:2a:f2:86:2f:94:ee:82:1f:ed:ef:96: 40:fd:d8:8c:2d:35:c8:f0:a2:ed:9d:cc:17:f9:03: 1a:19:a6:07:5f:c4:9d:ac:ae:c2:a6:2f:d1:85:20: 7e:ac:ee:1e:3b:e5:b0:33:19:27:10:89:fe:f6:96: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:15:3C:01:BB:0E:F9:24:72:5A:7B:00:11:57:AE:C9:A3:A7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/a198b2f0-9200-3d32-a47c-b40a6676d5b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 204.209.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f5:1d:be:bb:9d:e6:9e:42:4f:e9:3f:00:23:7a:5d:55:25: fe:0c:be:1a:65:9e:e6:a2:a7:ca:79:7e:da:01:62:9f:2d:69: 9c:23:52:b8:03:25:a7:ca:5d:8d:97:bf:d2:35:57:c2:96:28: fa:9a:50:b1:26:54:90:54:70:33:c3:58:91:f0:a8:cf:1e:ec: 7c:d7:57:d9:05:7b:d2:fc:eb:ac:c3:c1:33:d4:50:aa:b4:df: ed:61:7d:55:68:ce:58:e8:8d:43:b5:32:01:ca:d0:4d:d5:4a: 15:db:7f:82:2c:f2:9d:b7:93:d4:33:cf:d6:53:25:0e:e6:93: 59:b8:b5:05:cd:0b:bd:00:95:15:a3:46:62:42:38:ed:73:78: 1c:53:69:d8:f0:eb:5f:51:22:30:d4:19:bd:7f:74:47:55:56: 31:3d:b3:8b:8c:5c:8e:6f:0b:15:89:b3:71:84:66:ed:4b:78: 2c:fe:83:14:7d:3f:af:37:18:34:85:e8:93:5b:e2:e0:7e:6c: 93:b4:b7:f9:5a:5e:49:12:a7:4f:56:2a:23:57:e8:ce:a4:b7: c6:ed:78:10:98:49:f5:dc:fa:21:a4:89:d5:5c:df:a5:df:9d: 2e:02:3e:43:6e:c2:7a:c1:91:27:50:f0:28:a0:08:35:bf:43: 53:c4:bd:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+6ZnR/B0e/C2LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIyMDQzOVoXDTI3MDEwNzIzMDQzOVowLzEtMCsGA1UEAxMk Nzc1N2I2YjgtYTk2OS00ZDMwLWI4ZGMtYjQ1YmQ3ZTFkM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2c6YwcJ4geJKsDtqujoVilhKmz8GHwAwpKx i6cnU897jAGYW6Vzi9pzygtyPvthVP1z2GxPYaRUmrJkO3UzcEGAjRfRwGRgK42l ZVnoR85IWU5iE66xcAbxdqctuQ7YlpGcUl6TvnwwoB27l1P8m8osqX3n4rw+XLeJ RDvAPrrhsOwdijl+hcfdc5zOdwzVo/WWNWWyOuFc3sT+4odmTvxDlphtKMdwHoYs uEZl2jqBj2kyvdW1gfUK9GU9/4y7GXYRqAMbKvKGL5Tugh/t75ZA/diMLTXI8KLt ncwX+QMaGaYHX8SdrK7Cpi/RhSB+rO4eO+WwMxknEIn+9pYqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSrFTwBuw75JHJaewARV67Jo6fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvYTE5OGIyZjAtOTIwMC0z ZDMyLWE0N2MtYjQwYTY2NzZkNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH1Hb67neaeQk/pPwAjel1VJf4Mvhplnuaip8p5ftoBYp8taZwjUrgD JafKXY2Xv9I1V8KWKPqaULEmVJBUcDPDWJHwqM8e7HzXV9kFe9L866zDwTPUUKq0 3+1hfVVozljojUO1MgHK0E3VShXbf4Is8p23k9Qzz9ZTJQ7mk1m4tQXNC70AlRWj RmJCOO1zeBxTadjw619RIjDUGb1/dEdVVjE9s4uMXI5vCxWJs3GEZu1LeCz+gxR9 P683GDSF6JNb4uB+bJO0t/laXkkSp09WKiNX6M6kt8bteBCYSfXc+iGkidVc36Xf nS4CPkNuwnrBkSdQ8CigCDW/Q1PEveQ= -----END CERTIFICATE-----Generated at Wed Nov 4 04:14:59 2026 by rpki-client