$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/a55ac602-efdb-3195-b053-bde6369031d7.roa File: a55ac602-efdb-3195-b053-bde6369031d7.roa (raw, json) Hash identifier: 7GUPdScyjMyiNx2VCg9128wgvfomYcFNvAuS1HY2UzQ= Subject key identifier: 09:85:68:F5:70:53:65:53:15:84:D8:10:3C:FA:B0:D0:EE:71:F3:D9 Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72FB158A1FA3D85243FAE080 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/a55ac602-efdb-3195-b053-bde6369031d7.roa Signing time: Fri 09 Oct 2026 22:03:30 +0000 ROA not before: Fri 09 Oct 2026 22:03:30 +0000 ROA not after: Thu 07 Jan 2027 23:03:30 +0000 asID: 6171 IP address blocks: 207.167.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:fb:15:8a:1f:a3:d8:52:43:fa:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 22:03:30 2026 GMT Not After : Jan 7 23:03:30 2027 GMT Subject: CN=b9e5bf44-8677-4b2f-8fac-4d72f9915574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:41:3c:04:44:ba:18:53:b3:13:75:5d:63: d0:0b:7a:4d:5b:c8:4d:4f:3d:f3:31:ea:0b:53:99: 8f:96:52:62:f6:01:7a:2a:14:ca:9c:21:58:8a:e5: 50:f0:9a:b1:19:ba:a5:51:80:10:cd:77:1b:fd:d1: ab:32:1e:30:5b:c7:81:89:f3:94:7a:46:d4:83:99: dd:d2:f7:10:72:7a:1c:47:44:5c:e3:f0:59:d0:bd: 2d:84:11:99:af:7e:3b:72:15:bb:b8:b9:91:4f:fe: 8c:d2:38:34:50:5a:b2:47:61:db:41:8b:26:5f:c8: cb:a4:80:74:c2:4e:fc:b1:74:c3:8e:5c:3d:c8:2c: 58:51:83:a7:b8:d1:b9:58:72:0e:93:f0:11:e4:23: e7:84:bb:1c:0d:6f:53:08:94:e0:26:93:b2:03:83: de:8f:dd:61:ef:1e:0d:0a:49:7d:fe:5a:ea:89:07: 46:72:40:9f:60:bf:36:ed:63:c0:1d:57:8f:5f:32: e6:bc:81:5a:47:d7:7a:c1:04:c6:3c:34:fb:3e:25: 1a:2c:ae:fb:37:6d:22:17:eb:6d:0c:26:50:8b:20: a7:70:a6:b7:8c:88:b3:0d:f5:6d:fb:9a:f3:0a:80: 84:47:09:ed:8c:54:69:7b:5e:24:be:3a:f1:e9:69: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:68:F5:70:53:65:53:15:84:D8:10:3C:FA:B0:D0:EE:71:F3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/a55ac602-efdb-3195-b053-bde6369031d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 207.167.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c6:53:35:59:79:ff:ca:71:bd:85:7d:25:96:30:62:c0:84: e5:5d:50:9d:30:3e:1d:e5:99:6d:12:85:d2:9e:92:af:44:06: bf:f7:aa:81:dd:e3:35:12:b4:f1:84:f8:0e:4e:6d:48:9c:d1: 31:db:e0:ab:d3:8c:a9:c7:c0:d7:b4:24:56:0e:36:2d:66:1f: 33:67:05:8c:44:fe:31:8e:3c:7a:bd:3a:18:1b:13:86:63:83: 0a:52:93:39:c7:12:08:c4:6a:6a:7f:65:4d:3b:85:dc:02:51: 5e:b5:ae:c0:c9:96:de:61:4c:2b:26:a1:89:eb:4f:95:f3:b7: 99:ca:75:05:05:c9:31:2d:15:a4:a7:f1:5f:f3:b5:55:b6:34: b6:44:37:d8:17:6f:9b:11:0f:19:5e:6b:f4:2d:bf:03:df:b5: 45:00:1c:c1:85:8f:3e:8f:fd:42:33:d5:90:e3:d4:46:d5:07: e3:da:a2:d9:39:6a:55:91:13:dc:a4:e8:f8:0a:62:d5:4b:d2: 54:d7:bb:53:26:5d:b3:d9:12:e9:f0:01:db:43:56:75:14:ad: aa:6f:6b:1e:54:18:1e:65:16:d5:cc:52:67:3a:99:b8:1b:c9: 28:0b:8a:38:47:3e:c7:5a:eb:0c:b3:a0:bf:77:b5:6d:51:fc: 31:50:64:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+xWKH6PYUkP64IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIyMDMzMFoXDTI3MDEwNzIzMDMzMFowLzEtMCsGA1UEAxMk YjllNWJmNDQtODY3Ny00YjJmLThmYWMtNGQ3MmY5OTE1NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmepBPAREuhhTsxN1XWPQC3pNW8hNTz3zMeoL U5mPllJi9gF6KhTKnCFYiuVQ8JqxGbqlUYAQzXcb/dGrMh4wW8eBifOUekbUg5nd 0vcQcnocR0Rc4/BZ0L0thBGZr347chW7uLmRT/6M0jg0UFqyR2HbQYsmX8jLpIB0 wk78sXTDjlw9yCxYUYOnuNG5WHIOk/AR5CPnhLscDW9TCJTgJpOyA4Pej91h7x4N Ckl9/lrqiQdGckCfYL827WPAHVePXzLmvIFaR9d6wQTGPDT7PiUaLK77N20iF+tt DCZQiyCncKa3jIizDfVt+5rzCoCERwntjFRpe14kvjrx6WnslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmFaPVwU2VTFYTYEDz6sNDucfPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvYTU1YWM2MDItZWZkYi0z MTk1LWIwNTMtYmRlNjM2OTAzMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz6cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrGUzVZef/Kcb2FfSWWMGLAhOVdUJ0wPh3lmW0ShdKekq9EBr/3qoHd 4zUStPGE+A5ObUic0THb4KvTjKnHwNe0JFYONi1mHzNnBYxE/jGOPHq9OhgbE4Zj gwpSkznHEgjEamp/ZU07hdwCUV61rsDJlt5hTCsmoYnrT5Xzt5nKdQUFyTEtFaSn 8V/ztVW2NLZEN9gXb5sRDxlea/QtvwPftUUAHMGFjz6P/UIz1ZDj1EbVB+Paotk5 alWRE9yk6PgKYtVL0lTXu1MmXbPZEunwAdtDVnUUrapvax5UGB5lFtXMUmc6mbgb ySgLijhHPsda6wyzoL93tW1R/DFQZJY= -----END CERTIFICATE-----Generated at Sun Nov 1 17:32:50 2026 by rpki-client