$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/b9bf7d95-885f-3823-a72f-88370cd4d3e5.roa File: b9bf7d95-885f-3823-a72f-88370cd4d3e5.roa (raw, json) Hash identifier: i/2vx605XyqKFVVGoSJ6FfDr2rInqYU73xGAl7HDGN0= Subject key identifier: 81:79:0D:80:D1:36:39:FA:3E:97:C3:D8:88:71:5B:F1:32:AD:79:A0 Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72F93BB59B4C6BCB86D5B780 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/b9bf7d95-885f-3823-a72f-88370cd4d3e5.roa Signing time: Fri 09 Oct 2026 21:59:47 +0000 ROA not before: Fri 09 Oct 2026 21:59:47 +0000 ROA not after: Thu 07 Jan 2027 22:59:47 +0000 asID: 6171 IP address blocks: 198.161.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:f9:3b:b5:9b:4c:6b:cb:86:d5:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 21:59:47 2026 GMT Not After : Jan 7 22:59:47 2027 GMT Subject: CN=c60ebccf-d0e9-41c3-a6e0-0c4977d599f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:83:53:5d:74:7e:70:65:24:3f:17:ed:4d: 5b:81:2f:b4:b3:7e:2b:8f:37:e9:39:d0:97:72:22: 2e:63:fa:fc:bb:35:4a:c3:b6:c3:82:c7:f1:7d:8f: 51:8f:61:e1:b5:8c:4d:78:eb:73:0f:a1:c8:2c:1e: 38:7e:46:dd:aa:f7:88:fa:38:95:7f:ee:f3:d7:c8: 04:5a:dc:9f:dd:21:92:c7:eb:15:36:d3:e2:f6:1e: 33:50:4a:63:a9:ba:8f:c7:26:cd:f7:ef:88:ce:c2: a8:d8:de:0d:aa:4d:ab:a0:56:23:bd:23:b7:a3:1f: b8:c3:5a:2a:6b:96:0b:d4:1e:df:9d:d5:5c:43:88: f8:6e:b1:4c:36:e7:63:f9:03:27:c1:9c:c0:81:31: 13:67:ac:c2:c8:1e:8b:bc:b9:27:91:fb:ae:d4:c7: ed:0a:3b:55:ac:c9:5c:38:bf:bc:ab:7b:9c:f0:06: 40:6e:0f:7c:86:0d:bc:a6:cf:da:ff:aa:b7:99:44: 5a:d3:f0:57:ac:67:09:66:3e:df:c3:99:18:17:b6: 41:3a:ac:b3:dc:2f:ff:33:42:ed:4b:88:21:51:94: c5:7b:84:9b:a2:70:b2:63:04:51:72:1a:ef:a0:c3: f3:13:b1:ce:08:ed:91:e9:53:c9:8e:2e:13:0d:a2: fc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:79:0D:80:D1:36:39:FA:3E:97:C3:D8:88:71:5B:F1:32:AD:79:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/b9bf7d95-885f-3823-a72f-88370cd4d3e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 198.161.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9e:29:51:e2:fa:c2:91:10:0d:36:2e:45:1a:95:77:7e:3e: 2d:fe:6c:2b:8b:00:d0:c4:ae:91:78:f2:ee:33:d3:66:0c:af: a1:f5:d1:14:6a:cc:1f:c5:35:82:2f:91:8c:80:e1:29:db:d2: 44:1e:2d:8e:99:bd:41:40:34:c1:2a:87:a1:f7:2b:61:c5:82: c0:e9:9a:e1:a9:90:ad:93:a6:95:8f:12:38:9d:9c:83:f3:73: 92:00:e5:a4:ae:04:63:08:a8:d4:d0:ae:db:c4:83:6c:3a:e6: 93:ce:91:bd:4e:18:3b:0d:21:ef:0f:d1:26:f8:e6:52:7d:2a: 62:10:36:83:94:af:18:82:e7:78:00:95:36:b3:41:2c:8e:8d: b7:89:24:e4:5e:eb:a1:0a:45:f9:2d:48:d2:83:ce:41:25:6a: 4e:1b:74:51:66:fa:81:59:88:06:93:f9:f7:73:f8:d4:ef:9b: e4:24:c2:60:62:5c:44:cf:85:43:09:db:aa:42:2f:60:fd:ec: 1c:60:00:98:bd:b4:bb:86:f0:26:ae:bc:9d:15:f3:79:fa:0c: ba:45:ef:d6:78:6c:99:11:f6:ef:95:68:b6:9b:6d:77:dd:83: e7:93:01:6d:95:0c:80:f2:4d:45:e4:93:aa:85:db:08:bc:11: 95:63:da:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+Tu1m0xry4bVt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIxNTk0N1oXDTI3MDEwNzIyNTk0N1owLzEtMCsGA1UEAxMk YzYwZWJjY2YtZDBlOS00MWMzLWE2ZTAtMGM0OTc3ZDU5OWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DmDU110fnBlJD8X7U1bgS+0s34rjzfpOdCX ciIuY/r8uzVKw7bDgsfxfY9Rj2HhtYxNeOtzD6HILB44fkbdqveI+jiVf+7z18gE Wtyf3SGSx+sVNtPi9h4zUEpjqbqPxybN9++IzsKo2N4Nqk2roFYjvSO3ox+4w1oq a5YL1B7fndVcQ4j4brFMNudj+QMnwZzAgTETZ6zCyB6LvLknkfuu1MftCjtVrMlc OL+8q3uc8AZAbg98hg28ps/a/6q3mURa0/BXrGcJZj7fw5kYF7ZBOqyz3C//M0Lt S4ghUZTFe4SbonCyYwRRchrvoMPzE7HOCO2R6VPJji4TDaL8ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIF5DYDRNjn6PpfD2IhxW/EyrXmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvYjliZjdkOTUtODg1Zi0z ODIzLWE3MmYtODgzNzBjZDRkM2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxqFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADieKVHi+sKREA02LkUalXd+Pi3+bCuLANDErpF48u4z02YMr6H10RRq zB/FNYIvkYyA4Snb0kQeLY6ZvUFANMEqh6H3K2HFgsDpmuGpkK2TppWPEjidnIPz c5IA5aSuBGMIqNTQrtvEg2w65pPOkb1OGDsNIe8P0Sb45lJ9KmIQNoOUrxiC53gA lTazQSyOjbeJJORe66EKRfktSNKDzkElak4bdFFm+oFZiAaT+fdz+NTvm+QkwmBi XETPhUMJ26pCL2D97BxgAJi9tLuG8CauvJ0V83n6DLpF79Z4bJkR9u+VaLabbXfd g+eTAW2VDIDyTUXkk6qF2wi8EZVj2rU= -----END CERTIFICATE-----Generated at Tue Nov 3 21:32:51 2026 by rpki-client