$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/e8e5a109-4850-342b-ab7a-abe3576b76ca.roa File: e8e5a109-4850-342b-ab7a-abe3576b76ca.roa (raw, json) Hash identifier: Q8wgzhXUiAkAS4qejeI2zqYFtMXCRTzF3hwlrkVM0SU= Subject key identifier: 84:7C:99:EA:E4:03:42:86:D2:B9:C4:C9:A5:5E:51:8C:44:5E:B5:78 Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72FB75F7C5AC4176A6B06180 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/e8e5a109-4850-342b-ab7a-abe3576b76ca.roa Signing time: Fri 09 Oct 2026 22:04:16 +0000 ROA not before: Fri 09 Oct 2026 22:04:16 +0000 ROA not after: Thu 07 Jan 2027 23:04:16 +0000 asID: 6171 IP address blocks: 207.167.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:fb:75:f7:c5:ac:41:76:a6:b0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 22:04:16 2026 GMT Not After : Jan 7 23:04:16 2027 GMT Subject: CN=c979c58a-ed02-451c-9af8-a1a95bfab1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:a2:8d:5e:1d:e6:0f:50:a2:b8:98:94:cf: d0:5b:bd:5d:e6:f9:f3:b6:45:21:b0:d5:85:c8:10: 2b:0a:be:08:11:e8:c0:80:fb:10:b6:1b:e9:2e:06: 38:f1:ff:e8:8d:04:39:f5:ec:a7:35:83:e3:00:03: 4c:91:2d:4b:1c:f5:b7:8c:20:77:0b:a1:ee:4e:16: 33:59:32:fa:90:67:cc:0f:45:09:de:fe:14:32:2f: b4:a7:b6:f2:9e:dd:1b:1a:4a:60:c1:f4:78:f1:e3: 6d:f7:32:c4:6e:3d:20:cd:fe:3a:57:93:63:bb:da: 3f:9f:cf:45:01:5a:fc:90:a0:37:7d:0e:ac:89:c8: d9:0e:60:7f:08:97:40:30:82:a4:65:1f:7a:2f:b0: 7f:8f:8a:a0:3e:a3:5f:24:af:39:28:a1:da:66:db: ff:62:ae:cc:11:9e:40:98:b6:5e:62:ec:39:dc:e1: dc:78:ee:41:f5:b0:aa:62:d9:ac:b2:44:41:58:dd: 87:b0:16:d2:28:86:7e:17:8b:77:4d:37:13:56:e5: 01:93:4c:3a:00:94:22:a5:3c:81:16:47:ba:90:d4: 62:65:c8:88:d6:f5:cd:00:3f:d4:2c:75:bd:b1:55: 3f:d6:ea:1b:95:38:9b:b5:6b:49:05:a2:1f:82:90: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7C:99:EA:E4:03:42:86:D2:B9:C4:C9:A5:5E:51:8C:44:5E:B5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/e8e5a109-4850-342b-ab7a-abe3576b76ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 207.167.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:7d:1b:1d:b5:d2:91:d2:b7:ef:20:29:e7:31:dc:6e:ee:19: ea:80:df:0a:ea:2c:61:21:cc:78:07:13:b9:af:96:c5:2b:dc: fd:f1:1d:02:c9:ba:5e:4e:ec:74:7e:8e:ea:7a:73:ab:c8:d4: 21:61:84:d6:78:04:3d:8a:13:ac:ab:d1:38:80:8b:a3:d7:1b: 99:51:a4:96:28:23:cd:f5:2d:5b:74:19:3d:ac:d2:10:98:7f: e6:fa:7b:60:c8:8a:bf:62:f4:33:ae:0a:4b:dd:11:ba:6f:b3: 95:7c:21:e8:29:16:6e:6c:01:cf:da:9e:66:90:4c:9d:df:c2: f2:3c:48:42:d3:c7:2d:d9:01:3b:cb:1c:88:30:3e:6c:df:4c: 4a:12:cd:82:82:00:7f:6f:fe:20:11:f9:d5:a9:aa:d6:27:68: 27:04:dd:de:13:71:06:c4:98:23:f7:16:29:cf:2a:cf:81:f3: e1:4b:03:de:c0:40:0f:dd:df:91:ad:fd:38:af:8a:b6:c1:63: 6b:59:24:ed:6b:08:f8:ac:80:ca:db:d1:95:7c:41:f5:95:57: 84:a0:ca:e8:3b:95:c2:b0:e4:3d:6b:07:db:09:3c:18:15:d8: f4:a6:ac:e2:e3:a0:74:c9:aa:fd:fa:e7:4f:51:9e:51:a7:a3: 18:02:82:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+3X3xaxBdqawYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIyMDQxNloXDTI3MDEwNzIzMDQxNlowLzEtMCsGA1UEAxMk Yzk3OWM1OGEtZWQwMi00NTFjLTlhZjgtYTFhOTViZmFiMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC6ijV4d5g9QoriYlM/QW71d5vnztkUhsNWF yBArCr4IEejAgPsQthvpLgY48f/ojQQ59eynNYPjAANMkS1LHPW3jCB3C6HuThYz WTL6kGfMD0UJ3v4UMi+0p7bynt0bGkpgwfR48eNt9zLEbj0gzf46V5Nju9o/n89F AVr8kKA3fQ6sicjZDmB/CJdAMIKkZR96L7B/j4qgPqNfJK85KKHaZtv/Yq7MEZ5A mLZeYuw53OHceO5B9bCqYtmsskRBWN2HsBbSKIZ+F4t3TTcTVuUBk0w6AJQipTyB Fke6kNRiZciI1vXNAD/ULHW9sVU/1uoblTibtWtJBaIfgpCQfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR8merkA0KG0rnEyaVeUYxEXrV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvZThlNWExMDktNDg1MC0z NDJiLWFiN2EtYWJlMzU3NmI3NmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz6cYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK19Gx210pHSt+8gKecx3G7uGeqA3wrqLGEhzHgHE7mvlsUr3P3xHQLJ ul5O7HR+jup6c6vI1CFhhNZ4BD2KE6yr0TiAi6PXG5lRpJYoI831LVt0GT2s0hCY f+b6e2DIir9i9DOuCkvdEbpvs5V8IegpFm5sAc/anmaQTJ3fwvI8SELTxy3ZATvL HIgwPmzfTEoSzYKCAH9v/iAR+dWpqtYnaCcE3d4TcQbEmCP3FinPKs+B8+FLA97A QA/d35Gt/TivirbBY2tZJO1rCPisgMrb0ZV8QfWVV4Sgyug7lcKw5D1rB9sJPBgV 2PSmrOLjoHTJqv36509RnlGnoxgCgqc= -----END CERTIFICATE-----Generated at Sun Nov 1 14:44:43 2026 by rpki-client