$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/f4f7396a-5820-376c-ad9c-952ae8fa8047.roa File: f4f7396a-5820-376c-ad9c-952ae8fa8047.roa (raw, json) Hash identifier: 8oPTaE0K8sH5L+N6cQxsgyAVfZRl7vcL8xnSO578zj0= Subject key identifier: FD:BE:FF:DF:4D:49:93:DE:8C:4F:80:EF:4C:13:FD:51:AF:44:48:5C Certificate issuer: /CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Certificate serial: 010D0C9F4328584F72FB45C598B01B4DD54E5080 Authority key identifier: 7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/f4f7396a-5820-376c-ad9c-952ae8fa8047.roa Signing time: Fri 09 Oct 2026 22:03:53 +0000 ROA not before: Fri 09 Oct 2026 22:03:53 +0000 ROA not after: Thu 07 Jan 2027 23:03:53 +0000 asID: 6171 IP address blocks: 207.167.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:fb:45:c5:98:b0:1b:4d:d5:4e:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38aa54d0-9b6a-4fc5-a5b3-442a43980e4b Validity Not Before: Oct 9 22:03:53 2026 GMT Not After : Jan 7 23:03:53 2027 GMT Subject: CN=c2da8e3a-dba0-43d2-a9c6-ab83410b5eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b5:0e:fc:63:f2:b7:2c:51:3a:01:db:65:ba: 3e:c3:a9:d7:53:85:12:37:be:bc:dd:44:63:29:71: fc:14:8e:f6:17:71:cb:ee:fa:2f:9b:7b:fa:87:6d: 11:09:89:7c:34:75:18:7d:f3:d2:a7:01:dd:40:08: 51:2f:40:91:8d:03:bf:d5:81:81:44:6a:36:1a:66: 86:14:46:2d:55:3e:99:f7:79:1a:17:90:18:27:be: 50:d8:17:46:1c:5c:91:92:8e:df:ff:6e:97:bb:98: 3a:83:c7:51:9d:a4:50:40:b8:d1:34:49:40:97:fa: 4f:46:0a:ba:ce:bb:17:ea:56:9c:d7:c5:bc:48:cb: 9b:1a:20:0d:88:c5:ea:0e:3b:56:0f:14:f2:ec:a9: 8d:79:a8:fc:01:16:dc:59:a2:66:89:84:39:3a:8e: 59:91:13:d0:7a:5a:4e:35:6a:89:8d:0b:1c:03:8f: c2:42:c9:9d:c5:0f:cc:f8:20:81:d5:66:69:82:0a: 33:1b:55:91:0b:50:e2:68:2e:99:4c:47:70:43:a7: cd:f1:63:c7:1e:b7:59:c9:53:6c:8b:69:b7:da:fa: c0:c7:0d:2c:be:26:20:e4:d2:f8:13:14:f7:d2:91: 4d:b5:ec:33:ac:52:8c:c3:f2:b1:13:43:d6:dc:5c: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BE:FF:DF:4D:49:93:DE:8C:4F:80:EF:4C:13:FD:51:AF:44:48:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/f4f7396a-5820-376c-ad9c-952ae8fa8047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.crl X509v3 Authority Key Identifier: keyid:7E:42:3C:58:BC:A2:DF:4E:75:FB:16:5A:F9:9E:68:16:1E:FD:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38aa54d0-9b6a-4fc5-a5b3-442a43980e4b.cer sbgp-ipAddrBlock: critical IPv4: 207.167.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:43:51:b1:32:ac:93:42:48:48:70:a8:8b:c1:40:f0:05:5a: 6d:84:35:ac:66:44:e7:6b:e4:bd:78:88:6a:10:61:f0:a6:6f: f0:c8:a3:77:b8:17:78:15:74:83:df:38:2b:98:b7:eb:c4:d0: a3:d1:dc:94:55:89:de:b6:46:ce:39:3a:b6:29:0a:1e:ed:2c: a4:3d:f3:3f:eb:18:38:d6:3f:e0:97:af:73:37:48:d7:b0:dc: 89:28:0e:e7:07:01:24:af:67:1e:73:b8:c1:cd:3e:54:95:51: 66:a0:1a:88:e0:d3:ab:c0:15:bc:f9:fb:39:ed:43:39:2d:8b: 0a:95:96:d3:4f:1e:7d:fb:7d:9f:84:52:90:6f:93:96:e8:3e: a0:6c:f7:71:92:76:72:54:af:06:38:da:90:09:7c:9b:10:d0: 6b:25:ee:98:be:79:28:2a:70:ee:d4:6d:ca:04:0b:7a:f9:80: cf:1b:a1:9e:2a:cc:26:22:d5:ad:33:01:00:ca:98:56:b4:32: 8e:d8:6e:38:da:12:78:4d:5f:8c:cd:c5:0a:29:88:91:9f:1d: c9:97:a8:93:c2:e9:a3:e9:8c:09:11:64:66:43:ac:95:74:e7: 24:50:d6:fe:db:0a:04:28:e5:44:3d:ff:ba:8a:9d:1d:f5:00: ec:fa:3c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9y+0XFmLAbTdVOUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhYTU0ZDAtOWI2YS00ZmM1LWE1YjMtNDQyYTQzOTgw ZTRiMB4XDTI2MTAwOTIyMDM1M1oXDTI3MDEwNzIzMDM1M1owLzEtMCsGA1UEAxMk YzJkYThlM2EtZGJhMC00M2QyLWE5YzYtYWI4MzQxMGI1ZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrUO/GPytyxROgHbZbo+w6nXU4USN7683URj KXH8FI72F3HL7vovm3v6h20RCYl8NHUYffPSpwHdQAhRL0CRjQO/1YGBRGo2GmaG FEYtVT6Z93kaF5AYJ75Q2BdGHFyRko7f/26Xu5g6g8dRnaRQQLjRNElAl/pPRgq6 zrsX6lac18W8SMubGiANiMXqDjtWDxTy7KmNeaj8ARbcWaJmiYQ5Oo5ZkRPQelpO NWqJjQscA4/CQsmdxQ/M+CCB1WZpggozG1WRC1DiaC6ZTEdwQ6fN8WPHHrdZyVNs i2m32vrAxw0sviYg5NL4ExT30pFNtewzrFKMw/KxE0PW3FwPOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2+/99NSZPejE+A70wT/VGvREhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGFh NTRkMC05YjZhLTRmYzUtYTViMy00NDJhNDM5ODBlNGIvZjRmNzM5NmEtNTgyMC0z NzZjLWFkOWMtOTUyYWU4ZmE4MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhhYTU0ZDAtOWI2YS00ZmM1LWE1 YjMtNDQyYTQzOTgwZTRiLzM4YWE1NGQwLTliNmEtNGZjNS1hNWIzLTQ0MmE0Mzk4 MGU0Yi5jcmwwHwYDVR0jBBgwFoAUfkI8WLyi3051+xZa+Z5oFh79x0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGFhNTRkMC05YjZhLTRmYzUtYTViMy00NDJh NDM5ODBlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz6cQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZDUbEyrJNCSEhwqIvBQPAFWm2ENaxmROdr5L14iGoQYfCmb/DIo3e4 F3gVdIPfOCuYt+vE0KPR3JRVid62Rs45OrYpCh7tLKQ98z/rGDjWP+CXr3M3SNew 3IkoDucHASSvZx5zuMHNPlSVUWagGojg06vAFbz5+zntQzktiwqVltNPHn37fZ+E UpBvk5boPqBs93GSdnJUrwY42pAJfJsQ0Gsl7pi+eSgqcO7UbcoEC3r5gM8boZ4q zCYi1a0zAQDKmFa0Mo7YbjjaEnhNX4zNxQopiJGfHcmXqJPC6aPpjAkRZGZDrJV0 5yRQ1v7bCgQo5UQ9/7qKnR31AOz6PBo= -----END CERTIFICATE-----Generated at Sun Nov 1 17:32:46 2026 by rpki-client