$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: xyE06RCOoOcdziU0yo72259UktT6vwmDEkgLza40sT0= Subject key identifier: 24:CA:F0:CE:1B:15:F2:BB:4F:4D:9F:92:A4:A9:D8:21:39:47:E9:EC Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584F698D82561DCBCEA79B3ED4C0 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:82:56:1d:cb:ce:a7:9b:3e:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=7c167835-bd90-43b4-83a3-f2feb817e2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fb:36:e9:c0:41:bd:a8:52:e4:0e:28:04:ae: 41:92:e8:25:90:63:c9:b6:d0:b7:f9:a2:96:18:5b: 90:23:7a:2f:00:c3:6b:73:6d:8f:9b:b8:14:76:20: 4c:94:ca:fb:3a:6a:b2:67:db:40:0f:1b:c6:b5:af: 2b:70:d8:5d:3f:13:ce:4c:ad:5e:d3:93:f4:0c:48: 06:3e:4d:53:98:a4:7b:a4:83:b3:c2:ea:1e:eb:f2: e7:19:7f:10:5c:51:60:54:6e:fa:33:60:a3:c2:da: 6b:02:bd:62:b6:36:cc:4d:1b:1c:6d:22:87:0e:07: 57:86:b3:a1:35:8a:71:07:76:21:a7:bb:86:df:9e: c5:c2:68:9c:f3:6d:cc:b3:f1:74:03:11:e6:28:20: 7e:24:e9:d6:5b:08:39:fe:96:e1:32:29:7a:58:67: d0:bd:2e:56:42:e4:4a:ef:23:a3:00:a5:1e:5c:28: 21:a0:40:1c:4c:d7:d0:6e:1c:12:e3:e7:73:71:7c: 6a:79:85:cd:c2:b6:1b:a9:9a:5d:ae:0f:06:a2:73: bb:76:1f:55:61:9a:8c:33:e7:f7:ac:49:f8:97:d0: ad:a2:2c:6f:b7:85:ac:81:ad:ed:f5:2d:44:35:ac: b1:e6:6c:fe:16:8d:d9:94:ec:ec:d6:72:48:16:87: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:F0:CE:1B:15:F2:BB:4F:4D:9F:92:A4:A9:D8:21:39:47:E9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e8:5d:b2:ef:fb:7d:66:cf:e7:73:37:5d:92:b7:43:cb:c4: 7b:e6:07:3d:45:a7:47:b9:a0:57:d4:51:3c:c1:3b:eb:ac:27: f4:63:b4:93:24:1b:e0:dc:2c:48:32:b9:b1:0a:bd:d4:bd:66: 9d:80:1a:fb:3e:91:6e:a9:93:d6:97:ef:e1:15:39:50:0b:6a: 83:f0:c0:ff:11:1e:c2:53:c4:f8:6e:6a:e4:2d:fc:e9:35:c4: b9:30:98:ea:27:aa:7a:4f:8e:d0:18:3d:68:8a:4e:68:56:6e: d5:6b:30:fa:1c:13:fb:db:70:0d:58:13:94:90:54:74:10:76: aa:56:24:73:7b:08:a8:ab:1f:e4:e2:ba:69:99:a9:2d:22:27: 46:a3:46:70:56:5e:01:77:96:b4:6e:76:73:c5:23:69:36:9d: 83:2b:8b:5f:7b:a9:10:6f:62:87:d1:d8:a4:02:e1:87:ab:47: 25:51:fb:72:9e:7f:84:3a:45:c7:a6:24:13:c0:37:6a:11:bd: 47:ed:69:47:27:93:35:05:49:b7:73:e1:15:db:2f:03:70:4a: ac:6e:53:c0:68:9b:d4:d6:d1:2c:62:6e:ec:69:4e:a8:cb:d4: c7:9b:ad:f2:97:eb:cc:0a:a4:99:26:a9:06:ca:80:23:d8:74: e0:38:2c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYJWHcvOp5s+1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk N2MxNjc4MzUtYmQ5MC00M2I0LTgzYTMtZjJmZWI4MTdlMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/s26cBBvahS5A4oBK5BkuglkGPJttC3+aKW GFuQI3ovAMNrc22Pm7gUdiBMlMr7OmqyZ9tADxvGta8rcNhdPxPOTK1e05P0DEgG Pk1TmKR7pIOzwuoe6/LnGX8QXFFgVG76M2CjwtprAr1itjbMTRscbSKHDgdXhrOh NYpxB3Yhp7uG357Fwmic823Ms/F0AxHmKCB+JOnWWwg5/pbhMil6WGfQvS5WQuRK 7yOjAKUeXCghoEAcTNfQbhwS4+dzcXxqeYXNwrYbqZpdrg8GonO7dh9VYZqMM+f3 rEn4l9Ctoixvt4Wsga3t9S1ENayx5mz+Fo3ZlOzs1nJIFocpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTK8M4bFfK7T02fkqSp2CE5R+nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPoXbLv+31mz+dzN12St0PLxHvmBz1Fp0e5oFfUUTzBO+usJ/RjtJMk G+DcLEgyubEKvdS9Zp2AGvs+kW6pk9aX7+EVOVALaoPwwP8RHsJTxPhuauQt/Ok1 xLkwmOonqnpPjtAYPWiKTmhWbtVrMPocE/vbcA1YE5SQVHQQdqpWJHN7CKirH+Ti ummZqS0iJ0ajRnBWXgF3lrRudnPFI2k2nYMri197qRBvYofR2KQC4YerRyVR+3Ke f4Q6RcemJBPAN2oRvUftaUcnkzUFSbdz4RXbLwNwSqxuU8Bom9TW0SxibuxpTqjL 1MebrfKX68wKpJkmqQbKgCPYdOA4LOQ= -----END CERTIFICATE-----Generated at Thu Oct 8 04:11:33 2026 by rpki-client