$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/38a1e230-67e0-3ee4-b23c-07c75a317234.roa File: 38a1e230-67e0-3ee4-b23c-07c75a317234.roa (raw, json) Hash identifier: XJcaNukRCCdcT4gjwFDmM6i1l/OKxyFnkZHA2CVb+U4= Subject key identifier: 21:37:10:33:14:21:59:8E:F8:7A:55:AC:D4:99:04:42:F2:70:C9:F2 Certificate issuer: /CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Certificate serial: 010D0C9F4328584F348263EEE479F4A18D358000 Authority key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/38a1e230-67e0-3ee4-b23c-07c75a317234.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 13335 IP address blocks: 209.172.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:63:ee:e4:79:f4:a1:8d:35:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=18503a17-5608-4e09-9162-e521b6aeeb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:63:df:cd:66:d8:d2:e0:35:93:80:44:2d: c5:bd:6e:76:cf:60:58:d8:d9:24:48:48:2b:07:34: 8d:86:cb:26:1b:23:92:8b:24:27:71:3b:31:25:1b: 27:ab:67:10:7d:c8:0b:9d:61:0a:54:6d:87:ac:d6: dc:3c:53:01:f1:a9:10:53:9c:46:2e:91:1e:2d:08: 58:8b:02:63:4b:cd:ed:fd:49:6b:86:14:d7:da:a5: 99:0f:81:6c:fd:fd:5d:83:6b:f6:c0:9c:c5:82:ff: 67:11:aa:58:fb:26:52:b6:a0:d9:72:7a:73:47:ce: 8c:8e:46:56:fc:80:0e:19:6f:df:a2:28:7d:16:cb: 7a:7c:f2:27:c1:ba:7a:ab:34:e4:ba:35:15:ca:47: 55:4a:25:78:e6:a5:6f:b3:ae:97:af:c0:8a:14:f5: d9:13:3b:b5:86:9b:09:0c:8b:15:22:24:cb:7d:6f: ab:53:a4:2a:32:e6:f7:97:3c:9a:c9:72:42:d0:74: 6f:99:a2:da:c2:89:2d:20:59:ea:e9:73:c2:f3:37: 25:3a:f7:64:07:25:6f:2b:c7:2e:ad:0d:5c:37:00: 05:f9:fb:88:49:2e:c3:a1:ea:03:f0:80:c8:53:38: 5f:8b:25:67:ac:e4:b5:50:55:bb:f1:82:82:17:46: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:37:10:33:14:21:59:8E:F8:7A:55:AC:D4:99:04:42:F2:70:C9:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/38a1e230-67e0-3ee4-b23c-07c75a317234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl X509v3 Authority Key Identifier: keyid:B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer sbgp-ipAddrBlock: critical IPv4: 209.172.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2b:e6:47:bb:6d:60:1d:62:51:45:74:9e:35:65:7e:b7:da: 18:5e:94:8f:7c:78:0f:84:6d:d9:96:43:78:25:4f:17:4d:4f: f8:a2:2e:52:6a:99:93:35:e2:82:74:09:3e:8d:0d:05:c6:69: 4b:2b:22:38:2d:d4:74:6e:f4:64:5d:09:15:e7:e7:cb:9f:30: f1:25:3b:51:b3:00:fc:c4:4f:7f:57:e0:57:3c:73:b2:60:ad: 08:d3:c1:85:23:f9:02:67:62:10:ca:4d:e9:ac:1c:b4:75:45: 2c:cf:d0:73:cd:d5:74:74:de:be:79:30:81:d7:a8:a4:06:57: 94:b6:48:4e:e0:ea:c9:64:4e:d0:d2:67:4e:39:2f:8a:29:f9: f8:f3:0a:49:db:45:ad:bf:6e:be:b4:cb:4a:1a:f6:0e:9a:b8: db:37:16:c3:af:dc:e9:ce:6b:66:69:18:04:9b:51:d2:ce:d2: 2c:e8:5d:46:64:9a:75:40:41:e4:56:68:c9:b2:81:9a:c4:c9: 20:ba:b1:f3:00:5a:c9:8e:51:1a:e3:8a:e5:4d:15:e1:32:9e: 68:ec:f7:68:34:58:7b:27:08:fa:25:3e:79:e3:56:f4:21:14: e3:05:29:e2:c5:e6:c0:6b:be:6b:54:34:8c:03:13:a5:52:8f: 30:a0:a6:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gmPu5Hn0oY01gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1YWM1YmQtMjZjOC00ZWNhLTlmMTUtZmQyMzI3NmMw ZDRjMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk MTg1MDNhMTctNTYwOC00ZTA5LTkxNjItZTUyMWI2YWVlYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzRj381m2NLgNZOARC3FvW52z2BY2NkkSEgr BzSNhssmGyOSiyQncTsxJRsnq2cQfcgLnWEKVG2HrNbcPFMB8akQU5xGLpEeLQhY iwJjS83t/UlrhhTX2qWZD4Fs/f1dg2v2wJzFgv9nEapY+yZStqDZcnpzR86MjkZW /IAOGW/foih9Fst6fPInwbp6qzTkujUVykdVSiV45qVvs66Xr8CKFPXZEzu1hpsJ DIsVIiTLfW+rU6QqMub3lzyayXJC0HRvmaLawoktIFnq6XPC8zclOvdkByVvK8cu rQ1cNwAF+fuISS7DoeoD8IDIUzhfiyVnrOS1UFW78YKCF0ZnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE3EDMUIVmO+HpVrNSZBELycMnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVh YzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2YzBkNGMvMzhhMWUyMzAtNjdlMC0z ZWU0LWIyM2MtMDdjNzVhMzE3MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGU1YWM1YmQtMjZjOC00ZWNhLTlm MTUtZmQyMzI3NmMwZDRjLzhlNWFjNWJkLTI2YzgtNGVjYS05ZjE1LWZkMjMyNzZj MGQ0Yy5jcmwwHwYDVR0jBBgwFoAUsyfIbi8GrE6uYl00Q/S49eYKbJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIz Mjc2YzBkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0awFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0r5ke7bWAdYlFFdJ41ZX632hhelI98eA+EbdmWQ3glTxdNT/iiLlJq mZM14oJ0CT6NDQXGaUsrIjgt1HRu9GRdCRXn58ufMPElO1GzAPzET39X4Fc8c7Jg rQjTwYUj+QJnYhDKTemsHLR1RSzP0HPN1XR03r55MIHXqKQGV5S2SE7g6slkTtDS Z045L4op+fjzCknbRa2/br60y0oa9g6auNs3FsOv3OnOa2ZpGASbUdLO0izoXUZk mnVAQeRWaMmygZrEySC6sfMAWsmOURrjiuVNFeEynmjs92g0WHsnCPolPnnjVvQh FOMFKeLF5sBrvmtUNIwDE6VSjzCgptE= -----END CERTIFICATE-----Generated at Sun Oct 4 07:13:16 2026 by rpki-client