$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38cf7c89-102b-34ed-8ef8-cb583b4be26e.roa File: 38cf7c89-102b-34ed-8ef8-cb583b4be26e.roa (raw, json) Hash identifier: a2TDZpC2km5UY7GzfaqVgwPHR64OdXYQhHji3xMHU9I= Subject key identifier: 50:FE:C6:64:58:B2:17:91:07:90:01:65:AE:88:BB:39:72:F0:3A:87 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F42D3ACBF9F28D80DFDF37700 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38cf7c89-102b-34ed-8ef8-cb583b4be26e.roa Signing time: Tue 22 Sep 2026 16:05:18 +0000 ROA not before: Tue 22 Sep 2026 16:05:18 +0000 ROA not after: Mon 21 Dec 2026 17:05:18 +0000 asID: 210387 IP address blocks: 130.254.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:d3:ac:bf:9f:28:d8:0d:fd:f3:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 22 16:05:18 2026 GMT Not After : Dec 21 17:05:18 2026 GMT Subject: CN=08cb7f04-ea69-4b75-b814-b6f8337b5d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:7d:39:02:b2:de:f7:01:c2:ae:8b:17:4a: 77:15:37:08:01:39:89:61:06:38:a3:e9:72:96:8b: 2f:7d:7d:57:8b:99:3f:68:5f:d6:78:57:9b:93:6b: a3:59:17:f3:ca:6d:41:e4:5d:e1:31:ab:c6:cd:f7: 56:5b:1f:b4:f8:18:4c:0f:f8:c1:5c:ef:d7:a0:58: 97:64:b3:59:26:e1:00:c4:27:06:0a:f9:31:74:7c: 6b:9e:b1:9b:2a:88:15:c5:48:da:71:40:7d:9a:a0: 71:30:7d:74:8c:c4:78:df:3e:82:89:d4:db:26:b3: cb:70:52:25:06:06:de:74:91:c1:b0:70:d7:2e:c1: 45:27:d1:dd:10:8e:6a:35:b7:72:14:63:de:66:d6: 93:5d:fc:12:24:81:56:60:46:71:5a:4a:39:12:8f: bb:e9:c4:96:83:c6:f3:23:86:07:67:6f:04:de:4f: 82:73:be:ce:07:82:3e:a5:ec:c7:1d:32:d8:41:e2: fb:52:f6:9e:24:2c:11:2c:29:f5:f3:4b:56:89:66: 26:77:b6:6e:63:3c:01:e3:53:18:17:a8:50:88:28: 83:11:ba:30:37:ff:97:8f:ab:d5:ae:71:b2:4c:61: 8b:53:de:ae:e6:24:17:40:ff:f0:08:e2:7d:27:80: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FE:C6:64:58:B2:17:91:07:90:01:65:AE:88:BB:39:72:F0:3A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/38cf7c89-102b-34ed-8ef8-cb583b4be26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 130.254.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:08:48:bd:b2:9c:4e:10:c1:b9:86:73:83:b4:44:ce:7c:95: c0:fd:6f:31:8b:5a:c9:2f:7e:44:c5:78:ac:00:68:c4:94:a6: 95:35:f8:f7:f6:63:8f:02:99:91:f9:8c:07:c5:81:e0:91:36: a9:ba:aa:95:4f:a5:50:91:08:bc:d8:d8:d3:e5:13:44:e3:ca: 5d:cc:8c:a2:9a:61:05:a3:05:6a:cf:a4:88:1c:4e:55:ce:2e: c5:c8:ae:f2:0a:ed:1f:7d:68:4e:6b:e9:e2:f4:5b:bf:5d:8d: 63:64:e1:86:65:de:3b:ec:00:a0:8d:43:d5:48:46:e4:fe:91: 02:54:0a:d9:58:6c:c0:20:b4:eb:d8:cd:97:b8:cc:c2:0a:5f: dd:b1:b4:e7:73:51:5c:41:3f:67:3a:3f:77:21:28:af:ea:40: 85:50:5f:08:9d:f8:17:33:97:b4:b1:70:dd:ff:6d:dc:c5:be: 0a:b5:52:44:84:ca:d3:f2:ca:2b:2b:a4:ed:03:7d:8d:29:ed: a3:b2:3d:34:6b:76:ba:d5:d2:df:c3:9f:ba:74:27:11:2a:9c: 0b:90:e4:ea:af:af:7a:4e:cc:5e:dd:66:dc:af:8f:7b:78:cf: 12:89:3a:0a:f8:b0:92:b0:de:2a:f8:0b:25:2b:90:52:ef:73: 96:a3:c6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9C06y/nyjYDf3zdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDkyMjE2MDUxOFoXDTI2MTIyMTE3MDUxOFowLzEtMCsGA1UEAxMk MDhjYjdmMDQtZWE2OS00Yjc1LWI4MTQtYjZmODMzN2I1ZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllp9OQKy3vcBwq6LF0p3FTcIATmJYQY4o+ly losvfX1Xi5k/aF/WeFebk2ujWRfzym1B5F3hMavGzfdWWx+0+BhMD/jBXO/XoFiX ZLNZJuEAxCcGCvkxdHxrnrGbKogVxUjacUB9mqBxMH10jMR43z6CidTbJrPLcFIl BgbedJHBsHDXLsFFJ9HdEI5qNbdyFGPeZtaTXfwSJIFWYEZxWko5Eo+76cSWg8bz I4YHZ28E3k+Cc77OB4I+pezHHTLYQeL7UvaeJCwRLCn180tWiWYmd7ZuYzwB41MY F6hQiCiDEbowN/+Xj6vVrnGyTGGLU96u5iQXQP/wCOJ9J4CViQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFD+xmRYsheRB5ABZa6Iuzly8DqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMzhjZjdjODktMTAyYi0z NGVkLThlZjgtY2I1ODNiNGJlMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQISL2ynE4QwbmGc4O0RM58lcD9bzGLWskvfkTFeKwAaMSUppU1+Pf2 Y48CmZH5jAfFgeCRNqm6qpVPpVCRCLzY2NPlE0Tjyl3MjKKaYQWjBWrPpIgcTlXO LsXIrvIK7R99aE5r6eL0W79djWNk4YZl3jvsAKCNQ9VIRuT+kQJUCtlYbMAgtOvY zZe4zMIKX92xtOdzUVxBP2c6P3chKK/qQIVQXwid+Bczl7SxcN3/bdzFvgq1UkSE ytPyyisrpO0DfY0p7aOyPTRrdrrV0t/Dn7p0JxEqnAuQ5Oqvr3pOzF7dZtyvj3t4 zxKJOgr4sJKw3ir4CyUrkFLvc5ajxok= -----END CERTIFICATE-----Generated at Fri Sep 25 18:02:25 2026 by rpki-client