$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/39a38dd0-6927-3de0-8074-70f0686ffa81.roa File: 39a38dd0-6927-3de0-8074-70f0686ffa81.roa (raw, json) Hash identifier: 9sTtP8FrqjbvUpQ1As7ok8PfQeSxh6mYgljU9cSdPf4= Subject key identifier: 3F:28:A0:30:F7:C3:64:0C:9D:2B:AE:2A:DF:87:45:06:D3:7A:D2:19 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F3A17C8FD38018CBC7317A250 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/39a38dd0-6927-3de0-8074-70f0686ffa81.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 394579 IP address blocks: 216.198.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c8:fd:38:01:8c:bc:73:17:a2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=b1cb8737-afdc-4f79-a4ae-020171983437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:fd:e7:94:40:e6:ab:7e:be:a2:14:8f:c7: 5d:17:5e:69:72:b5:3c:2d:2c:43:36:73:74:33:b9: 2b:a7:4c:17:92:c7:c7:59:fe:17:64:4c:90:35:02: b5:d3:33:c0:04:8b:42:7e:8a:01:ce:f1:69:c6:01: de:3b:14:16:da:0a:27:c2:3c:b6:be:bd:12:05:01: 7f:40:fc:a7:25:e1:3d:ca:f8:9c:7a:db:87:d8:4a: 82:52:53:bd:44:67:52:80:e6:39:6a:58:c9:94:50: 52:25:85:80:bd:65:3d:27:1a:aa:ac:1a:89:4e:59: aa:db:21:d4:da:42:f7:ec:53:df:2a:36:03:06:6b: 79:ec:a4:97:80:b2:22:dc:1f:16:25:f6:ea:49:b0: 19:18:f3:9b:be:7d:27:e0:7f:a9:e0:12:1a:08:23: d6:7d:5e:91:8d:63:5c:4e:29:56:11:cf:16:be:d9: 13:59:34:81:b1:99:9e:af:e9:60:c8:8e:98:81:6c: cc:36:58:9f:35:5e:e0:4f:ca:51:25:85:fc:66:b2: 4e:fe:f0:71:e8:a0:85:21:91:27:81:eb:de:a6:5d: 95:2d:3a:4b:d3:8b:8d:02:1d:cf:e7:11:bd:e6:09: 96:a2:ef:50:f5:5c:bb:22:ca:0e:4f:c7:ac:a3:74: 12:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:28:A0:30:F7:C3:64:0C:9D:2B:AE:2A:DF:87:45:06:D3:7A:D2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/39a38dd0-6927-3de0-8074-70f0686ffa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 216.198.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:38:8a:11:34:03:24:96:5f:c7:43:7f:51:0c:ee:bc:fb:fd: 34:82:29:1b:d4:d9:fd:92:62:f1:e7:f5:1c:e3:67:2f:54:9c: a5:b1:27:30:7a:ae:43:b5:9c:db:bf:57:37:8b:f7:48:2a:45: f7:f1:22:95:c3:7b:1e:07:c3:47:1f:a7:ee:75:77:ae:cb:5b: 87:e5:11:a9:43:a9:f6:43:cd:58:26:a8:80:42:58:d4:84:53: 9d:70:d2:a6:14:ae:ce:77:7a:59:58:63:ca:ac:db:3e:3d:aa: 7d:03:63:b0:21:7a:82:48:85:4b:1c:37:b3:34:24:88:7a:e6: e4:d6:b1:95:db:30:85:1a:fb:4e:62:3b:44:3f:0b:10:0a:bc: ea:01:9a:66:e3:c8:f4:89:bd:c8:57:b8:32:fa:30:9a:09:9e: b9:5e:9f:bd:ea:4b:14:35:a2:20:2c:76:1b:26:2e:7b:a7:f3: cb:8f:23:37:fd:5e:cb:c5:99:1f:63:fd:08:7b:84:bd:28:d6: 4d:fd:8c:60:86:04:35:03:15:60:9a:bf:f9:81:20:22:2b:6a: 1b:a0:d1:f4:91:b9:ef:40:f8:30:ac:6f:3b:10:77:b9:96:ff: d1:7f:84:10:8b:c4:01:b2:31:ab:2a:99:c3:1b:ce:fe:30:32: cb:3d:fc:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8j9OAGMvHMXolAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YjFjYjg3MzctYWZkYy00Zjc5LWE0YWUtMDIwMTcxOTgzNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvz955RA5qt+vqIUj8ddF15pcrU8LSxDNnN0 M7krp0wXksfHWf4XZEyQNQK10zPABItCfooBzvFpxgHeOxQW2gonwjy2vr0SBQF/ QPynJeE9yvicetuH2EqCUlO9RGdSgOY5aljJlFBSJYWAvWU9JxqqrBqJTlmq2yHU 2kL37FPfKjYDBmt57KSXgLIi3B8WJfbqSbAZGPObvn0n4H+p4BIaCCPWfV6RjWNc TilWEc8WvtkTWTSBsZmer+lgyI6YgWzMNlifNV7gT8pRJYX8ZrJO/vBx6KCFIZEn gevepl2VLTpL04uNAh3P5xG95gmWou9Q9Vy7IsoOT8eso3QSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8ooDD3w2QMnSuuKt+HRQbTetIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMzlhMzhkZDAtNjkyNy0z ZGUwLTgwNzQtNzBmMDY4NmZmYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ma8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw4ihE0AySWX8dDf1EM7rz7/TSCKRvU2f2SYvHn9RzjZy9UnKWxJzB6 rkO1nNu/VzeL90gqRffxIpXDex4Hw0cfp+51d67LW4flEalDqfZDzVgmqIBCWNSE U51w0qYUrs53ellYY8qs2z49qn0DY7AheoJIhUscN7M0JIh65uTWsZXbMIUa+05i O0Q/CxAKvOoBmmbjyPSJvchXuDL6MJoJnrlen73qSxQ1oiAsdhsmLnun88uPIzf9 XsvFmR9j/Qh7hL0o1k39jGCGBDUDFWCav/mBICIrahug0fSRue9A+DCsbzsQd7mW /9F/hBCLxAGyMasqmcMbzv4wMss9/KA= -----END CERTIFICATE-----Generated at Mon Sep 28 21:38:56 2026 by rpki-client