$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa File: 84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa (raw, json) Hash identifier: sBU/Od1wAiMX8fFevCanbEpCEPaQzXiozmQwNBOza9M= Subject key identifier: 4E:3F:74:84:0E:7D:BA:1E:38:C8:4D:1E:47:88:33:AC:99:8E:BB:5F Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584F4112B3B8F2EAB4A158C68200 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 6498 IP address blocks: 199.249.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b3:b8:f2:ea:b4:a1:58:c6:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=c13f78ec-7d44-45c0-a59d-8593a7e3df12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:2a:c9:02:78:7e:77:4e:12:4c:43:51:d7: 02:b2:70:87:7f:c1:53:24:7f:97:a7:74:a3:f3:fe: 32:3b:a3:b0:fb:07:11:78:f1:bc:c0:61:c3:79:3e: f9:c9:72:19:8e:f6:b0:53:48:5a:35:d1:cc:95:c1: a1:17:bf:7a:6c:a4:4b:3d:cb:e7:56:bb:3c:1b:4a: 75:84:95:8a:bf:d3:46:8e:1a:db:8c:32:bd:75:78: 75:f2:80:41:2f:12:9a:7b:9f:99:cb:3f:90:39:c3: d2:02:31:fb:3c:a7:67:e7:98:56:02:9c:ac:f9:69: e5:98:43:59:f4:99:3c:9f:4a:8a:b4:56:88:98:23: 87:b5:18:b0:c0:74:d2:5b:4f:4a:0d:d1:2d:5f:21: b6:aa:f6:10:2d:69:26:29:a6:c7:e4:19:41:de:12: 70:e3:62:b3:29:f5:33:a0:db:ab:a0:b4:55:ec:cf: 5d:38:f7:fa:f0:ff:14:13:e6:4c:3b:11:bd:fe:65: 1d:a1:7e:10:70:48:96:f7:76:a0:6d:39:16:1f:fa: 75:40:be:f3:83:95:6e:16:4c:01:cc:f1:65:d8:a9: 3b:8e:e0:7f:8f:3a:b0:42:e8:f4:d3:2b:d7:48:12: 91:80:c8:f9:6a:84:6a:ad:ab:7d:12:77:75:29:b2: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3F:74:84:0E:7D:BA:1E:38:C8:4D:1E:47:88:33:AC:99:8E:BB:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 199.249.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:80:97:f9:78:fa:62:57:b7:4c:74:c7:36:d4:db:77:14:23: 2a:f8:7f:3b:4e:65:35:54:04:e7:b1:08:3c:5d:ac:fb:41:8d: 64:7c:f5:c2:b2:28:2f:80:c1:28:c1:c1:6a:bf:46:8b:b4:22: ed:94:b9:f5:4d:d4:04:0f:49:c1:dd:69:12:d1:e1:2c:18:ba: 96:80:89:be:38:0e:00:5e:66:a0:14:bb:6b:f6:66:cd:94:91: 33:16:ac:09:c7:c1:da:0b:28:41:51:5a:d2:b0:48:2b:bb:d8: 5c:7e:df:be:88:29:19:1b:10:25:6f:7a:44:46:d7:bd:4c:dd: 5e:78:0e:fd:0e:bd:75:10:44:a4:5b:0d:7c:3f:39:03:b4:e7: 0a:94:ed:65:27:2d:1c:94:be:a0:75:8e:4f:08:2a:fa:38:62: d1:e9:fa:6f:f5:51:ad:e5:f3:ae:11:bd:0e:35:0b:7a:fa:6d: f3:b2:ed:67:1f:83:98:47:37:11:b4:fb:33:78:83:09:55:c7: 4b:0d:39:64:b2:ff:5d:31:d7:6e:d4:46:2a:e0:87:d7:0c:4b: 58:d3:c3:d3:7f:d0:58:c0:67:0b:8c:ee:6c:7d:3b:b3:c0:58: a4:de:b9:40:df:a7:ba:fa:61:3c:d0:7a:6b:ef:0f:1d:d9:5e: 58:8a:61:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErO48uq0oVjGggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YzEzZjc4ZWMtN2Q0NC00NWMwLWE1OWQtODU5M2E3ZTNkZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57cqyQJ4fndOEkxDUdcCsnCHf8FTJH+Xp3Sj 8/4yO6Ow+wcRePG8wGHDeT75yXIZjvawU0haNdHMlcGhF796bKRLPcvnVrs8G0p1 hJWKv9NGjhrbjDK9dXh18oBBLxKae5+Zyz+QOcPSAjH7PKdn55hWApys+WnlmENZ 9Jk8n0qKtFaImCOHtRiwwHTSW09KDdEtXyG2qvYQLWkmKabH5BlB3hJw42KzKfUz oNuroLRV7M9dOPf68P8UE+ZMOxG9/mUdoX4QcEiW93agbTkWH/p1QL7zg5VuFkwB zPFl2Kk7juB/jzqwQuj00yvXSBKRgMj5aoRqrat9End1KbK7UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4/dIQOfboeOMhNHkeIM6yZjrtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvODRhNjA1ZjYtODU5Yy0z NTQ2LThiNjMtOWEwZWViMmU2M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOAl/l4+mJXt0x0xzbU23cUIyr4fztOZTVUBOexCDxdrPtBjWR89cKy KC+AwSjBwWq/Rou0Iu2UufVN1AQPScHdaRLR4SwYupaAib44DgBeZqAUu2v2Zs2U kTMWrAnHwdoLKEFRWtKwSCu72Fx+376IKRkbECVvekRG171M3V54Dv0OvXUQRKRb DXw/OQO05wqU7WUnLRyUvqB1jk8IKvo4YtHp+m/1Ua3l864RvQ41C3r6bfOy7Wcf g5hHNxG0+zN4gwlVx0sNOWSy/10x127URirgh9cMS1jTw9N/0FjAZwuM7mx9O7PA WKTeuUDfp7r6YTzQemvvDx3ZXliKYWs= -----END CERTIFICATE-----Generated at Tue Sep 29 14:57:34 2026 by rpki-client