$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/9b978be0-605d-3571-ba55-e7c010d5223b.roa File: 9b978be0-605d-3571-ba55-e7c010d5223b.roa (raw, json) Hash identifier: lHm8gI6bhPp7Rd9TS7bNfvZsuo4/yveJpiNkKqNJP3M= Subject key identifier: C0:41:CC:B7:5E:91:FC:BA:90:96:A9:02:3B:38:37:6C:E0:16:1E:87 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584F49764E303A6A71C8A808DF60 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/9b978be0-605d-3571-ba55-e7c010d5223b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 168.203.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:4e:30:3a:6a:71:c8:a8:08:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a9f6af35-7113-46a0-8db4-8d5bd8f97612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:91:99:f3:f0:31:4f:57:15:65:71:93:14: ba:fd:ec:04:a2:7d:a1:37:1f:75:9a:d8:15:56:f8: 5b:bb:37:f8:97:ba:10:10:8e:ac:dd:3f:71:08:e2: 03:cb:74:e5:40:d5:34:25:87:60:62:51:af:f9:ae: 47:bc:d3:e8:b7:d6:61:ac:71:4b:17:41:e2:27:75: 73:0a:5d:02:a3:c5:6d:e1:94:a8:e8:4a:fd:62:d3: 73:03:95:89:df:8a:9b:be:25:ca:d6:90:8d:5e:18: 44:ee:72:17:a5:c5:77:8d:8f:19:60:18:49:22:f2: 38:42:13:5d:29:b7:21:b5:27:d5:da:c4:45:9d:31: 53:0b:12:5b:15:1c:08:42:50:cf:b0:ee:69:fd:72: c2:51:48:ae:05:0f:10:ec:b2:80:29:08:bd:eb:ec: 29:a3:9b:44:c2:ad:8f:a2:37:9f:7e:7e:11:83:c3: 2c:1a:af:92:75:fd:3c:c9:2d:ce:fa:77:98:38:7b: ff:76:0a:00:7d:5c:31:49:7b:fc:f5:f8:3c:d8:9b: 92:f1:4d:b0:8f:60:66:6f:bd:6f:40:b1:24:54:4f: ef:62:04:8b:13:4b:ed:1b:12:12:ce:c3:89:31:0c: 73:01:06:ed:bd:3d:29:ea:b6:57:a7:34:95:30:9a: 15:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:41:CC:B7:5E:91:FC:BA:90:96:A9:02:3B:38:37:6C:E0:16:1E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/9b978be0-605d-3571-ba55-e7c010d5223b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:93:81:38:b6:53:aa:9d:32:49:ce:1f:bb:d4:53:d1:c2:c8: cf:a3:6a:e9:f2:ce:08:79:dc:ae:cd:ba:1a:aa:41:dd:aa:82: d8:e4:6e:8e:ed:21:83:c7:2e:48:7a:b7:5c:3d:d3:9c:51:c7: ff:4e:c2:fb:2f:bb:44:f6:68:c6:13:ac:43:91:0a:ab:33:eb: 96:f4:72:a2:41:b0:d0:80:d3:51:48:15:a3:bb:71:dd:0f:2d: 32:0c:c9:45:02:34:d7:2e:47:bd:d1:3c:02:cb:a2:cb:76:45: cf:f8:4f:c5:5b:8f:4a:b4:5d:5f:a6:82:be:07:cb:f1:a5:dc: c7:40:a5:5f:f1:e2:fe:96:37:f6:7d:6e:eb:c2:a4:f3:66:1c: 4f:14:1c:48:03:e4:ff:b5:e2:67:9e:29:85:97:29:25:22:b5: 95:be:9b:07:33:5a:3a:4c:0d:e3:a6:a1:a2:62:0f:93:06:eb: 34:43:b2:b9:97:25:44:38:24:1b:7e:1b:af:39:87:10:94:21: b3:5a:d1:b5:d2:d0:1f:e4:24:e4:4c:4e:d5:8c:ae:5d:a6:6d: 32:fc:46:ce:e5:a0:fb:c8:e2:ff:c0:4f:59:49:f4:43:cc:3a: 1e:51:96:12:23:b6:cd:93:fc:2f:ed:1a:d3:5d:5f:46:65:fc: db:c1:11:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdk4wOmpxyKgI32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTlmNmFmMzUtNzExMy00NmEwLThkYjQtOGQ1YmQ4Zjk3NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0SRmfPwMU9XFWVxkxS6/ewEon2hNx91mtgV Vvhbuzf4l7oQEI6s3T9xCOIDy3TlQNU0JYdgYlGv+a5HvNPot9ZhrHFLF0HiJ3Vz Cl0Co8Vt4ZSo6Er9YtNzA5WJ34qbviXK1pCNXhhE7nIXpcV3jY8ZYBhJIvI4QhNd KbchtSfV2sRFnTFTCxJbFRwIQlDPsO5p/XLCUUiuBQ8Q7LKAKQi96+wpo5tEwq2P ojeffn4Rg8MsGq+Sdf08yS3O+neYOHv/dgoAfVwxSXv89fg82JuS8U2wj2Bmb71v QLEkVE/vYgSLE0vtGxISzsOJMQxzAQbtvT0p6rZXpzSVMJoVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBBzLdekfy6kJapAjs4N2zgFh6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvOWI5NzhiZTAtNjA1ZC0z NTcxLWJhNTUtZTdjMDEwZDUyMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiTgTi2U6qdMknOH7vUU9HCyM+jaunyzgh53K7NuhqqQd2qgtjkbo7t IYPHLkh6t1w905xRx/9Owvsvu0T2aMYTrEORCqsz65b0cqJBsNCA01FIFaO7cd0P LTIMyUUCNNcuR73RPALLost2Rc/4T8Vbj0q0XV+mgr4Hy/Gl3MdApV/x4v6WN/Z9 buvCpPNmHE8UHEgD5P+14meeKYWXKSUitZW+mwczWjpMDeOmoaJiD5MG6zRDsrmX JUQ4JBt+G685hxCUIbNa0bXS0B/kJORMTtWMrl2mbTL8Rs7loPvI4v/AT1lJ9EPM Oh5RlhIjts2T/C/tGtNdX0Zl/NvBEeo= -----END CERTIFICATE-----Generated at Mon Sep 28 23:17:33 2026 by rpki-client