$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa File: 4d9dde79-a7a1-3002-99de-718c0934d901.roa (raw, json) Hash identifier: 412qwZhQS10vjbCXRtasIHC3Ij+siaAHqU7jFtpfov8= Subject key identifier: 9E:35:31:3D:2B:75:9C:F5:62:D1:52:B1:68:0C:65:DE:B4:2F:F1:A4 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584F6F22E9C4B8E46C06C3316C80 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 40628 IP address blocks: 199.27.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e9:c4:b8:e4:6c:06:c3:31:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=c24b5ec8-f224-40c8-a7bc-29d2d9285365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:c0:b1:ac:5f:f1:f1:a7:9e:2e:da:92:7e: 42:d0:e5:00:86:60:6a:74:97:f7:c7:1c:61:89:a3: 79:d3:51:ce:f1:41:dd:67:52:ec:64:d3:01:3c:6a: 2a:f1:aa:79:c8:c6:4e:4b:0e:8f:52:a7:e7:33:fd: 5f:44:ab:79:27:b0:ba:48:61:e0:38:87:2a:95:b5: d0:dc:16:4e:fc:d9:2c:22:f5:ab:32:76:7f:fc:48: 33:a2:72:49:e5:2a:b3:bb:50:0b:13:c6:ca:23:5c: 57:ea:bc:d7:2e:bb:5a:48:f7:e8:00:c3:9a:60:59: 54:df:58:f6:dd:8f:69:53:49:43:59:bc:d2:6c:66: 64:6f:f8:04:a2:33:44:34:5d:3f:f8:78:5a:8c:6f: db:9b:45:09:ee:e3:ac:1f:9c:61:5d:2d:8a:40:0f: 61:ef:67:93:26:90:fa:91:97:2e:f6:25:07:af:38: 9f:02:b9:8e:60:71:3a:97:cf:d5:2e:a4:83:02:a9: bc:2b:00:bb:6d:64:d4:47:28:54:77:8d:88:c3:7b: 57:55:95:36:a3:58:6c:c2:46:b0:dd:6f:e7:b3:25: bb:37:5b:1b:49:f3:f9:a7:4f:46:ea:e3:69:7c:d3: 8f:98:ba:f2:bb:d5:bf:51:81:be:ba:d6:fb:94:95: 14:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:31:3D:2B:75:9C:F5:62:D1:52:B1:68:0C:65:DE:B4:2F:F1:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/4d9dde79-a7a1-3002-99de-718c0934d901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 199.27.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8f:51:65:0d:d5:ff:69:ec:75:00:7b:7c:84:6a:6b:dd:af: 7a:de:8d:bd:54:02:6b:bb:bf:df:3c:46:54:0c:dc:1d:08:1f: bc:74:1d:8e:ee:f9:90:d9:b4:d9:46:63:86:60:3d:d0:94:7c: 76:6f:e0:17:85:09:c1:bc:09:9d:9b:5c:35:b4:20:40:0f:18: ee:94:2d:e0:ec:66:ee:66:e6:f5:d8:12:8b:52:38:fb:02:a1: 0d:37:dd:d5:23:01:47:49:e1:76:e2:e8:05:47:c0:29:ae:32: b2:64:17:a1:f9:6b:47:15:87:22:c1:fa:88:89:9d:5d:87:69: 30:7e:b0:27:b2:44:6b:3d:72:ad:a1:08:91:d8:10:9b:c8:77: a2:d9:b0:28:61:e6:97:4e:cd:ce:61:a2:d7:11:07:bb:08:be: 35:cf:9f:9e:a3:08:b3:4e:01:b1:3d:4c:1a:59:34:3e:65:80: 0a:6e:b5:ba:74:0f:4e:b3:20:ee:29:05:48:15:e0:32:7d:40: 29:e9:fd:b4:3b:e8:b1:eb:c3:40:0d:9e:5a:97:17:f0:20:ec: 9d:8b:98:c3:f1:a2:13:85:4a:65:8e:15:48:64:69:8a:ed:bc: 9e:c7:c3:0f:6c:8a:da:1f:1d:cb:9d:f8:d2:e0:f1:9e:dc:25: 64:f5:2d:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIunEuORsBsMxbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YzI0YjVlYzgtZjIyNC00MGM4LWE3YmMtMjlkMmQ5Mjg1MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK7Asaxf8fGnni7akn5C0OUAhmBqdJf3xxxh iaN501HO8UHdZ1LsZNMBPGoq8ap5yMZOSw6PUqfnM/1fRKt5J7C6SGHgOIcqlbXQ 3BZO/NksIvWrMnZ//EgzonJJ5Sqzu1ALE8bKI1xX6rzXLrtaSPfoAMOaYFlU31j2 3Y9pU0lDWbzSbGZkb/gEojNENF0/+HhajG/bm0UJ7uOsH5xhXS2KQA9h72eTJpD6 kZcu9iUHrzifArmOYHE6l8/VLqSDAqm8KwC7bWTURyhUd42Iw3tXVZU2o1hswkaw 3W/nsyW7N1sbSfP5p09G6uNpfNOPmLryu9W/UYG+utb7lJUUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ41MT0rdZz1YtFSsWgMZd60L/GkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNGQ5ZGRlNzktYTdhMS0z MDAyLTk5ZGUtNzE4YzA5MzRkOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADePUWUN1f9p7HUAe3yEamvdr3rejb1UAmu7v988RlQM3B0IH7x0HY7u +ZDZtNlGY4ZgPdCUfHZv4BeFCcG8CZ2bXDW0IEAPGO6ULeDsZu5m5vXYEotSOPsC oQ033dUjAUdJ4Xbi6AVHwCmuMrJkF6H5a0cVhyLB+oiJnV2HaTB+sCeyRGs9cq2h CJHYEJvId6LZsChh5pdOzc5hotcRB7sIvjXPn56jCLNOAbE9TBpZND5lgAputbp0 D06zIO4pBUgV4DJ9QCnp/bQ76LHrw0ANnlqXF/Ag7J2LmMPxohOFSmWOFUhkaYrt vJ7Hww9sitofHcud+NLg8Z7cJWT1LeU= -----END CERTIFICATE-----Generated at Sun Oct 11 22:09:19 2026 by rpki-client