$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: fKKsYwlm6YpD7PD0mWtiqsdDUC8vd7yanKYT99JCRNA= Subject key identifier: 49:30:E1:25:21:70:A3:5F:83:31:C4:83:BF:80:7B:F2:2C:4D:68:B8 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584E253F049EFFDE61391CD8B4C0 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:04:9e:ff:de:61:39:1c:d8:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=8621d3db-bb46-4bb2-84ae-6cb597523fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:bf:5f:65:bf:7c:13:ea:46:8d:ec:cc:3e: 97:58:a1:d2:eb:6c:24:38:2d:32:b6:7e:d2:38:cd: 93:e1:ea:77:0f:d9:9b:b5:5a:7f:97:6b:c9:97:ae: a7:22:79:ad:07:eb:a1:1f:bf:fb:ce:9d:27:c6:da: 86:58:9b:e6:2c:21:81:93:68:ff:3a:8d:7c:b9:78: bc:be:4a:dc:7b:47:7f:16:17:81:0a:ce:52:a0:34: 94:b3:86:d1:36:84:9f:b5:58:a2:fa:12:24:d6:f9: d5:57:9a:ee:01:c2:85:81:f7:8f:af:a9:1f:ce:c9: 68:e7:94:af:34:a6:30:01:e2:9b:61:c4:fa:19:f5: bc:88:2c:cd:c8:b5:8a:ca:d6:17:0d:d0:ee:3b:e8: b8:bb:77:ff:13:0a:4d:7b:0f:e1:5b:71:a1:14:04: e9:0a:8a:42:a0:e3:8e:8e:0f:52:1a:36:1c:e6:3a: 6d:29:1e:20:90:bd:da:47:ee:c5:9a:82:a5:c6:c8: c6:2d:16:d3:72:7a:60:5e:68:93:09:c5:90:7f:0f: f8:46:7e:fb:3d:c7:5d:5b:22:ae:5a:84:06:05:eb: f6:e1:d0:30:1a:80:66:46:12:5e:60:8b:dc:00:76: 48:75:1a:82:ac:5e:41:b6:23:f1:e7:63:b1:65:1a: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:E1:25:21:70:A3:5F:83:31:C4:83:BF:80:7B:F2:2C:4D:68:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:7e:00:d2:b6:71:c7:88:f7:0c:1b:b3:6d:cb:fc:9e:30:0b: 2a:36:39:7d:81:4a:ab:93:da:15:05:68:20:57:6d:8b:30:98: 54:e2:c2:e6:89:85:5a:2d:fc:05:d1:00:f5:74:fe:96:ae:ae: a3:86:67:55:0e:52:bb:a5:a1:f4:7e:98:92:61:cd:f6:33:68: e5:0d:b8:31:23:fd:70:b5:7a:2d:3b:55:17:32:6c:cc:93:78: 83:f4:49:0f:f2:fd:fb:19:69:2b:15:e2:16:73:4b:3f:ac:6d: d5:eb:f6:04:a2:9f:c1:a3:0e:a6:1b:74:d7:0f:fd:94:f7:11: 4c:5f:c5:ea:99:2f:1d:5c:60:91:76:e1:f1:61:cd:0c:75:59: 94:cc:71:93:a9:81:af:5d:82:4c:bf:c3:95:17:22:12:d1:17: b8:f0:4d:74:bf:f5:e1:e8:33:fe:b0:a5:99:8d:f2:fa:7b:d1: 2d:f1:6e:38:89:bf:96:b4:d9:03:11:72:fa:6b:f8:98:dd:3b: 8b:4e:1f:9f:66:46:b6:9b:3b:63:e9:46:8e:ff:6c:f3:71:11: 62:05:a1:3c:4a:b5:0e:7f:e5:e4:62:26:4e:a2:06:7c:79:62: 22:65:af:89:99:0e:4f:ec:89:f3:e8:89:b9:72:29:6c:0b:c4: af:1a:59:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwSe/95hORzYtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ODYyMWQzZGItYmI0Ni00YmIyLTg0YWUtNmNiNTk3NTIzZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIG/X2W/fBPqRo3szD6XWKHS62wkOC0ytn7S OM2T4ep3D9mbtVp/l2vJl66nInmtB+uhH7/7zp0nxtqGWJvmLCGBk2j/Oo18uXi8 vkrce0d/FheBCs5SoDSUs4bRNoSftVii+hIk1vnVV5ruAcKFgfePr6kfzslo55Sv NKYwAeKbYcT6GfW8iCzNyLWKytYXDdDuO+i4u3f/EwpNew/hW3GhFATpCopCoOOO jg9SGjYc5jptKR4gkL3aR+7FmoKlxsjGLRbTcnpgXmiTCcWQfw/4Rn77PcddWyKu WoQGBev24dAwGoBmRhJeYIvcAHZIdRqCrF5BtiPx52OxZRo0IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkw4SUhcKNfgzHEg7+Ae/IsTWi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1+ANK2cceI9wwbs23L/J4wCyo2OX2BSquT2hUFaCBXbYswmFTiwuaJ hVot/AXRAPV0/paurqOGZ1UOUrulofR+mJJhzfYzaOUNuDEj/XC1ei07VRcybMyT eIP0SQ/y/fsZaSsV4hZzSz+sbdXr9gSin8GjDqYbdNcP/ZT3EUxfxeqZLx1cYJF2 4fFhzQx1WZTMcZOpga9dgky/w5UXIhLRF7jwTXS/9eHoM/6wpZmN8vp70S3xbjiJ v5a02QMRcvpr+JjdO4tOH59mRrabO2PpRo7/bPNxEWIFoTxKtQ5/5eRiJk6iBnx5 YiJlr4mZDk/sifPoiblyKWwLxK8aWXo= -----END CERTIFICATE-----Generated at Sat Jun 13 18:03:04 2026 by rpki-client