$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa File: 38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa (raw, json) Hash identifier: j1jfU7wYhTEM42AfHLnV/eVqVQ7D6I7zlyjQ8gyf4vw= Subject key identifier: 26:D5:F8:60:57:E0:8A:79:F9:95:92:9B:F4:FC:80:CC:0C:F7:73:03 Certificate issuer: /CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Certificate serial: 010D0C9F4328584F3E47EA0020D67180F191AAC0 Authority key identifier: 9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 400426 IP address blocks: 128.254.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ea:00:20:d6:71:80:f1:91:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=510057ad-d6e5-4122-ac4c-ebbccf5168b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:eb:5a:4a:c1:cd:a7:cd:32:ac:f8:d1:83:cf: 1f:b9:92:f7:5c:9b:78:86:df:66:a5:36:6f:95:70: cb:6d:bd:e7:8b:d3:0d:3a:c3:c4:a5:5a:45:55:31: 36:a9:69:15:93:cd:81:8b:f1:7c:55:89:2b:0a:00: 00:b5:9c:29:33:71:73:f6:7d:dd:63:af:cd:47:70: fe:97:f4:33:d7:70:4c:d0:fb:38:47:22:02:cd:9b: 80:87:96:76:03:82:6e:f0:ad:d4:b0:20:5e:01:7a: da:5c:60:87:5f:31:9a:eb:52:54:3b:03:a4:3d:21: d9:6e:64:94:d3:c7:b2:ba:f9:a7:65:48:41:15:3e: fd:b4:bd:88:cf:8b:f1:80:4d:2f:0b:ff:89:bf:84: df:32:3d:19:3d:a8:c8:f8:9d:a7:b7:60:9b:30:9a: 81:8c:ef:67:9b:22:21:b8:0a:9b:8e:89:2e:e2:b4: 54:59:cb:5c:7d:98:ca:8f:a3:31:19:12:09:75:66: 1a:19:8a:35:5d:6a:f7:e7:03:69:d3:f5:af:dc:c2: da:fe:f1:4a:75:6c:06:39:cb:fc:46:dd:a7:19:66: 97:3e:61:69:07:72:2e:c7:e0:6a:93:46:ff:b6:27: 08:19:71:ac:fb:2d:6d:8f:ef:87:3d:d8:0c:f9:59: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D5:F8:60:57:E0:8A:79:F9:95:92:9B:F4:FC:80:CC:0C:F7:73:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl X509v3 Authority Key Identifier: keyid:9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer sbgp-ipAddrBlock: critical IPv4: 128.254.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:3f:d7:55:c0:0b:70:2b:f1:af:a0:c9:97:52:c3:09:03:88: 1e:f1:ae:1d:17:be:c1:b3:74:47:d0:a5:1f:97:b4:02:46:9c: 24:e8:18:40:79:7d:ef:de:47:52:a3:18:04:64:b1:8c:e6:43: 19:a7:98:05:06:d6:2b:43:02:ac:07:c6:30:d1:b8:c6:cf:6b: 0b:ac:10:55:ed:3b:12:c5:0d:21:2b:a0:fb:a6:c0:27:b8:e0: f6:7c:80:98:32:60:c5:48:d5:74:6d:95:3b:ba:46:3f:5b:4e: 4b:5f:ad:a8:7f:b7:48:9e:ba:e0:a0:63:e5:3b:08:25:42:7a: 6f:8b:21:fa:53:38:ee:3b:26:b3:44:88:df:f4:ce:81:61:1d: ec:12:1f:28:b6:bd:82:37:55:cb:9c:c0:b8:d5:f1:3c:63:f0: 9f:98:fd:cc:a0:7b:ac:0f:85:44:dd:df:87:6e:65:b2:4b:42: 74:ea:5c:28:6c:15:c2:b9:07:53:bc:38:d4:3f:1a:a2:c9:42: 3c:54:7d:f6:e0:1e:a4:01:07:6a:c7:74:72:27:f7:5a:fe:e1: d1:e5:18:b4:a4:f3:d7:9d:f8:de:82:fd:11:10:52:aa:40:50: e2:23:28:9d:f0:33:5e:c2:bc:d7:a1:e9:9b:de:c8:b0:95:bf: 75:30:be:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+oAINZxgPGRqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzExYTA0ZGUtZGIyYS00ZTU0LTg2OTMtY2E2YTJjMTA3 YWI0MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NTEwMDU3YWQtZDZlNS00MTIyLWFjNGMtZWJiY2NmNTE2OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+taSsHNp80yrPjRg88fuZL3XJt4ht9mpTZv lXDLbb3ni9MNOsPEpVpFVTE2qWkVk82Bi/F8VYkrCgAAtZwpM3Fz9n3dY6/NR3D+ l/Qz13BM0Ps4RyICzZuAh5Z2A4Ju8K3UsCBeAXraXGCHXzGa61JUOwOkPSHZbmSU 08eyuvmnZUhBFT79tL2Iz4vxgE0vC/+Jv4TfMj0ZPajI+J2nt2CbMJqBjO9nmyIh uAqbjoku4rRUWctcfZjKj6MxGRIJdWYaGYo1XWr35wNp0/Wv3MLa/vFKdWwGOcv8 Rt2nGWaXPmFpB3Iux+Bqk0b/ticIGXGs+y1tj++HPdgM+VmXAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbV+GBX4Ip5+ZWSm/T8gMwM93MDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MTFh MDRkZS1kYjJhLTRlNTQtODY5My1jYTZhMmMxMDdhYjQvMzhjYzkwNjMtZmMzNy0z NDljLTk2NzUtM2U4ZjZkYWZjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzExYTA0ZGUtZGIyYS00ZTU0LTg2 OTMtY2E2YTJjMTA3YWI0LzcxMWEwNGRlLWRiMmEtNGU1NC04NjkzLWNhNmEyYzEw N2FiNC5jcmwwHwYDVR0jBBgwFoAUnky2obqwrVzSyH3az5zCeW4LNp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MTFhMDRkZS1kYjJhLTRlNTQtODY5My1jYTZh MmMxMDdhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs/11XAC3Ar8a+gyZdSwwkDiB7xrh0XvsGzdEfQpR+XtAJGnCToGEB5 fe/eR1KjGARksYzmQxmnmAUG1itDAqwHxjDRuMbPawusEFXtOxLFDSEroPumwCe4 4PZ8gJgyYMVI1XRtlTu6Rj9bTktfrah/t0ieuuCgY+U7CCVCem+LIfpTOO47JrNE iN/0zoFhHewSHyi2vYI3VcucwLjV8Txj8J+Y/cyge6wPhUTd34duZbJLQnTqXChs FcK5B1O8ONQ/GqLJQjxUffbgHqQBB2rHdHIn91r+4dHlGLSk89ed+N6C/REQUqpA UOIjKJ3wM17CvNeh6ZveyLCVv3UwvnU= -----END CERTIFICATE-----Generated at Fri Sep 25 15:07:46 2026 by rpki-client