$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa File: 38d95139-c9aa-35c6-98f7-0599639ee4a3.roa (raw, json) Hash identifier: mdNFbsP6AjWm2hXVaeWhe4lLBXtPXCK5f6UGMSh3ra4= Subject key identifier: D3:70:6D:F6:AD:93:0C:B5:E9:B2:7F:DB:48:84:8D:1D:28:F1:DC:93 Certificate issuer: /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Certificate serial: 010D0C9F4328584F20F7D4FF067CBC29BE4A2750 Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 162.120.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d4:ff:06:7c:bc:29:be:4a:27:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=31954f20-e993-45dd-bd69-b005c1a6b2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:37:00:92:46:d0:60:14:a5:72:cf:13:57: 66:5e:ab:7d:9e:80:25:ba:0c:bc:1a:f0:e8:47:2b: 9b:27:6b:1f:46:c8:e6:11:1e:cd:28:6b:16:fe:db: ae:49:ea:69:8a:cb:d7:d0:e0:ca:3b:83:46:6d:0f: 0e:c6:73:ab:79:6b:75:21:32:32:59:20:9e:3e:65: a4:4e:c4:fb:df:22:ca:d0:a2:64:4c:a7:70:9b:71: 35:56:58:c9:46:a0:6d:2d:de:f5:79:3a:87:12:68: 39:32:17:fa:ea:ab:99:34:6b:56:43:68:3d:ab:c8: 8e:bf:ac:21:2c:98:a9:df:4f:b1:5f:b9:49:4a:5a: 7f:fc:d6:21:9c:33:97:1c:4c:12:b4:36:2c:3b:f7: 5c:71:e3:f1:a9:1c:93:e4:a3:a0:27:1e:b7:bf:18: 1b:31:db:f4:95:70:7e:4c:0c:c7:88:59:6b:5f:c2: c8:fc:aa:0d:1f:fc:a8:03:3d:98:d7:12:10:1e:37: e1:2c:da:96:67:d7:97:fd:77:06:12:7e:e4:09:dd: 14:d8:41:6e:d8:65:dc:37:26:b6:4b:20:b6:28:4e: 98:08:f8:e0:16:77:d4:7c:ce:6f:02:ec:d0:ab:c4: de:c8:6b:a3:50:f3:1b:c0:69:8d:76:60:18:3c:d0: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:6D:F6:AD:93:0C:B5:E9:B2:7F:DB:48:84:8D:1D:28:F1:DC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl X509v3 Authority Key Identifier: keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer sbgp-ipAddrBlock: critical IPv4: 162.120.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:1c:59:77:0a:f0:51:2b:db:be:5c:76:44:c4:ef:f8:fa:42: 7c:12:c0:a3:53:bd:05:36:f3:61:a2:24:d0:bc:b8:7a:11:32: 6b:84:d4:2b:9d:f2:82:b4:b5:5b:3d:48:f1:83:5e:c4:aa:bd: ae:3b:a5:fe:2a:9c:7b:0a:a1:e9:a7:74:74:e9:8c:a4:95:91: f3:42:d6:35:2b:84:37:50:9a:28:01:5a:fb:66:8b:ea:96:49: 5b:c4:fc:3b:55:6c:c5:b7:d3:dd:55:99:fa:91:36:88:f7:dc: 0e:82:10:73:30:58:94:28:c6:b6:b6:4c:2c:88:b0:38:a2:da: 9e:6a:59:b4:0c:8a:8d:f8:cd:02:dd:d6:7b:63:1a:23:07:fe: e6:0d:f2:2b:41:69:ba:f8:0a:ff:0d:2f:60:52:06:ea:ca:54: 9f:67:81:bc:9d:54:d6:69:70:a5:13:9b:f3:5f:8a:1c:98:af: 5b:9b:53:7a:2b:82:b8:6f:4c:31:b4:84:9e:2f:70:45:e9:bb: 79:2f:f0:69:91:97:c6:67:d4:6b:2d:50:04:a4:52:ac:0f:be: 3a:8a:c1:09:9e:c0:82:e4:9b:ac:d7:7d:b9:09:26:7a:86:a2: 6d:dd:73:2d:4e:25:9c:19:25:c6:ca:70:95:05:1c:c0:23:84: 88:bf:e1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99T/Bny8Kb5KJ1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx MmM5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MzE5NTRmMjAtZTk5My00NWRkLWJkNjktYjAwNWMxYTZiMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN83AJJG0GAUpXLPE1dmXqt9noAlugy8GvDo RyubJ2sfRsjmER7NKGsW/tuuSeppisvX0ODKO4NGbQ8OxnOreWt1ITIyWSCePmWk TsT73yLK0KJkTKdwm3E1VljJRqBtLd71eTqHEmg5Mhf66quZNGtWQ2g9q8iOv6wh LJip30+xX7lJSlp//NYhnDOXHEwStDYsO/dccePxqRyT5KOgJx63vxgbMdv0lXB+ TAzHiFlrX8LI/KoNH/yoAz2Y1xIQHjfhLNqWZ9eX/XcGEn7kCd0U2EFu2GXcNya2 SyC2KE6YCPjgFnfUfM5vAuzQq8TeyGujUPMbwGmNdmAYPNADMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNwbfatkwy16bJ/20iEjR0o8dyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5 MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvMzhkOTUxMzktYzlhYS0z NWM2LTk4ZjctMDU5OTYzOWVlNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5 NGY0ZTEyYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAcWXcK8FEr275cdkTE7/j6QnwSwKNTvQU282GiJNC8uHoRMmuE1Cud 8oK0tVs9SPGDXsSqva47pf4qnHsKoemndHTpjKSVkfNC1jUrhDdQmigBWvtmi+qW SVvE/DtVbMW3091VmfqRNoj33A6CEHMwWJQoxra2TCyIsDii2p5qWbQMio34zQLd 1ntjGiMH/uYN8itBabr4Cv8NL2BSBurKVJ9ngbydVNZpcKUTm/NfihyYr1ubU3or grhvTDG0hJ4vcEXpu3kv8GmRl8Zn1GstUASkUqwPvjqKwQmewILkm6zXfbkJJnqG om3dcy1OJZwZJcbKcJUFHMAjhIi/4XU= -----END CERTIFICATE-----Generated at Tue Sep 22 07:22:25 2026 by rpki-client