$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa File: 538eaa57-d298-3f25-8222-de9e3819f175.roa (raw, json) Hash identifier: IlxPHjFSqZ2h8nCyDK5dBwkqj1C1et5cTBEeF2ayptY= Subject key identifier: D2:CC:08:BC:52:A7:B1:4C:DA:A3:C9:A8:B2:5D:E5:24:50:09:73:37 Certificate issuer: /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8 Certificate serial: 010D0C9F4328584F31B7BA89CC08AC5066437400 Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16796 IP address blocks: 198.169.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:ba:89:cc:08:ac:50:66:43:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=861a1791-209e-4661-b20d-0423693d5fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:dc:68:d4:d1:40:92:48:e9:e7:88:f8:df: d4:c5:72:43:a0:b6:a9:c5:b4:6d:b8:d8:f1:18:e4: 24:56:49:03:46:58:b6:f5:ee:eb:ae:56:fe:09:d0: 1f:e2:25:1d:b2:6b:39:86:d0:21:ed:b8:28:46:3d: 64:03:01:2c:38:41:74:c6:37:b1:35:f7:a6:9c:2a: ab:e4:c1:ee:42:3e:49:b7:2b:3f:1a:a8:fb:26:c2: 57:da:21:bc:d5:59:a8:66:01:32:45:e0:6e:49:45: 8a:8f:03:f3:fd:f5:99:a0:95:16:6b:fe:77:e9:e3: 81:08:23:00:a1:a7:77:d6:44:1a:1b:85:69:ff:9d: 6c:08:58:21:96:2c:40:63:59:a6:87:e4:1c:79:67: 8e:72:f8:1d:b7:d2:8d:60:18:0b:38:91:69:1d:b5: 2e:24:26:f1:70:7f:dd:77:b5:62:00:b0:3c:6a:07: a9:1e:39:62:ca:be:c1:4a:ab:62:26:45:82:7e:fc: f6:f6:ed:a5:50:a4:2b:71:0f:47:83:76:3a:54:48: 15:7d:94:c6:4a:30:d4:90:43:a9:02:8f:63:77:59: bf:72:fc:d7:e8:13:df:62:69:f8:35:de:01:3d:7f: 66:56:d0:cc:93:9d:40:d2:fe:81:2f:5f:c9:30:2f: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CC:08:BC:52:A7:B1:4C:DA:A3:C9:A8:B2:5D:E5:24:50:09:73:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl X509v3 Authority Key Identifier: keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer sbgp-ipAddrBlock: critical IPv4: 198.169.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d3:ff:33:7e:87:68:de:c5:a2:ba:46:2a:38:06:cd:b1:f0: 25:07:31:dc:78:a6:a4:8f:a7:58:01:0c:75:4e:44:c3:37:42: c4:01:a2:2e:3e:c1:e2:32:4f:ca:15:25:5c:82:c1:c2:7b:06: 72:e1:fb:a7:56:0f:31:fe:fa:f4:21:a9:70:1d:7f:3c:21:aa: 65:23:04:0c:97:0d:16:80:07:dd:25:50:89:01:86:1d:38:b8: e4:a0:f9:a0:a0:47:93:d5:cb:d5:a9:76:ca:53:98:54:80:1f: cb:c0:52:9b:dd:fa:81:7c:e2:ea:83:cd:a0:48:94:08:6d:71: 17:16:fc:4e:2e:c3:be:fd:16:05:3e:39:49:b5:1f:72:b6:20: f3:80:81:f4:d8:20:a8:e3:f4:e9:ec:d1:95:29:d5:b1:d5:98: 56:8c:18:29:9b:f7:a4:fa:af:e4:2a:a5:df:00:19:46:fd:25: 2f:da:d5:59:6f:08:74:ee:43:23:4a:96:e3:d3:89:8b:8e:5b: 01:08:ff:c3:81:dd:36:39:80:8f:84:ab:81:8c:a3:c0:8e:64: 61:02:eb:53:11:bd:c4:59:b5:2f:18:74:fa:a2:f6:3f:3b:d8: ea:31:7c:13:91:94:d5:21:9c:c5:30:5c:4f:1a:80:86:87:6b: f5:3b:a5:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt7qJzAisUGZDdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiMDRiMjAtMDlkMy00Y2Y5LThkZDAtYzQ1Y2U1OTg5 OWQ4MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ODYxYTE3OTEtMjA5ZS00NjYxLWIyMGQtMDQyMzY5M2Q1ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUrcaNTRQJJI6eeI+N/UxXJDoLapxbRtuNjx GOQkVkkDRli29e7rrlb+CdAf4iUdsms5htAh7bgoRj1kAwEsOEF0xjexNfemnCqr 5MHuQj5Jtys/Gqj7JsJX2iG81VmoZgEyReBuSUWKjwPz/fWZoJUWa/536eOBCCMA oad31kQaG4Vp/51sCFghlixAY1mmh+QceWeOcvgdt9KNYBgLOJFpHbUuJCbxcH/d d7ViALA8agepHjliyr7BSqtiJkWCfvz29u2lUKQrcQ9Hg3Y6VEgVfZTGSjDUkEOp Ao9jd1m/cvzX6BPfYmn4Nd4BPX9mVtDMk51A0v6BL1/JMC/FMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLMCLxSp7FM2qPJqLJd5SRQCXM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGIw NGIyMC0wOWQzLTRjZjktOGRkMC1jNDVjZTU5ODk5ZDgvNTM4ZWFhNTctZDI5OC0z ZjI1LTgyMjItZGU5ZTM4MTlmMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRiMDRiMjAtMDlkMy00Y2Y5LThk ZDAtYzQ1Y2U1OTg5OWQ4L2U0YjA0YjIwLTA5ZDMtNGNmOS04ZGQwLWM0NWNlNTk4 OTlkOC5jcmwwHwYDVR0jBBgwFoAU2paC1lH+07XgQc9x1uafrOAumQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGIwNGIyMC0wOWQzLTRjZjktOGRkMC1jNDVj ZTU5ODk5ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjT/zN+h2jexaK6Rio4Bs2x8CUHMdx4pqSPp1gBDHVORMM3QsQBoi4+ weIyT8oVJVyCwcJ7BnLh+6dWDzH++vQhqXAdfzwhqmUjBAyXDRaAB90lUIkBhh04 uOSg+aCgR5PVy9WpdspTmFSAH8vAUpvd+oF84uqDzaBIlAhtcRcW/E4uw779FgU+ OUm1H3K2IPOAgfTYIKjj9Ons0ZUp1bHVmFaMGCmb96T6r+Qqpd8AGUb9JS/a1Vlv CHTuQyNKluPTiYuOWwEI/8OB3TY5gI+Eq4GMo8COZGEC61MRvcRZtS8YdPqi9j87 2OoxfBORlNUhnMUwXE8agIaHa/U7pWA= -----END CERTIFICATE-----Generated at Sat Oct 3 14:28:44 2026 by rpki-client