$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa File: 211726d9-186c-32fa-9269-934166f8a1be.roa (raw, json) Hash identifier: p7c8RWi5WQ3CF/33RrNJwq2rXLYjY66unHd7ygAWUyQ= Subject key identifier: 87:67:F0:3B:80:0A:40:27:87:93:00:1F:17:23:49:DE:89:C4:61:49 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D540113785348E5F9A580 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 216.137.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:54:01:13:78:53:48:e5:f9:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=2934a1e0-8c21-4966-85a2-3d7fef1584df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:99:7a:87:b3:1e:74:d2:88:1c:55:88:54: a9:06:85:d2:e5:38:f9:7b:86:7c:c7:96:18:79:5d: ad:7e:0b:1f:0b:eb:79:1e:a0:a6:60:16:60:d6:c1: 81:72:80:2e:6d:05:4d:f4:2e:84:6c:8f:bf:47:bf: bf:62:1a:8f:11:da:56:a5:86:2f:66:9c:a5:87:59: 0b:30:57:f9:dd:da:16:0d:d3:8e:d5:3a:02:72:19: 39:90:fc:42:f0:4b:ea:f4:8c:18:06:fb:6e:3b:57: e1:4e:13:81:1c:4b:cc:8f:d5:58:bd:65:46:1e:3d: 47:41:a4:21:75:ef:9d:5b:94:20:4f:83:5f:5b:3a: e7:43:9e:35:7f:38:a8:b7:70:a7:ab:d4:88:96:5b: 1e:a0:00:e9:27:0a:ff:9e:6a:c5:ac:4a:1b:24:00: 6b:84:81:a0:de:26:e3:be:4d:82:eb:53:d8:02:73: 1e:08:c9:f5:69:8c:53:4c:02:3e:02:d1:63:9a:3f: 1e:59:79:96:5c:ad:3b:21:da:47:83:7d:7e:52:74: 04:8c:89:30:4c:14:a0:7d:1a:41:04:3b:a1:5e:cf: 4d:79:d3:1b:ba:48:19:83:b2:89:69:fe:a4:59:cd: bc:45:87:5e:2c:44:04:e1:4c:5d:c9:21:d2:1b:e7: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:67:F0:3B:80:0A:40:27:87:93:00:1F:17:23:49:DE:89:C4:61:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/211726d9-186c-32fa-9269-934166f8a1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:df:74:4d:3a:6c:18:97:77:35:93:b4:90:6d:a1:51:31:99: d1:20:45:b6:56:10:a9:78:a8:69:e7:96:4c:5d:a2:ca:5b:d8: d8:43:9e:d4:19:62:8c:a8:d3:d6:02:e3:63:0e:77:d5:cb:40: a8:ec:08:81:e9:31:99:1d:09:93:d9:0b:95:19:56:00:12:b3: af:62:b7:00:8a:3d:a6:04:d5:0f:0f:10:8e:c3:f3:e2:af:8a: 9c:10:73:c3:00:80:c8:e3:43:5d:63:ac:af:47:c8:fd:ad:1b: 7c:33:61:b4:67:32:4b:3e:c4:ef:d6:2b:d5:f4:ae:b7:e5:73: 7d:12:ed:de:95:a7:a6:07:86:64:61:ad:24:01:7c:ce:50:b1: bc:ff:d9:bd:fa:67:85:2d:00:0c:e5:cd:83:a4:66:e8:75:12: 84:68:0a:77:2b:4f:f7:b0:0e:67:dc:7c:7b:3c:6a:7a:ef:75: c2:a0:03:b1:6f:e2:ae:1f:84:05:57:39:57:7a:b1:6a:45:d4: 4e:c1:9c:10:04:e9:ac:86:f0:91:8e:2a:d8:bd:fc:f6:99:20: d5:a5:15:3f:79:79:e1:53:3d:7e:2d:b6:33:33:50:65:53:81: f6:1f:ce:48:0f:22:12:35:65:df:09:57:c3:0e:1f:03:a3:84: 9b:73:b2:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVQBE3hTSOX5pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MjkzNGExZTAtOGMyMS00OTY2LTg1YTItM2Q3ZmVmMTU4NGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp2ZeoezHnTSiBxViFSpBoXS5Tj5e4Z8x5YY eV2tfgsfC+t5HqCmYBZg1sGBcoAubQVN9C6EbI+/R7+/YhqPEdpWpYYvZpylh1kL MFf53doWDdOO1ToCchk5kPxC8Evq9IwYBvtuO1fhThOBHEvMj9VYvWVGHj1HQaQh de+dW5QgT4NfWzrnQ541fziot3Cnq9SIllseoADpJwr/nmrFrEobJABrhIGg3ibj vk2C61PYAnMeCMn1aYxTTAI+AtFjmj8eWXmWXK07IdpHg31+UnQEjIkwTBSgfRpB BDuhXs9NedMbukgZg7KJaf6kWc28RYdeLEQE4UxdySHSG+dXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdn8DuACkAnh5MAHxcjSd6JxGFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjExNzI2ZDktMTg2Yy0z MmZhLTkyNjktOTM0MTY2ZjhhMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrfdE06bBiXdzWTtJBtoVExmdEgRbZWEKl4qGnnlkxdospb2NhDntQZ Yoyo09YC42MOd9XLQKjsCIHpMZkdCZPZC5UZVgASs69itwCKPaYE1Q8PEI7D8+Kv ipwQc8MAgMjjQ11jrK9HyP2tG3wzYbRnMks+xO/WK9X0rrflc30S7d6Vp6YHhmRh rSQBfM5Qsbz/2b36Z4UtAAzlzYOkZuh1EoRoCncrT/ewDmfcfHs8anrvdcKgA7Fv 4q4fhAVXOVd6sWpF1E7BnBAE6ayG8JGOKti9/PaZINWlFT95eeFTPX4ttjMzUGVT gfYfzkgPIhI1Zd8JV8MOHwOjhJtzsh4= -----END CERTIFICATE-----Generated at Sun Oct 11 17:10:44 2026 by rpki-client