$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa File: 39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa (raw, json) Hash identifier: 7VhrZ7zDTzkbEG2wgn2CA3jFYle3XxR0Uc5FdT+x2I4= Subject key identifier: 96:6D:69:64:62:2A:13:71:76:42:D8:35:F1:19:9B:14:D8:CA:C7:F1 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D19B4BA2259BE7EDD51619A80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11090 IP address blocks: 198.160.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ba:22:59:be:7e:dd:51:61:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=8b16671d-6fb9-49be-b889-721f6f48b20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:cc:ed:eb:82:3b:8c:b5:ae:d0:03:f9:61: fa:74:3a:59:5b:a0:1d:e8:31:34:de:ca:c5:c0:3d: fe:db:b7:e9:a6:da:a8:d2:e2:90:45:5c:00:16:b0: 64:d9:c1:47:07:81:b8:87:e0:3f:ca:25:ff:bc:5a: b5:2e:b7:1c:c9:f3:05:bd:17:87:4e:56:c7:68:60: ca:c7:91:d1:35:d1:0e:81:c8:8a:b5:f6:69:76:09: 7a:26:71:bb:17:81:13:fc:a0:ba:cc:1a:51:40:55: 39:ee:9d:ba:73:64:33:0d:90:d6:f9:d2:07:c1:1c: 51:78:a8:24:81:b7:c6:f7:e5:f8:98:b4:e4:df:fb: d2:7f:49:91:3e:8b:6f:86:b2:df:89:ad:9f:20:c4: 8f:92:05:51:3d:83:ca:4b:71:4b:5e:9f:ba:35:03: 6c:3c:f9:73:14:0e:60:02:59:04:c8:f2:ed:3e:0e: 9d:21:6e:ec:62:f8:5c:77:d6:6b:7c:0c:b8:22:e3: 3d:cb:fa:69:64:6f:5d:c4:04:46:4c:3a:24:0f:b0: 08:50:5e:21:78:5f:d3:70:8b:14:62:f5:10:80:f8: af:85:77:55:70:0e:44:99:29:e4:37:76:d1:bf:b0: 69:26:6b:74:28:b5:91:a3:4d:a3:5e:61:46:3d:26: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:69:64:62:2A:13:71:76:42:D8:35:F1:19:9B:14:D8:CA:C7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.160.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e5:9c:ba:fc:95:12:0c:25:dc:28:8f:18:a2:3f:6a:df:95: a1:cb:4d:f3:f3:05:a5:ee:8e:2b:06:05:49:c4:e9:f2:5f:65: 96:bd:6c:36:47:08:cf:dc:70:f2:07:0a:64:e2:ae:1a:1a:9a: 46:f0:1d:08:4e:09:52:5b:ff:18:3b:6e:9c:d1:4e:30:c2:c7: 4d:0e:ab:b7:57:b5:5f:70:f1:85:78:ff:1f:79:23:6e:3c:fb: f1:2a:af:c6:bc:65:a7:4e:ab:89:fc:93:ca:f6:89:9b:b3:35: ee:e7:3b:60:2a:f0:82:34:45:5d:a0:d6:22:6a:5e:3a:4b:d4: db:d4:c4:98:8b:94:e4:ca:65:bd:8b:c2:84:53:b9:c0:80:bd: 6b:fc:64:c8:1e:64:03:90:f2:08:21:77:ad:15:25:6c:35:3d: 37:7a:e1:be:18:ef:fa:38:de:91:9c:10:62:e8:40:c7:6f:9b: c6:16:0f:fc:4b:d4:87:1d:5d:6f:53:31:0a:f1:b3:1c:00:d9: 9e:80:52:d5:72:72:51:de:4b:06:35:c3:0a:7a:fe:51:63:b0: 12:a2:be:83:97:a7:ba:a9:a9:96:56:be:a0:2d:27:47:d6:10: 45:68:26:cb:19:2f:eb:bd:79:e0:73:89:90:b1:d5:b0:a7:38: fc:38:ff:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLoiWb5+3VFhmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk OGIxNjY3MWQtNmZiOS00OWJlLWI4ODktNzIxZjZmNDhiMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTM7euCO4y1rtAD+WH6dDpZW6Ad6DE03srF wD3+27fpptqo0uKQRVwAFrBk2cFHB4G4h+A/yiX/vFq1LrccyfMFvReHTlbHaGDK x5HRNdEOgciKtfZpdgl6JnG7F4ET/KC6zBpRQFU57p26c2QzDZDW+dIHwRxReKgk gbfG9+X4mLTk3/vSf0mRPotvhrLfia2fIMSPkgVRPYPKS3FLXp+6NQNsPPlzFA5g AlkEyPLtPg6dIW7sYvhcd9ZrfAy4IuM9y/ppZG9dxARGTDokD7AIUF4heF/TcIsU YvUQgPivhXdVcA5EmSnkN3bRv7BpJmt0KLWRo02jXmFGPSb6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZtaWRiKhNxdkLYNfEZmxTYysfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzliMjM0NmQtMTI0Zi0z NzNhLWE5YTMtNDFhM2FjMWUzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHlnLr8lRIMJdwojxiiP2rflaHLTfPzBaXujisGBUnE6fJfZZa9bDZH CM/ccPIHCmTirhoamkbwHQhOCVJb/xg7bpzRTjDCx00Oq7dXtV9w8YV4/x95I248 +/Eqr8a8ZadOq4n8k8r2iZuzNe7nO2Aq8II0RV2g1iJqXjpL1NvUxJiLlOTKZb2L woRTucCAvWv8ZMgeZAOQ8gghd60VJWw1PTd64b4Y7/o43pGcEGLoQMdvm8YWD/xL 1IcdXW9TMQrxsxwA2Z6AUtVyclHeSwY1wwp6/lFjsBKivoOXp7qpqZZWvqAtJ0fW EEVoJssZL+u9eeBziZCx1bCnOPw4/9o= -----END CERTIFICATE-----Generated at Fri Mar 13 10:56:41 2026 by rpki-client