$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa File: 3a897dcb-8200-3442-a76b-4fec09f925ce.roa (raw, json) Hash identifier: r+fKHxUSptAY9OGa6iwhQ/uxiKbqIwDVrL2yQAzhSKY= Subject key identifier: F7:56:FD:36:1A:1E:75:98:41:41:97:DE:FD:22:9C:DB:FB:19:90:BC Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D19B4BA57FFCF038F51CB8AC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11090 IP address blocks: 199.192.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ba:57:ff:cf:03:8f:51:cb:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=e518bd3b-44ec-40ae-afee-47c53a4f599d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:df:06:53:2b:13:27:36:ca:8b:c3:ea:71: f5:04:aa:89:55:f2:e9:13:7e:79:71:47:97:c1:c8: d3:e9:f9:47:73:b4:24:44:e3:e7:ef:29:72:f8:35: c2:4d:ba:d1:54:8c:dc:83:77:1d:0f:ad:40:24:ce: 5e:3b:91:40:a8:5c:a6:f8:41:43:16:6a:fc:f2:46: 79:b9:38:36:e7:e5:5a:41:16:bb:30:fa:e3:33:c5: d6:4f:0a:22:ce:00:2d:50:49:38:1a:09:37:59:1a: df:fd:98:4f:5d:06:da:d3:78:c5:e0:31:78:bf:be: 54:42:5f:56:0f:f1:81:b0:a9:6a:73:41:c2:69:95: a8:49:1f:de:6a:a8:bb:35:76:25:15:9f:ed:2d:e3: 7c:b8:4f:93:c4:1a:e6:fb:c6:11:96:85:23:08:9e: fc:f4:9c:20:b6:41:9f:7b:78:fd:83:12:ae:ce:a5: 98:a6:d6:23:12:9b:78:89:2a:db:11:2b:7a:a3:25: c7:e6:4f:de:29:93:b5:6e:d1:69:25:a2:6b:fb:2a: 59:b7:21:7c:dd:df:97:bd:64:56:62:68:73:d6:52: 58:d4:4e:bf:b2:be:df:92:9f:c0:31:35:f5:9c:16: c2:7a:76:85:d4:9f:76:06:6b:c2:9d:58:da:cf:6b: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:56:FD:36:1A:1E:75:98:41:41:97:DE:FD:22:9C:DB:FB:19:90:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9e:49:06:19:5b:78:3f:24:ac:16:db:38:d7:b4:18:44:8d: d1:bc:e1:b7:6f:c9:d8:2a:e8:60:df:6b:07:e4:c9:0d:04:90: 1d:55:04:6c:45:6c:57:cd:1d:ae:16:d3:07:27:60:3e:a2:6a: 7d:eb:69:3e:89:d7:b8:11:a1:4a:e9:71:bf:36:8b:36:51:1a: 30:cf:57:34:b6:a9:a2:c0:67:be:25:6d:35:08:b0:0b:8b:77: 93:e1:a7:26:99:76:3b:11:d3:ad:f9:04:d0:57:e7:dd:c2:1e: bf:1b:b3:b0:90:80:fd:2b:60:d1:c1:a7:8e:17:1d:95:f9:03: 6e:d0:57:5d:ec:4a:e0:6d:f9:52:63:95:30:25:5c:47:47:0c: 08:3b:a0:fc:aa:84:f7:19:ed:09:99:1d:a2:8c:b5:41:c8:d2: c6:a4:3c:3b:c4:31:9a:12:3c:10:df:80:e8:30:78:12:8f:70: 42:9f:f7:f0:88:d0:14:2e:8b:c0:bf:fc:b3:68:19:14:18:7f: 53:0a:6a:32:87:63:d0:7a:06:21:bf:c0:79:02:fa:e0:65:e1: 3a:7b:e9:51:a3:8b:8b:a0:2d:53:cb:d8:99:2a:91:27:85:de: a0:c9:a2:04:0a:30:33:79:cf:77:51:89:13:73:c8:48:01:55: 1a:c6:cf:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLpX/88Dj1HLisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZTUxOGJkM2ItNDRlYy00MGFlLWFmZWUtNDdjNTNhNGY1OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMzfBlMrEyc2yovD6nH1BKqJVfLpE355cUeX wcjT6flHc7QkROPn7yly+DXCTbrRVIzcg3cdD61AJM5eO5FAqFym+EFDFmr88kZ5 uTg25+VaQRa7MPrjM8XWTwoizgAtUEk4Ggk3WRrf/ZhPXQba03jF4DF4v75UQl9W D/GBsKlqc0HCaZWoSR/eaqi7NXYlFZ/tLeN8uE+TxBrm+8YRloUjCJ789JwgtkGf e3j9gxKuzqWYptYjEpt4iSrbESt6oyXH5k/eKZO1btFpJaJr+ypZtyF83d+XvWRW Ymhz1lJY1E6/sr7fkp/AMTX1nBbCenaF1J92BmvCnVjaz2tO6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdW/TYaHnWYQUGX3v0inNv7GZC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2E4OTdkY2ItODIwMC0z NDQyLWE3NmItNGZlYzA5ZjkyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeeSQYZW3g/JKwW2zjXtBhEjdG84bdvydgq6GDfawfkyQ0EkB1VBGxF bFfNHa4W0wcnYD6ian3raT6J17gRoUrpcb82izZRGjDPVzS2qaLAZ74lbTUIsAuL d5PhpyaZdjsR0635BNBX593CHr8bs7CQgP0rYNHBp44XHZX5A27QV13sSuBt+VJj lTAlXEdHDAg7oPyqhPcZ7QmZHaKMtUHI0sakPDvEMZoSPBDfgOgweBKPcEKf9/CI 0BQui8C//LNoGRQYf1MKajKHY9B6BiG/wHkC+uBl4Tp76VGji4ugLVPL2JkqkSeF 3qDJogQKMDN5z3dRiRNzyEgBVRrGzx0= -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:45 2026 by rpki-client