$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa File: 3a897dcb-8200-3442-a76b-4fec09f925ce.roa (raw, json) Hash identifier: GZ1k65LMtj8x+yDVFHdhrVIp/lW7wwr0gMKUi6cvWcU= Subject key identifier: 31:E0:AD:0A:2B:1C:D9:1C:39:D6:7D:A0:9F:F7:1A:A0:F8:95:81:24 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F49763AB7A0B679A995982A80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 199.192.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:3a:b7:a0:b6:79:a9:95:98:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bcb0598d-fb58-412b-a9e2-6fe4e6002ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:08:9a:9b:0a:ba:9f:2d:2f:0c:84:37:e7: 2b:10:b8:ba:46:dc:f7:3b:e2:b5:9b:91:7b:cb:9f: 34:c9:fb:0c:97:6a:a6:00:69:60:07:66:94:5a:47: 2d:d4:e2:8c:4a:a1:dd:48:37:36:a7:61:b9:da:4d: 4e:ab:62:8b:50:fd:64:58:a6:13:65:c5:32:c8:9c: 3b:45:2f:b2:95:18:48:11:6f:c0:35:71:44:15:60: ab:cf:f5:46:11:92:89:10:4b:bd:26:e2:65:34:43: a8:d3:b0:9f:f0:bd:1f:86:26:22:b2:6e:d9:55:3d: c6:ff:d8:96:0d:1f:7e:95:10:31:ec:52:99:25:d2: ae:fe:fc:83:4b:26:a6:b0:2b:b9:c2:ae:29:ba:0e: 66:9b:3e:d2:53:58:ba:0a:14:67:94:1a:6c:76:ca: 29:a5:2e:08:9a:70:f9:f3:e0:ee:38:94:53:16:40: 60:55:00:30:f4:06:84:48:4e:d3:2b:4c:b5:df:f0: d6:ac:3d:76:eb:d7:41:2f:08:ca:ae:55:4d:06:35: 69:d5:79:df:5a:90:c5:f5:73:a2:5c:ff:af:9e:98: 20:a5:b9:2d:bb:e2:53:95:31:2d:76:f0:06:12:8c: c5:e7:94:f7:f4:9e:c5:5e:7e:bb:83:31:df:1a:b2: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E0:AD:0A:2B:1C:D9:1C:39:D6:7D:A0:9F:F7:1A:A0:F8:95:81:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0e:37:1c:ca:38:d2:ca:d0:68:1f:92:e2:bb:1b:0c:e5:b9: 4d:e5:09:ad:06:cc:4e:b0:d0:2a:5c:36:4b:4d:ca:16:24:b6: 23:07:3a:e5:85:8b:ec:a6:ae:3f:c2:99:9c:04:9c:23:06:f4: 62:15:e5:ce:a3:05:f7:3c:fb:dd:75:4e:02:a9:b9:32:d4:84: 94:93:b8:7d:e5:a0:5c:16:2a:6d:4f:77:3c:00:05:31:20:f2: ce:16:0e:b0:a2:d8:fe:7d:63:a7:83:0f:7f:14:3a:4f:4a:1d: b5:63:62:17:37:50:ca:fe:0d:60:0b:12:4b:3e:82:e7:18:ba: 6f:6f:c2:53:47:b8:7b:d8:87:4f:d0:c5:0f:9e:b7:75:eb:f8: fb:ff:89:d7:44:bf:1b:33:e0:9c:5a:fb:6a:b4:c3:27:ce:54: 71:bb:69:fe:12:01:27:78:ae:4d:db:d2:67:b0:80:ca:c0:0e: 76:6b:44:1a:61:57:2b:9b:09:3e:34:13:6c:d6:17:5d:62:e6: 71:27:3a:6e:ca:d2:1a:80:5d:72:25:7d:fd:4e:b3:bb:80:dd: c7:d0:21:ce:cf:0d:ff:20:6f:43:c1:df:b8:71:40:32:ad:31: 13:f0:4e:dd:16:f6:55:90:da:a7:d9:f7:22:c3:c8:7f:ba:0f: a2:80:18:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdjq3oLZ5qZWYKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmNiMDU5OGQtZmI1OC00MTJiLWE5ZTItNmZlNGU2MDAyZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrYImpsKup8tLwyEN+crELi6Rtz3O+K1m5F7 y580yfsMl2qmAGlgB2aUWkct1OKMSqHdSDc2p2G52k1Oq2KLUP1kWKYTZcUyyJw7 RS+ylRhIEW/ANXFEFWCrz/VGEZKJEEu9JuJlNEOo07Cf8L0fhiYism7ZVT3G/9iW DR9+lRAx7FKZJdKu/vyDSyamsCu5wq4pug5mmz7SU1i6ChRnlBpsdsoppS4ImnD5 8+DuOJRTFkBgVQAw9AaESE7TK0y13/DWrD1269dBLwjKrlVNBjVp1XnfWpDF9XOi XP+vnpggpbktu+JTlTEtdvAGEozF55T39J7FXn67gzHfGrKYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHgrQorHNkcOdZ9oJ/3GqD4lYEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2E4OTdkY2ItODIwMC0z NDQyLWE3NmItNGZlYzA5ZjkyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQONxzKONLK0GgfkuK7GwzluU3lCa0GzE6w0CpcNktNyhYktiMHOuWF i+ymrj/CmZwEnCMG9GIV5c6jBfc8+911TgKpuTLUhJSTuH3loFwWKm1PdzwABTEg 8s4WDrCi2P59Y6eDD38UOk9KHbVjYhc3UMr+DWALEks+gucYum9vwlNHuHvYh0/Q xQ+et3Xr+Pv/iddEvxsz4Jxa+2q0wyfOVHG7af4SASd4rk3b0mewgMrADnZrRBph VyubCT40E2zWF11i5nEnOm7K0hqAXXIlff1Os7uA3cfQIc7PDf8gb0PB37hxQDKt MRPwTt0W9lWQ2qfZ9yLDyH+6D6KAGJ8= -----END CERTIFICATE-----Generated at Mon Oct 12 02:29:56 2026 by rpki-client