$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa File: 3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa (raw, json) Hash identifier: LN2V6HQrKaCdS3dC1QahUTXJdsaLv0VaE6qHfqMV3zo= Subject key identifier: 87:82:A1:11:73:FE:8D:6E:BC:FF:7D:C1:21:6E:C0:B4:5F:A6:4A:0E Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F497641C2A53E4BB5B3C2EAC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 216.152.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:41:c2:a5:3e:4b:b5:b3:c2:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c3a859f5-9d31-4946-8fb8-9a8dedd7bca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:b1:d1:ad:94:74:f2:0c:c4:b1:a6:d5:9a: e5:44:52:cb:64:60:9c:75:9e:0b:fa:52:ef:a9:e8: 79:d7:64:00:53:74:cc:15:59:2d:7f:54:9b:b5:ef: cf:f6:8e:8c:ec:59:c6:39:b5:d4:85:cc:0e:e1:f2: 0a:73:83:7c:94:7e:38:1d:e0:b4:e6:f9:21:36:f8: fb:ad:e3:3c:4a:4f:7b:73:c0:17:12:7c:25:53:da: 68:6c:ee:45:e3:83:2b:be:cd:d0:86:5c:d1:b0:2d: 26:3a:ba:42:00:d6:87:04:7a:c6:45:1f:ed:b0:9e: 9f:e4:02:71:a4:29:82:4d:6d:b2:f3:c4:93:86:70: e1:9e:91:ec:a4:4c:2f:e7:b1:60:e0:de:bf:24:58: 60:98:47:f1:dc:a0:13:3a:be:c2:69:27:53:b7:a4: 02:70:ec:e3:26:ef:dc:96:a7:4b:9e:b2:80:6f:66: 61:85:df:64:18:45:57:49:49:33:32:c0:0c:0b:1a: f2:96:4a:12:e3:ce:9f:e3:c5:95:0a:51:10:d4:8b: 91:74:64:12:4b:78:18:3d:23:92:af:2b:32:f2:3d: 4e:ff:58:1c:41:fc:8e:4b:53:9f:1d:5a:72:5e:98: 44:7e:cb:b4:a5:5b:2f:06:12:fe:d6:47:8a:ce:fa: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:82:A1:11:73:FE:8D:6E:BC:FF:7D:C1:21:6E:C0:B4:5F:A6:4A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a1:11:33:83:fe:b4:8b:f0:ee:61:30:20:cd:b4:a5:fd:2f: c0:a4:61:b3:73:2e:73:a8:b7:9c:19:72:bb:69:67:a9:d4:49: 03:0e:7d:50:68:d1:73:55:4c:d2:94:12:df:2e:24:ad:64:62: bb:d7:0f:14:7a:91:7a:fe:10:5a:80:4b:03:4b:93:c7:9c:93: 4d:a7:c9:40:d4:f1:9e:c8:74:d4:7f:a0:13:ea:71:ce:93:76: 24:66:fb:44:4b:26:28:a8:ec:a6:96:5c:1b:ff:8a:f5:e8:da: 51:c8:6c:a8:a1:15:a7:8c:51:44:16:c3:06:d8:7c:32:12:fc: 75:79:8c:91:1c:b2:4d:5f:2c:84:3e:f7:19:84:0e:cc:8d:31: 84:0c:17:c2:33:d1:42:aa:c4:5a:8d:0a:46:8a:0c:82:7f:7c: 4a:7a:77:90:9a:96:d9:5c:db:c5:a6:f8:0a:83:df:28:e2:11: 9d:39:62:90:b9:b6:53:db:cd:11:41:f5:4d:f4:9e:0c:1c:14: 82:c9:df:f8:3b:0f:a6:d4:38:d5:28:4d:85:00:6b:e3:73:7c: e1:c7:59:32:41:6a:11:e3:42:d1:39:6f:09:a2:d0:44:8a:ee: a7:83:88:d7:7b:db:4e:62:97:c0:4d:28:55:9b:02:19:a1:be: 7d:94:8f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkHCpT5LtbPC6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzNhODU5ZjUtOWQzMS00OTQ2LThmYjgtOWE4ZGVkZDdiY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsCx0a2UdPIMxLGm1ZrlRFLLZGCcdZ4L+lLv qeh512QAU3TMFVktf1Sbte/P9o6M7FnGObXUhcwO4fIKc4N8lH44HeC05vkhNvj7 reM8Sk97c8AXEnwlU9pobO5F44Mrvs3QhlzRsC0mOrpCANaHBHrGRR/tsJ6f5AJx pCmCTW2y88SThnDhnpHspEwv57Fg4N6/JFhgmEfx3KATOr7CaSdTt6QCcOzjJu/c lqdLnrKAb2Zhhd9kGEVXSUkzMsAMCxrylkoS486f48WVClEQ1IuRdGQSS3gYPSOS rysy8j1O/1gcQfyOS1OfHVpyXphEfsu0pVsvBhL+1keKzvrZ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeCoRFz/o1uvP99wSFuwLRfpkoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2IyNjhkMTQtN2VjMy0z ZjNjLWEwZDYtYWMyYTY2OWM2MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOhETOD/rSL8O5hMCDNtKX9L8CkYbNzLnOot5wZcrtpZ6nUSQMOfVBo 0XNVTNKUEt8uJK1kYrvXDxR6kXr+EFqASwNLk8eck02nyUDU8Z7IdNR/oBPqcc6T diRm+0RLJiio7KaWXBv/ivXo2lHIbKihFaeMUUQWwwbYfDIS/HV5jJEcsk1fLIQ+ 9xmEDsyNMYQMF8Iz0UKqxFqNCkaKDIJ/fEp6d5Caltlc28Wm+AqD3yjiEZ05YpC5 tlPbzRFB9U30ngwcFILJ3/g7D6bUONUoTYUAa+NzfOHHWTJBahHjQtE5bwmi0ESK 7qeDiNd7205il8BNKFWbAhmhvn2Uj08= -----END CERTIFICATE-----Generated at Mon Oct 12 10:34:40 2026 by rpki-client