$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa File: 3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa (raw, json) Hash identifier: XE4/jnncc10VCWNrhZdlikwaiP7xlcqLr6C+SpeeRMA= Subject key identifier: 28:60:CC:DD:64:CA:5F:DA:11:3C:FE:70:DB:68:CC:B3:20:7A:13:89 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D4E9CE37022804086A700 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 64.4.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4e:9c:e3:70:22:80:40:86:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d6dadd8e-bd3b-4ec9-bcc1-e996d1fb2f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:b9:04:4e:c7:26:b0:50:e7:b9:79:c6:18: 1d:2b:c0:83:8a:9f:96:34:59:0e:97:5d:16:d5:a5: 25:55:ed:43:d6:a9:40:8d:f0:4f:91:7a:3a:ab:f0: 66:24:ac:07:e8:cb:dd:4b:07:c3:c2:f7:0a:e1:f1: df:c5:1c:a1:9e:2b:74:cb:6c:8f:d5:a9:b2:23:42: 52:2f:51:15:7e:4e:22:01:7c:81:48:4f:50:ef:c5: ae:00:6a:50:16:62:55:4f:41:25:e8:b6:29:ef:07: 75:3f:4a:ba:91:51:ff:e7:46:58:f0:31:28:11:83: 92:54:44:d0:9b:8b:7a:c2:f7:b5:2c:9d:4d:ca:4c: 90:02:b9:93:3c:81:3c:e7:3b:43:7c:69:46:e3:e9: ab:d9:cd:8f:f0:f1:55:dd:0c:f5:4d:07:b9:58:6a: ce:2a:71:c9:f0:e9:b6:54:aa:ab:83:06:18:f5:ae: 1b:fe:80:18:f9:71:97:55:ec:6b:05:64:9a:a7:1f: 86:9f:f8:9e:69:1a:7a:28:68:99:b4:15:22:36:62: 63:ee:9f:dd:4a:de:47:9b:b1:35:db:78:4c:8d:09: f1:33:f2:4f:60:03:23:d8:07:3c:84:0d:15:6d:cd: 43:0e:29:c4:6a:3e:8c:db:83:bc:73:5a:09:2e:5c: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:CC:DD:64:CA:5F:DA:11:3C:FE:70:DB:68:CC:B3:20:7A:13:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9a:89:48:fb:b7:fb:a3:8b:04:26:f2:77:cf:37:35:4c:7b: c6:01:c2:d2:12:6d:ee:c9:ea:3f:e2:e7:7c:b5:e8:b6:dc:de: 36:eb:bf:31:24:19:33:be:29:1c:aa:40:d4:df:8c:f3:32:b4: 8c:72:f1:4b:00:b4:c8:9b:e9:b9:3b:5d:12:a0:6a:f0:12:76: cb:dd:60:b1:fe:85:ae:be:9c:ee:82:3f:05:36:8c:aa:3d:83: bc:f0:50:3f:4c:5e:7d:5a:37:65:09:f3:86:f7:34:fb:8e:70: e7:9c:81:0f:b9:5d:08:a0:ef:8e:3c:05:ed:c5:75:0f:a2:9d: 47:f3:0e:56:9a:5c:6d:b8:78:55:2b:b0:fa:50:2e:3c:cb:a4: c0:c4:f9:35:8f:cf:d2:4f:17:93:e2:f6:27:26:63:74:94:54: 76:43:54:72:8b:0b:20:c4:88:f3:a0:61:0a:0b:6c:2b:07:e2: e2:fc:3c:4b:e3:2d:ea:13:1a:fd:22:92:bc:92:57:53:c1:8a: cb:a6:89:6e:95:a6:5f:93:49:a6:bf:2f:8e:fb:c4:93:5b:24: 0d:2b:cd:18:28:c3:05:6e:f9:20:a8:18:27:26:af:ff:9b:62: 11:c9:af:b7:e9:aa:8d:2f:be:35:e1:5b:28:e8:6f:50:7e:ca: dc:23:50:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU6c43AigECGpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDZkYWRkOGUtYmQzYi00ZWM5LWJjYzEtZTk5NmQxZmIyZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxce5BE7HJrBQ57l5xhgdK8CDip+WNFkOl10W 1aUlVe1D1qlAjfBPkXo6q/BmJKwH6MvdSwfDwvcK4fHfxRyhnit0y2yP1amyI0JS L1EVfk4iAXyBSE9Q78WuAGpQFmJVT0El6LYp7wd1P0q6kVH/50ZY8DEoEYOSVETQ m4t6wve1LJ1NykyQArmTPIE85ztDfGlG4+mr2c2P8PFV3Qz1TQe5WGrOKnHJ8Om2 VKqrgwYY9a4b/oAY+XGXVexrBWSapx+Gn/ieaRp6KGiZtBUiNmJj7p/dSt5Hm7E1 23hMjQnxM/JPYAMj2Ac8hA0Vbc1DDinEaj6M24O8c1oJLlwItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChgzN1kyl/aETz+cNtozLMgehOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2NmNDFmY2ItYTk4NS0z NDczLTllNjktZDkyZTNlN2FjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2aiUj7t/ujiwQm8nfPNzVMe8YBwtISbe7J6j/i53y16Lbc3jbrvzEk GTO+KRyqQNTfjPMytIxy8UsAtMib6bk7XRKgavASdsvdYLH+ha6+nO6CPwU2jKo9 g7zwUD9MXn1aN2UJ84b3NPuOcOecgQ+5XQig7448Be3FdQ+inUfzDlaaXG24eFUr sPpQLjzLpMDE+TWPz9JPF5Pi9icmY3SUVHZDVHKLCyDEiPOgYQoLbCsH4uL8PEvj LeoTGv0ikrySV1PBisumiW6Vpl+TSaa/L477xJNbJA0rzRgowwVu+SCoGCcmr/+b YhHJr7fpqo0vvjXhWyjob1B+ytwjUIc= -----END CERTIFICATE-----Generated at Mon Oct 12 00:52:31 2026 by rpki-client