$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa File: 4203a888-ffda-34ce-bf72-ac4a102906e4.roa (raw, json) Hash identifier: 9h0/bKoKVrqGmjm9PEA2Za5P2v8tncesaYXUrUdWiNA= Subject key identifier: 6B:5C:E2:1B:E7:A4:EA:7F:62:76:C7:CF:DC:C4:B3:3A:93:88:78:8E Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D4E5436F95C55075A6700 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 64.4.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4e:54:36:f9:5c:55:07:5a:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=acaffd16-88d2-42e6-8b95-7da1ddbb3520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c2:3b:78:ca:d9:e0:71:8c:dc:bf:49:4d:c2: 0a:f7:04:9d:40:e0:b8:9a:99:dd:66:a4:d0:cc:17: 6a:85:22:25:d3:ef:78:f8:6a:9e:d9:dc:1b:24:93: 46:32:23:4d:5c:4a:fd:34:a8:ba:13:57:c8:ef:30: a9:25:74:af:b8:a3:27:3f:18:72:66:95:cb:d2:3a: b7:4a:b1:26:a6:82:e4:48:b2:50:f2:f1:c1:1c:59: 2d:02:a7:e9:5d:e1:fb:f7:c3:ab:dc:96:d0:e2:17: 9b:c1:2f:72:57:50:86:f7:d6:10:00:b6:19:d4:3c: b9:f0:59:8b:fd:64:4f:57:c0:3a:fb:41:56:ed:40: 8b:70:67:8d:fe:3b:8d:23:14:69:a9:ea:5e:60:cd: 1a:0c:1d:7b:01:da:1b:5a:73:02:66:4d:b3:ba:e0: 1d:4e:3f:27:18:fd:1a:61:91:0f:56:6c:07:99:bf: 1c:36:53:8c:f8:db:a9:27:3e:e3:71:33:25:b0:1d: 63:f8:cb:ed:10:87:6d:7b:0c:af:6a:db:f6:32:74: a4:dd:cb:1e:bd:79:6a:a4:d1:24:53:8c:b2:c5:9a: 95:42:e1:71:e4:6a:dc:16:95:01:5c:e6:8c:f2:78: 65:da:73:da:b0:ff:7e:2c:b7:87:b7:ef:6a:d7:49: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:E2:1B:E7:A4:EA:7F:62:76:C7:CF:DC:C4:B3:3A:93:88:78:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:87:84:54:3d:ba:6d:9e:e5:6a:cc:62:1f:92:d8:8d:d4:84: 98:49:ee:3d:3a:97:99:4c:25:9e:6c:b7:ba:41:ba:a2:d0:a2: 02:a9:bc:70:3c:7c:d1:50:86:a6:1f:84:95:e3:c2:f5:24:d3: 26:f6:d8:88:62:1d:e5:6f:c6:3c:25:1f:87:5e:81:fd:c2:d1: 29:da:83:4f:ce:bf:74:e1:c4:01:d8:b2:cc:f5:e8:c5:78:6c: ef:7b:43:08:35:3f:c3:51:22:e8:f5:9e:28:bf:4d:1d:f8:01: 3d:fd:61:2e:3e:f8:cf:6f:9e:75:a7:8a:e1:a1:85:45:a4:24: b1:dd:89:ff:da:31:41:37:7e:0c:de:f4:25:05:d5:d6:b5:47: 66:cb:a0:cf:8f:1c:ae:fd:fa:f4:7a:a8:80:0d:57:51:1b:c2: 42:55:29:51:da:c7:ff:25:78:98:2c:0e:57:e5:1b:8d:47:8d: f6:f8:4a:bf:82:9b:c6:d1:be:57:1d:78:89:11:c3:67:de:16: 7b:08:f9:8e:18:1b:26:0e:88:43:e5:c9:5e:a8:27:d1:4e:a2: 9c:16:76:50:05:51:87:2c:72:10:da:f3:b0:c9:fd:f7:0d:d7: 16:fd:37:7c:60:53:fb:c2:23:c9:6a:69:2c:82:1e:55:44:92: aa:81:09:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU5UNvlcVQdaZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YWNhZmZkMTYtODhkMi00MmU2LThiOTUtN2RhMWRkYmIzNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMI7eMrZ4HGM3L9JTcIK9wSdQOC4mpndZqTQ zBdqhSIl0+94+Gqe2dwbJJNGMiNNXEr9NKi6E1fI7zCpJXSvuKMnPxhyZpXL0jq3 SrEmpoLkSLJQ8vHBHFktAqfpXeH798Or3JbQ4hebwS9yV1CG99YQALYZ1Dy58FmL /WRPV8A6+0FW7UCLcGeN/juNIxRpqepeYM0aDB17AdobWnMCZk2zuuAdTj8nGP0a YZEPVmwHmb8cNlOM+NupJz7jcTMlsB1j+MvtEIdtewyvatv2MnSk3csevXlqpNEk U4yyxZqVQuFx5GrcFpUBXOaM8nhl2nPasP9+LLeHt+9q10lKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtc4hvnpOp/YnbHz9zEszqTiHiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIwM2E4ODgtZmZkYS0z NGNlLWJmNzItYWM0YTEwMjkwNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByHhFQ9um2e5WrMYh+S2I3UhJhJ7j06l5lMJZ5st7pBuqLQogKpvHA8 fNFQhqYfhJXjwvUk0yb22IhiHeVvxjwlH4degf3C0Snag0/Ov3ThxAHYssz16MV4 bO97Qwg1P8NRIuj1nii/TR34AT39YS4++M9vnnWniuGhhUWkJLHdif/aMUE3fgze 9CUF1da1R2bLoM+PHK79+vR6qIANV1EbwkJVKVHax/8leJgsDlflG41Hjfb4Sr+C m8bRvlcdeIkRw2feFnsI+Y4YGyYOiEPlyV6oJ9FOopwWdlAFUYcschDa87DJ/fcN 1xb9N3xgU/vCI8lqaSyCHlVEkqqBCT8= -----END CERTIFICATE-----Generated at Sun Oct 11 19:00:20 2026 by rpki-client