$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa File: 42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa (raw, json) Hash identifier: Pp4Y7Ng2p9iQomX6vLxVtli7bV/qYhtmUDcu2pGrPg8= Subject key identifier: AA:EA:26:2D:2A:EE:33:C8:3D:E4:A1:36:37:7C:D7:34:08:40:7B:B8 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D19B4BA32112804DE063F5380 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11090 IP address blocks: 199.192.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ba:32:11:28:04:de:06:3f:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=672d0b18-547d-455b-9875-bb49409c0892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:bc:af:57:a7:49:9c:11:44:8a:87:3f:fe: 10:10:eb:f0:d4:e2:ba:d6:98:d7:e5:69:45:f2:78: 4c:d3:1c:dc:87:ae:72:23:2c:db:43:1b:68:af:9f: e8:59:e5:99:8c:0f:51:e6:46:9b:67:8d:68:4d:72: d3:49:45:c5:53:38:46:1d:5c:74:26:6f:56:c9:65: 52:f2:a6:07:7f:c4:b9:21:6b:18:ed:37:32:ac:16: 6b:f6:95:8a:c9:5c:8f:d1:b7:e7:8e:44:96:18:c4: 57:f8:c3:a1:1d:f8:31:91:a1:04:72:78:92:1b:cd: 82:04:cb:20:53:d8:c6:e9:bf:16:d2:89:d1:fa:01: 9f:a8:e1:94:40:65:1d:70:b8:83:7b:67:fe:e4:93: cb:aa:8e:a5:cb:50:cf:8d:29:f3:5b:eb:fa:d0:8d: b3:79:3c:66:76:17:51:3a:7a:eb:b7:e7:50:c4:e5: 58:3c:aa:e0:35:7b:58:91:e9:b9:5a:65:ae:53:d5: 8c:bc:77:3e:63:9e:98:54:48:25:ac:0d:c0:d1:a5: b1:98:b1:98:f5:10:a7:d2:1b:33:4a:93:31:b4:6f: 54:fa:d6:e8:3f:cf:e8:d0:fc:92:0b:79:98:f8:54: b9:13:79:e5:1a:6d:bc:da:24:8c:c6:ed:74:99:02: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:26:2D:2A:EE:33:C8:3D:E4:A1:36:37:7C:D7:34:08:40:7B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:aa:f1:26:b0:fb:79:80:7c:e6:7f:d6:fb:0e:99:cd:0f:fd: 5b:6e:80:b8:6e:e6:2c:04:ee:05:97:46:90:c1:19:49:7b:4a: a7:06:29:9f:ab:be:6e:71:2a:58:88:1f:8a:07:72:41:d5:5d: 33:34:c1:1e:5e:c4:8d:af:79:51:ac:e9:3a:77:81:db:28:63: 3e:89:bd:45:8d:ee:6c:a8:59:7d:96:e2:b9:6b:35:f1:7c:2c: 25:62:3f:42:5c:94:c5:a8:2d:ef:df:18:8c:3a:97:54:d3:ce: 9e:c9:2c:94:28:03:b7:65:ea:46:a0:66:db:e2:0f:7b:dc:43: d9:2f:e0:60:a5:5a:aa:da:9e:b6:b5:58:a0:ee:12:ce:fd:fd: 13:c5:fa:d8:54:0e:5c:9f:fa:79:34:99:e2:4c:54:14:aa:e0: c6:98:da:af:f8:33:85:d4:05:7b:4e:00:6a:45:79:33:90:21: e6:b9:ea:c5:53:3e:a8:93:fd:42:64:93:76:b6:c7:36:c9:1c: fe:c3:31:2f:88:bc:9e:22:69:01:c1:99:d7:4c:ee:8d:e1:ed: 29:49:b6:bc:ff:fe:33:03:04:4c:7a:26:73:fe:95:c4:d7:68: af:a7:51:39:4b:78:e4:91:27:fb:d3:4f:65:55:c0:b8:97:a9: 73:48:4e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLoyESgE3gY/U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NjcyZDBiMTgtNTQ3ZC00NTViLTk4NzUtYmI0OTQwOWMwODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw28r1enSZwRRIqHP/4QEOvw1OK61pjX5WlF 8nhM0xzch65yIyzbQxtor5/oWeWZjA9R5kabZ41oTXLTSUXFUzhGHVx0Jm9WyWVS 8qYHf8S5IWsY7TcyrBZr9pWKyVyP0bfnjkSWGMRX+MOhHfgxkaEEcniSG82CBMsg U9jG6b8W0onR+gGfqOGUQGUdcLiDe2f+5JPLqo6ly1DPjSnzW+v60I2zeTxmdhdR Onrrt+dQxOVYPKrgNXtYkem5WmWuU9WMvHc+Y56YVEglrA3A0aWxmLGY9RCn0hsz SpMxtG9U+tboP8/o0PySC3mY+FS5E3nlGm282iSMxu10mQIxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrqJi0q7jPIPeShNjd81zQIQHu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIyNjNjYmQtM2YzNC0z ZTI0LTg5YTQtMGRlZjEzYWEwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8DCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGq8Saw+3mAfOZ/1vsOmc0P/VtugLhu5iwE7gWXRpDBGUl7SqcGKZ+r vm5xKliIH4oHckHVXTM0wR5exI2veVGs6Tp3gdsoYz6JvUWN7myoWX2W4rlrNfF8 LCViP0JclMWoLe/fGIw6l1TTzp7JLJQoA7dl6kagZtviD3vcQ9kv4GClWqranra1 WKDuEs79/RPF+thUDlyf+nk0meJMVBSq4MaY2q/4M4XUBXtOAGpFeTOQIea56sVT PqiT/UJkk3a2xzbJHP7DMS+IvJ4iaQHBmddM7o3h7SlJtrz//jMDBEx6JnP+lcTX aK+nUTlLeOSRJ/vTT2VVwLiXqXNITsI= -----END CERTIFICATE-----Generated at Fri Mar 13 10:53:11 2026 by rpki-client