$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa File: 42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa (raw, json) Hash identifier: MgaXY3uSuDt9ILTqEnpF+HfeFOlhm5R8NDrE1IyzQyQ= Subject key identifier: BA:21:14:D8:FF:A6:97:DC:E4:7D:B3:FD:0A:24:A5:34:9C:C6:EC:DB Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F49763A6AA20F8DD33C0836E0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 199.192.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:3a:6a:a2:0f:8d:d3:3c:08:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d4c999b-f411-43a4-8ce0-f8fdfe843fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2e:6a:19:45:57:79:67:e9:a3:ce:e1:99:82: 6e:2e:e6:66:81:59:fa:12:7a:48:d8:9e:ad:7c:0c: e9:82:2d:82:95:b7:f6:7c:e2:f4:a8:09:18:55:8b: d0:64:c1:40:55:f7:e1:a8:c4:a6:cc:36:78:69:54: e2:3c:fe:9b:9e:1d:ba:a4:11:7d:4b:71:6e:86:43: 67:68:3f:4e:dc:53:12:ab:9b:38:b8:7c:ab:39:7f: 45:d5:da:43:45:a2:e5:93:ff:48:4d:48:84:84:94: 91:57:6d:e8:6a:1b:10:b7:8b:d8:39:c5:97:7a:ef: 56:60:eb:0f:16:43:31:8d:66:00:fa:dc:a2:96:73: 87:b3:c7:90:c2:88:b4:ca:18:be:1d:03:f5:bf:6e: 4a:d1:1b:48:bf:5c:65:9e:45:2b:8e:6e:0d:68:5a: 86:27:2a:92:3d:9d:e8:3a:93:a3:18:c6:93:be:69: a4:62:4f:65:0b:9e:f3:02:8e:70:27:09:c7:43:82: 61:41:f4:7d:e4:73:40:70:46:9e:5b:c5:6e:76:3a: b6:8d:f8:5c:83:4a:84:60:a5:c7:3c:52:7b:2c:d2: d7:7e:d1:48:18:16:65:d3:d5:d6:ea:9c:5e:41:e8: 11:ce:bb:c1:ff:27:eb:80:01:f3:60:c1:45:71:0b: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:21:14:D8:FF:A6:97:DC:E4:7D:B3:FD:0A:24:A5:34:9C:C6:EC:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/42263cbd-3f34-3e24-89a4-0def13aa0f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8c:1e:5f:2b:a9:e4:54:55:38:1d:fc:93:60:e5:2c:ed:3a: 4e:84:2d:41:18:e1:a8:8f:2a:09:35:e6:dd:98:37:70:85:89: 94:0d:99:35:f9:3a:ff:22:48:e0:06:98:56:b1:c5:a9:be:b2: b8:f5:07:9d:ea:3b:cc:20:6a:22:68:32:37:bf:82:e5:b5:5b: eb:56:dc:0b:7a:d1:24:f9:e2:ea:50:6e:3c:0e:e4:ff:94:ac: 54:2b:89:ee:49:41:94:20:1e:da:4c:26:f8:9a:1f:62:00:d5: 45:e5:54:be:71:12:08:80:ef:27:a8:68:0f:01:ea:86:e6:2f: 6f:d7:38:41:9b:4e:dc:e0:0e:83:be:cb:b7:00:f5:99:74:9c: f0:e0:f7:f1:43:29:96:62:dd:c5:29:0c:6e:61:88:02:fe:43: f6:ae:1e:67:8f:c9:7b:be:4f:75:83:79:56:fc:a3:d2:bd:e5: f7:fa:ed:20:1f:30:c4:49:d0:cb:a5:a6:35:40:c5:75:8f:57: 80:d0:1e:30:82:8e:72:1c:2d:36:b1:e3:da:74:b8:56:48:5c: 57:3f:95:95:80:1e:bf:d3:7d:f7:af:0f:bf:56:aa:96:b4:a1: a0:18:92:b4:11:77:86:f8:48:17:57:ff:0e:e0:b9:1d:51:75: 6f:71:7f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdjpqog+N0zwINuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Q0Yzk5OWItZjQxMS00M2E0LThjZTAtZjhmZGZlODQzZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+i5qGUVXeWfpo87hmYJuLuZmgVn6EnpI2J6t fAzpgi2Clbf2fOL0qAkYVYvQZMFAVffhqMSmzDZ4aVTiPP6bnh26pBF9S3FuhkNn aD9O3FMSq5s4uHyrOX9F1dpDRaLlk/9ITUiEhJSRV23oahsQt4vYOcWXeu9WYOsP FkMxjWYA+tyilnOHs8eQwoi0yhi+HQP1v25K0RtIv1xlnkUrjm4NaFqGJyqSPZ3o OpOjGMaTvmmkYk9lC57zAo5wJwnHQ4JhQfR95HNAcEaeW8Vudjq2jfhcg0qEYKXH PFJ7LNLXftFIGBZl09XW6pxeQegRzrvB/yfrgAHzYMFFcQsW+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLohFNj/ppfc5H2z/QokpTScxuzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIyNjNjYmQtM2YzNC0z ZTI0LTg5YTQtMGRlZjEzYWEwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8DCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqMHl8rqeRUVTgd/JNg5SztOk6ELUEY4aiPKgk15t2YN3CFiZQNmTX5 Ov8iSOAGmFaxxam+srj1B53qO8wgaiJoMje/guW1W+tW3At60ST54upQbjwO5P+U rFQrie5JQZQgHtpMJviaH2IA1UXlVL5xEgiA7yeoaA8B6obmL2/XOEGbTtzgDoO+ y7cA9Zl0nPDg9/FDKZZi3cUpDG5hiAL+Q/auHmePyXu+T3WDeVb8o9K95ff67SAf MMRJ0MulpjVAxXWPV4DQHjCCjnIcLTax49p0uFZIXFc/lZWAHr/TffevD79Wqpa0 oaAYkrQRd4b4SBdX/w7guR1RdW9xfyQ= -----END CERTIFICATE-----Generated at Sun Oct 11 19:00:05 2026 by rpki-client