$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa File: 9a980a6a-941e-34a1-9ffa-edd653116330.roa (raw, json) Hash identifier: aInQowbkhybXy7aqOm6aguYSd58caHqlKX38cZdP4GM= Subject key identifier: EB:98:3B:45:9F:18:AA:5B:8E:8C:1A:BC:74:8E:91:B9:2E:53:37:6F Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D540CFC0853055022B280 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 216.137.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:54:0c:fc:08:53:05:50:22:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=69c2fc62-6cd8-445b-87b9-7bee879ad410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:1f:37:00:bd:b0:7a:a5:72:94:e5:4b:1d: fd:79:48:f7:20:cd:c1:89:41:55:58:72:86:3f:b1: 90:80:f5:9c:93:c2:ab:d1:b7:e6:24:f5:7b:a1:af: f3:60:7c:e4:02:23:22:bb:35:86:1b:1e:ae:89:75: 02:5a:88:0b:ee:3e:b8:4b:0c:44:39:ec:74:99:ca: 18:c3:d8:88:e8:ee:6f:9b:9a:77:43:58:58:d5:de: 39:f9:ce:6f:5c:d9:e9:dc:6b:1f:a7:09:16:74:f4: de:2b:30:ab:70:d2:a1:37:96:99:ef:0d:d6:e7:1c: 94:a2:70:8d:4c:a1:9a:0c:d7:c0:29:04:d3:9c:8a: bc:f8:3b:b0:d3:05:32:47:39:ca:22:1b:6d:8b:38: 28:5b:ad:9e:0d:a8:ec:92:c2:2b:08:13:0c:23:cc: c0:ca:a8:42:4e:cf:4c:9e:21:c9:11:9d:c2:71:62: 03:26:cc:ad:38:07:8b:f0:78:1a:85:7b:d0:ee:2e: 2e:51:20:71:c2:d2:d9:ca:54:b0:24:86:53:0e:00: 1d:0e:eb:6e:aa:bc:d5:61:f1:f3:b6:74:e4:8c:f4: ee:ed:d2:0c:01:04:d0:30:83:d7:e4:e8:36:26:6f: 94:f0:2b:2e:91:c1:5a:7b:1a:de:11:0a:53:03:60: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:98:3B:45:9F:18:AA:5B:8E:8C:1A:BC:74:8E:91:B9:2E:53:37:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7e:6b:5f:1a:1c:0b:b7:90:76:42:2a:70:39:8b:fd:9c:25: 34:55:85:17:34:d7:3d:41:61:96:ac:07:5e:7d:76:5b:f4:41: a2:47:bd:27:31:c8:9d:aa:ff:1f:d4:99:57:b8:91:98:45:0d: cb:36:c4:d5:ca:8c:de:d2:20:6f:54:6f:a8:35:02:dc:27:60: b9:45:c5:dd:7e:06:01:bc:bd:b0:af:9f:da:07:8d:4d:02:77: 7e:14:fe:5f:22:e2:c5:b0:05:bc:fb:85:bf:01:e0:43:e5:d5: ba:1e:69:24:ad:58:e3:ee:e9:9c:9e:de:c5:cb:7a:88:96:69: 5f:d4:b6:82:43:ec:a2:49:e3:ce:c2:36:cd:ee:36:ca:0a:da: 03:64:49:13:70:52:43:41:9f:dd:b3:cc:3b:5f:a6:85:ab:2e: 4e:e3:76:9d:d4:c3:2e:7f:56:bb:a2:fb:c5:aa:31:bb:0d:2b: 1d:43:fe:ae:d1:ee:69:44:76:72:8c:6f:a8:08:e9:b5:f9:f3: 03:b3:93:9d:8d:71:8c:6e:bd:34:38:f6:ba:ff:81:ab:33:c6: fa:a6:5f:7e:8d:e3:79:10:57:3a:74:b8:a3:fb:29:ea:22:cb: d8:1e:f9:c5:7f:61:90:ea:ff:df:06:80:b4:7d:dd:16:12:1e: 7a:59:81:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVQM/AhTBVAisoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjljMmZjNjItNmNkOC00NDViLTg3YjktN2JlZTg3OWFkNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrgfNwC9sHqlcpTlSx39eUj3IM3BiUFVWHKG P7GQgPWck8Kr0bfmJPV7oa/zYHzkAiMiuzWGGx6uiXUCWogL7j64SwxEOex0mcoY w9iI6O5vm5p3Q1hY1d45+c5vXNnp3GsfpwkWdPTeKzCrcNKhN5aZ7w3W5xyUonCN TKGaDNfAKQTTnIq8+Duw0wUyRznKIhttizgoW62eDajsksIrCBMMI8zAyqhCTs9M niHJEZ3CcWIDJsytOAeL8HgahXvQ7i4uUSBxwtLZylSwJIZTDgAdDutuqrzVYfHz tnTkjPTu7dIMAQTQMIPX5Og2Jm+U8CsukcFaexreEQpTA2CmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuYO0WfGKpbjowavHSOkbkuUzdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvOWE5ODBhNmEtOTQxZS0z NGExLTlmZmEtZWRkNjUzMTE2MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx+a18aHAu3kHZCKnA5i/2cJTRVhRc01z1BYZasB159dlv0QaJHvScx yJ2q/x/UmVe4kZhFDcs2xNXKjN7SIG9Ub6g1AtwnYLlFxd1+BgG8vbCvn9oHjU0C d34U/l8i4sWwBbz7hb8B4EPl1boeaSStWOPu6Zye3sXLeoiWaV/UtoJD7KJJ487C Ns3uNsoK2gNkSRNwUkNBn92zzDtfpoWrLk7jdp3Uwy5/Vrui+8WqMbsNKx1D/q7R 7mlEdnKMb6gI6bX58wOzk52NcYxuvTQ49rr/gaszxvqmX36N43kQVzp0uKP7Keoi y9ge+cV/YZDq/98GgLR93RYSHnpZgXA= -----END CERTIFICATE-----Generated at Sun Oct 11 17:13:05 2026 by rpki-client