$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa File: a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa (raw, json) Hash identifier: BGPfOWkcbTz0t98LUkFFig3LUsKqMnH+vkluefL8oJc= Subject key identifier: 55:C3:81:6E:82:96:D6:3E:D1:A9:A1:CD:63:69:A1:C4:3C:6A:54:92 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D54573D600812472A9080 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 216.137.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:54:57:3d:60:08:12:47:2a:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=64448f4f-8ef1-4eae-b366-aa853b72d1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:c1:96:f2:6a:56:d5:47:14:ec:6c:5d:cc: 60:89:36:8c:86:24:af:2e:a6:5f:55:01:ee:68:62: f4:84:38:42:8e:11:2d:75:9e:37:15:be:d0:7a:81: ef:d9:d3:bd:f5:86:ca:c6:99:96:98:9e:69:cb:2d: 8e:2a:7d:d5:c4:d5:de:8b:3f:d3:2e:7f:5f:81:c3: ab:12:d6:ab:93:d1:f0:c8:b1:1e:ab:1c:8f:cf:8c: 95:41:eb:6c:a8:57:07:5c:bb:b2:31:f2:da:84:14: d8:b5:a4:58:6e:0c:1a:0a:d9:84:ac:fd:e2:5f:74: 30:0d:8f:20:f5:46:16:cd:93:c9:fd:10:96:f6:50: a5:08:e2:fc:e8:f6:c7:31:77:f1:dd:92:ab:c1:a1: 40:04:8c:f3:f4:d0:53:3a:d5:5f:ed:83:d2:27:72: f6:8b:05:d8:7b:44:56:fa:77:cf:b9:99:5c:98:ba: 37:81:14:cb:f1:71:1d:94:9c:89:08:d4:e6:97:d4: 01:a5:b8:1f:d0:d2:fe:40:47:79:3c:df:cf:6a:86: c9:8c:50:6a:b5:71:96:30:62:66:dc:ec:43:21:e9: f7:49:98:b7:82:d4:16:37:8d:bb:a0:54:db:ac:4c: 2e:a0:f3:c5:b2:d8:f2:ae:e8:5d:9d:40:96:5b:82: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C3:81:6E:82:96:D6:3E:D1:A9:A1:CD:63:69:A1:C4:3C:6A:54:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a7524c9d-ffdc-34d9-a5b1-cecd750b9ff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6a:bb:14:d0:e6:95:4e:7c:3e:3f:a8:81:0a:5e:41:ca:3e: f9:f0:67:8e:43:e8:16:06:c0:d3:59:62:8c:82:f9:ad:ec:6a: 15:de:cd:e7:17:91:27:32:cc:41:bf:66:08:19:c5:44:a1:06: 32:e3:8b:0e:d1:aa:51:df:8b:a8:93:57:41:03:98:84:07:bd: 47:e4:ba:b5:b3:04:bf:2c:a9:f1:5a:ee:7f:5c:01:5a:12:c1: 35:33:1c:17:d9:0a:53:56:df:69:03:aa:34:42:96:94:f7:0b: 09:91:c5:e7:27:d3:33:4c:17:72:72:ab:45:1b:eb:f1:d2:cb: 16:9b:79:03:f9:7a:18:e7:7c:a4:1e:04:7b:fe:0f:fc:50:45: 29:1f:c5:6e:44:cb:17:32:16:66:a8:bc:2f:c8:cf:37:9e:bf: 85:11:49:58:df:cf:05:77:ae:85:48:38:6b:aa:99:44:88:26: 86:f1:e3:b4:7d:75:83:39:42:15:52:15:0a:fe:20:62:de:5f: 89:91:da:b3:62:37:d8:a8:75:e3:a9:85:5c:49:c2:6a:3b:a4: 32:69:72:44:c4:2e:ea:ad:09:4b:e7:08:4f:b0:e9:a0:9d:2d: bb:c0:f9:e1:6c:df:87:05:fa:ae:66:ed:16:84:0b:b4:f1:6e: 32:fc:a3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVRXPWAIEkcqkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjQ0NDhmNGYtOGVmMS00ZWFlLWIzNjYtYWE4NTNiNzJkMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaXBlvJqVtVHFOxsXcxgiTaMhiSvLqZfVQHu aGL0hDhCjhEtdZ43Fb7QeoHv2dO99YbKxpmWmJ5pyy2OKn3VxNXeiz/TLn9fgcOr Etark9HwyLEeqxyPz4yVQetsqFcHXLuyMfLahBTYtaRYbgwaCtmErP3iX3QwDY8g 9UYWzZPJ/RCW9lClCOL86PbHMXfx3ZKrwaFABIzz9NBTOtVf7YPSJ3L2iwXYe0RW +nfPuZlcmLo3gRTL8XEdlJyJCNTml9QBpbgf0NL+QEd5PN/PaobJjFBqtXGWMGJm 3OxDIen3SZi3gtQWN427oFTbrEwuoPPFstjyruhdnUCWW4LGewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXDgW6CltY+0amhzWNpocQ8alSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYTc1MjRjOWQtZmZkYy0z NGQ5LWE1YjEtY2VjZDc1MGI5ZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2InAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtquxTQ5pVOfD4/qIEKXkHKPvnwZ45D6BYGwNNZYoyC+a3sahXezecX kScyzEG/ZggZxUShBjLjiw7RqlHfi6iTV0EDmIQHvUfkurWzBL8sqfFa7n9cAVoS wTUzHBfZClNW32kDqjRClpT3CwmRxecn0zNMF3Jyq0Ub6/HSyxabeQP5ehjnfKQe BHv+D/xQRSkfxW5EyxcyFmaovC/Izzeev4URSVjfzwV3roVIOGuqmUSIJobx47R9 dYM5QhVSFQr+IGLeX4mR2rNiN9iodeOphVxJwmo7pDJpckTELuqtCUvnCE+w6aCd LbvA+eFs34cF+q5m7RaEC7TxbjL8o7Y= -----END CERTIFICATE-----Generated at Mon Oct 12 00:55:04 2026 by rpki-client