$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa File: b8b1380b-8b04-35d1-aadf-93dea95122c5.roa (raw, json) Hash identifier: IkqBzyuuuO8FV3xMszYOfxSXbYFLoAbiOItlwNexDvs= Subject key identifier: 8B:36:B0:95:52:6A:89:84:37:40:64:88:AA:43:9E:6B:B0:48:50:32 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F497637B17C286AE0A46547F0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 64.127.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:37:b1:7c:28:6a:e0:a4:65:47:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8b49540e-0112-4fc4-a559-8c16b914669b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c3:06:d0:6e:a7:10:e9:b2:31:2a:ea:5b:4f: 5b:a0:12:92:9a:b4:dc:8c:f3:e4:90:73:fe:ed:87: b9:55:ff:04:07:91:05:ec:ad:dd:1b:e3:9b:25:76: b3:e6:1f:60:bd:bb:74:35:62:04:b6:87:d6:4b:46: 77:fd:ea:d8:2d:4c:61:b8:94:c5:63:42:0e:1b:f1: 69:da:9f:4f:38:cc:a4:bd:52:dc:f4:f9:c2:2f:b3: 1b:50:9d:d8:9c:55:94:2f:6d:63:6d:2c:6e:d8:66: da:e7:78:1f:c7:01:e8:54:8c:36:d8:84:c6:ef:1b: 26:f5:ae:e7:33:2c:88:0b:a1:42:91:12:fd:5b:78: 4b:25:9e:ae:0e:57:ce:0b:64:30:c5:d9:7a:ca:9c: d9:bf:59:12:5c:c1:c0:88:52:6f:35:12:71:3a:57: 0d:95:d8:ed:0b:70:aa:44:cf:46:98:5d:cf:3a:ea: 86:9e:a8:ff:43:0e:5a:cd:3f:ae:7d:22:28:f5:51: 04:25:28:9e:ce:2b:e3:a9:f5:ed:94:60:88:b2:ee: e7:55:70:fd:67:d5:c0:25:2f:ef:87:40:bc:21:b8: 39:28:e0:2e:f1:c1:e9:36:11:b4:59:fd:6f:12:3c: 2b:da:6a:b8:45:07:1b:8c:9a:49:94:e3:5d:4b:8f: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:B0:95:52:6A:89:84:37:40:64:88:AA:43:9E:6B:B0:48:50:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.127.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:57:46:32:19:f0:33:a6:a7:24:ac:04:86:5d:f2:73:a3:03: 2d:73:8d:d5:09:a6:f2:0e:ad:2f:fb:c4:d8:11:9b:68:ac:08: 89:e5:77:d7:71:f7:03:5e:d7:2d:46:e9:44:b0:10:14:b3:0c: 22:61:26:03:02:8b:f9:c4:24:09:f1:4a:95:fc:cf:13:bd:7c: 6f:42:d2:6e:93:5a:a7:37:44:c0:c0:07:58:dc:1c:61:a0:93: 1f:1b:fa:b7:cf:c6:e7:7d:1d:f5:4a:ce:bf:8e:d0:a8:cb:56: de:61:42:d9:d8:48:bf:c1:8d:8f:49:b9:d3:b2:50:57:38:ef: 5e:33:10:8e:fc:80:f7:e1:45:c2:c0:57:a7:fd:2e:5f:bf:74: 52:58:7c:da:88:2a:6b:64:da:1b:9e:13:64:4b:7c:b4:f4:f0: 66:2d:63:87:27:78:a7:ab:5d:04:8b:d1:e5:22:de:2f:79:9a: 78:35:b0:a5:c2:8b:aa:b7:ed:46:20:cb:20:5f:33:ac:74:0e: 30:30:49:b2:49:9d:26:bd:fa:fc:6c:d1:c5:c7:fe:9e:9e:0a: 47:8a:55:e5:5f:82:da:2d:cc:6d:a2:75:b5:c6:70:d3:7e:63: 86:35:dd:79:2f:00:43:0a:20:14:56:c4:a7:1b:dd:a7:25:ac: aa:e8:6e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdjexfChq4KRlR/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGI0OTU0MGUtMDExMi00ZmM0LWE1NTktOGMxNmI5MTQ2NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisMG0G6nEOmyMSrqW09boBKSmrTcjPPkkHP+ 7Ye5Vf8EB5EF7K3dG+ObJXaz5h9gvbt0NWIEtofWS0Z3/erYLUxhuJTFY0IOG/Fp 2p9POMykvVLc9PnCL7MbUJ3YnFWUL21jbSxu2Gba53gfxwHoVIw22ITG7xsm9a7n MyyIC6FCkRL9W3hLJZ6uDlfOC2Qwxdl6ypzZv1kSXMHAiFJvNRJxOlcNldjtC3Cq RM9GmF3POuqGnqj/Qw5azT+ufSIo9VEEJSiezivjqfXtlGCIsu7nVXD9Z9XAJS/v h0C8Ibg5KOAu8cHpNhG0Wf1vEjwr2mq4RQcbjJpJlONdS4+kvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs2sJVSaomEN0BkiKpDnmuwSFAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjhiMTM4MGItOGIwNC0z NWQxLWFhZGYtOTNkZWE5NTEyMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQH/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdXRjIZ8DOmpySsBIZd8nOjAy1zjdUJpvIOrS/7xNgRm2isCInld9dx 9wNe1y1G6USwEBSzDCJhJgMCi/nEJAnxSpX8zxO9fG9C0m6TWqc3RMDAB1jcHGGg kx8b+rfPxud9HfVKzr+O0KjLVt5hQtnYSL/BjY9JudOyUFc4714zEI78gPfhRcLA V6f9Ll+/dFJYfNqIKmtk2hueE2RLfLT08GYtY4cneKerXQSL0eUi3i95mng1sKXC i6q37UYgyyBfM6x0DjAwSbJJnSa9+vxs0cXH/p6eCkeKVeVfgtotzG2idbXGcNN+ Y4Y13XkvAEMKIBRWxKcb3aclrKrobgw= -----END CERTIFICATE-----Generated at Sun Oct 11 18:59:53 2026 by rpki-client