$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa File: be73bf96-e5bd-337c-93e4-4955acaa2e68.roa (raw, json) Hash identifier: tzlPm+6OcCzPm7caPXijofksJ944Kg81ZBAMlmWkxGo= Subject key identifier: 2D:39:27:64:B0:7E:7D:7B:66:5C:9A:78:73:34:34:16:78:63:50:50 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D5431D18828DEA0577FC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 216.137.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:54:31:d1:88:28:de:a0:57:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=591e686e-a2c6-4828-925f-f456c0f51d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:e8:e9:8b:63:63:10:a5:81:49:d0:72:47: f9:ce:34:ec:68:3c:e3:3f:f1:99:52:31:bd:dd:9d: 4e:b5:4b:22:90:fd:90:86:40:20:03:34:e9:61:b5: de:0c:d8:7b:6a:28:63:85:ee:ed:48:44:cd:93:fc: d4:02:d7:1c:8e:6e:47:97:8c:24:69:9d:61:2c:b0: 15:f9:d2:95:a9:76:ff:0d:4c:6f:d5:1b:34:78:70: a3:b7:6a:32:34:80:0b:57:13:dd:73:65:b6:ae:6f: 1c:cb:7a:2b:25:60:8c:36:fd:95:ed:e7:b3:4a:31: 1b:51:d9:c6:fb:43:c5:98:6e:83:bd:ca:6d:dd:54: fd:d5:42:44:4d:a6:de:15:35:e3:0c:4f:de:b1:f8: 13:31:50:07:c0:aa:32:41:72:fa:8b:84:91:f1:0b: b3:c8:7c:65:80:0d:f4:99:4c:1b:ef:d3:74:8f:6b: d9:f8:c1:b5:11:f8:0d:c9:14:c1:a2:fe:4d:f0:4c: 07:17:06:ed:ec:aa:71:7f:79:cc:ef:d7:32:a2:fc: cd:84:fa:36:d0:6c:fc:67:b6:de:99:3c:b8:1b:ed: 87:ea:bf:84:05:3f:d6:1b:7e:2d:0c:2e:22:55:ad: 7d:db:c8:08:15:67:5f:44:77:e9:23:f9:d4:cd:a3: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:27:64:B0:7E:7D:7B:66:5C:9A:78:73:34:34:16:78:63:50:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f7:bc:c4:70:b7:b0:42:f8:43:19:53:95:4b:e7:73:51:03: c6:3e:bb:66:7e:00:f1:00:60:e6:b6:01:55:ae:46:a4:23:23: 93:c4:a4:01:65:0e:0f:88:b0:2d:22:ce:c8:3b:ca:ba:60:8c: a3:4d:74:0d:31:61:c5:8d:eb:73:b2:35:3a:46:82:ab:cc:e1: de:b5:e1:b6:1b:4b:36:75:ac:11:10:7c:48:39:8c:a5:01:32: 20:a4:51:d8:b7:70:91:68:5f:79:08:71:f1:a7:97:71:e0:0d: 50:c0:1b:8d:af:60:87:f4:8e:22:46:72:c1:64:f0:22:a3:4b: 40:82:7d:9b:db:09:3d:12:d0:81:09:8a:f0:4a:ad:42:ab:61: 38:5e:ea:5b:6b:f1:f8:31:8f:c6:76:d8:2b:27:44:f1:8d:8e: 03:74:b0:7e:13:f2:76:62:6b:f6:3c:30:da:e8:90:d4:64:d5: 34:11:d3:b2:ab:03:97:e8:4f:14:27:20:cb:06:59:80:d2:e9: bb:dc:93:63:54:80:7c:76:34:cc:58:5c:74:ad:06:c2:d6:15: 7c:83:bc:8b:3f:b4:10:80:e6:31:c7:7c:b7:99:d8:31:38:f0: e5:b1:4f:1d:e5:10:40:02:b4:f3:d5:0d:5b:cd:24:a5:c5:2e: 25:d5:c0:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVQx0Ygo3qBXf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTkxZTY4NmUtYTJjNi00ODI4LTkyNWYtZjQ1NmMwZjUxZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOro6YtjYxClgUnQckf5zjTsaDzjP/GZUjG9 3Z1OtUsikP2QhkAgAzTpYbXeDNh7aihjhe7tSETNk/zUAtccjm5Hl4wkaZ1hLLAV +dKVqXb/DUxv1Rs0eHCjt2oyNIALVxPdc2W2rm8cy3orJWCMNv2V7eezSjEbUdnG +0PFmG6Dvcpt3VT91UJETabeFTXjDE/esfgTMVAHwKoyQXL6i4SR8QuzyHxlgA30 mUwb79N0j2vZ+MG1EfgNyRTBov5N8EwHFwbt7Kpxf3nM79cyovzNhPo20Gz8Z7be mTy4G+2H6r+EBT/WG34tDC4iVa1928gIFWdfRHfpI/nUzaOhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC05J2Swfn17ZlyaeHM0NBZ4Y1BQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmU3M2JmOTYtZTViZC0z MzdjLTkzZTQtNDk1NWFjYWEyZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH3vMRwt7BC+EMZU5VL53NRA8Y+u2Z+APEAYOa2AVWuRqQjI5PEpAFl Dg+IsC0izsg7yrpgjKNNdA0xYcWN63OyNTpGgqvM4d614bYbSzZ1rBEQfEg5jKUB MiCkUdi3cJFoX3kIcfGnl3HgDVDAG42vYIf0jiJGcsFk8CKjS0CCfZvbCT0S0IEJ ivBKrUKrYThe6ltr8fgxj8Z22CsnRPGNjgN0sH4T8nZia/Y8MNrokNRk1TQR07Kr A5foTxQnIMsGWYDS6bvck2NUgHx2NMxYXHStBsLWFXyDvIs/tBCA5jHHfLeZ2DE4 8OWxTx3lEEACtPPVDVvNJKXFLiXVwFY= -----END CERTIFICATE-----Generated at Sun Oct 11 17:08:36 2026 by rpki-client