$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa File: cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa (raw, json) Hash identifier: G5W6RLLuNOF20lxyzraEyo9BBMfdR/FQocQNCNfSlxQ= Subject key identifier: 19:94:28:B9:8A:48:72:28:CC:E7:69:44:B1:1E:E5:46:1D:CF:DD:61 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D5418E859221021678DC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 216.137.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:54:18:e8:59:22:10:21:67:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=049f9671-7c16-494d-9a45-16aeba12007b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:8e:2e:e8:45:35:0f:58:90:ec:65:c9:f7: 60:19:66:08:60:71:9d:2e:24:8a:8e:ab:50:e5:45: f2:14:b0:2d:b3:42:1c:6f:93:ec:90:3a:82:a5:76: cd:83:e2:29:d3:1c:94:d6:3c:21:d7:1b:a2:9c:e7: eb:b5:33:8d:8d:84:03:61:9b:4b:97:7a:a7:48:38: 54:e5:58:c0:49:d8:ee:2c:96:32:b4:40:2a:61:26: eb:cb:a8:f8:60:95:d6:db:cf:58:57:28:8e:a4:9e: 3c:9d:1e:0c:97:af:c4:98:b3:0b:58:26:d9:b2:f8: f0:b7:94:f1:f4:ac:a9:b8:b4:62:c8:6e:c5:db:22: f8:a4:06:66:fa:7d:ec:72:19:4b:f3:d9:0d:a3:70: ff:e5:d4:60:0b:ca:50:e1:09:ae:3f:cb:5b:fb:2f: a5:8a:33:c0:8f:98:25:05:b4:24:3d:7c:02:32:a4: c9:9c:73:0a:ca:d2:1d:c1:ac:01:e8:df:d5:28:16: 16:36:3e:d0:73:55:25:3b:30:0e:f6:1f:4b:40:e0: 41:64:c2:29:f9:15:c6:5d:a4:61:6f:61:b2:56:35: a4:b9:55:76:ef:06:2d:80:35:1e:2b:75:1b:ce:04: 4e:0d:27:02:99:3b:aa:07:ee:82:77:01:16:8a:7c: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:28:B9:8A:48:72:28:CC:E7:69:44:B1:1E:E5:46:1D:CF:DD:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:bf:a8:0b:7f:fd:09:0c:34:50:0f:4a:85:86:e8:ae:87:31: 99:43:ff:a5:eb:c9:94:da:cf:31:5e:d1:26:02:40:8f:8d:74: ea:b6:7b:4a:20:e9:04:14:86:01:f8:b5:32:33:1e:20:18:c7: d7:e8:e2:04:76:11:8f:15:51:62:92:98:87:71:3f:e5:1f:e5: 96:3c:03:42:f5:38:72:ed:69:df:2e:b6:52:1f:8d:28:32:78: c3:6f:c8:4f:e4:d6:cb:c4:13:14:1a:60:85:70:c8:24:86:1e: 82:e3:bf:89:de:4a:9d:83:40:90:9a:91:d1:68:f8:6c:b0:82: ed:66:e3:f3:0d:8f:ab:fe:56:51:65:56:92:c0:90:e9:54:30: 4a:26:bb:53:6a:ab:4b:af:22:70:31:8d:b1:e3:e9:d7:43:4c: 2e:88:0e:b6:d9:f9:af:65:9a:e7:40:e4:cf:78:3e:c3:ee:65: 43:63:06:cf:d8:de:e0:6d:9a:c5:95:3b:8c:eb:e2:57:93:34: 15:d8:c8:c3:15:9e:f6:5e:88:3c:c5:2e:59:e1:87:e8:53:ee: 50:51:6b:a8:93:ed:1b:7f:84:48:ab:1e:ba:ae:ef:4b:b4:5c: 96:1a:35:2e:44:8b:eb:c5:c3:f1:c1:d5:6c:b4:b4:5b:54:f4: fb:df:7d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVQY6FkiECFnjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MDQ5Zjk2NzEtN2MxNi00OTRkLTlhNDUtMTZhZWJhMTIwMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrWOLuhFNQ9YkOxlyfdgGWYIYHGdLiSKjqtQ 5UXyFLAts0Icb5PskDqCpXbNg+Ip0xyU1jwh1xuinOfrtTONjYQDYZtLl3qnSDhU 5VjASdjuLJYytEAqYSbry6j4YJXW289YVyiOpJ48nR4Ml6/EmLMLWCbZsvjwt5Tx 9KypuLRiyG7F2yL4pAZm+n3schlL89kNo3D/5dRgC8pQ4QmuP8tb+y+lijPAj5gl BbQkPXwCMqTJnHMKytIdwawB6N/VKBYWNj7Qc1UlOzAO9h9LQOBBZMIp+RXGXaRh b2GyVjWkuVV27wYtgDUeK3UbzgRODScCmTuqB+6CdwEWinzX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmUKLmKSHIozOdpRLEe5UYdz91hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvY2IyMzEzZjAtMjk4YS0z ZTE0LTk3NmUtOGYyMGRmYjZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK/qAt//QkMNFAPSoWG6K6HMZlD/6XryZTazzFe0SYCQI+NdOq2e0og 6QQUhgH4tTIzHiAYx9fo4gR2EY8VUWKSmIdxP+Uf5ZY8A0L1OHLtad8utlIfjSgy eMNvyE/k1svEExQaYIVwyCSGHoLjv4neSp2DQJCakdFo+Gywgu1m4/MNj6v+VlFl VpLAkOlUMEomu1Nqq0uvInAxjbHj6ddDTC6IDrbZ+a9lmudA5M94PsPuZUNjBs/Y 3uBtmsWVO4zr4leTNBXYyMMVnvZeiDzFLlnhh+hT7lBRa6iT7Rt/hEirHrqu70u0 XJYaNS5Ei+vFw/HB1Wy0tFtU9PvffT8= -----END CERTIFICATE-----Generated at Sun Oct 11 22:20:57 2026 by rpki-client