$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa File: d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa (raw, json) Hash identifier: r6nSebBufUUsSp195y01CM6UwB7jybulI6MSEL3vY84= Subject key identifier: FB:3F:F3:F4:3A:E2:71:A4:D4:CD:D7:D8:5D:5D:0C:BA:2E:03:C2:8B Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D4E3C6468A71EE30EE700 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 64.4.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4e:3c:64:68:a7:1e:e3:0e:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=b7ac2723-c605-42b5-b039-aae70ef606c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:34:b0:51:e2:9a:ab:8b:89:92:99:9d:cf: d0:b1:51:4f:25:39:58:c2:ba:31:72:75:00:a9:be: 1c:19:32:c9:56:d6:b2:ad:44:0b:1e:b3:0e:cb:8c: 58:46:df:43:e1:5a:9f:14:31:4c:85:a6:22:cb:57: 6b:99:17:af:d2:52:d1:a3:89:9d:0b:28:79:38:9a: b4:58:0d:2c:92:6c:92:25:f7:cf:c5:ee:7e:24:15: 5d:07:c1:0b:22:42:e2:08:18:a0:ed:09:ea:4c:29: 66:30:04:40:62:8e:9c:e8:a0:56:8a:e3:fc:d7:d2: 23:e9:bc:5c:9a:70:71:11:65:4f:24:4b:79:07:6f: 5a:ec:13:0f:07:83:4a:cc:15:d3:23:d9:73:53:3b: ee:0c:a8:cd:cd:38:e2:37:ac:63:ac:e1:41:59:f9: 2f:a6:b9:6b:54:07:26:e7:76:b5:c3:7d:a2:11:94: ec:30:9e:b3:48:aa:61:7d:c4:bb:6b:83:c6:05:b7: ea:98:b5:86:6c:27:c5:b0:cc:3c:73:53:de:e6:a6: 43:54:b5:ab:71:f1:5c:a8:f6:83:e8:91:dd:cd:3f: a8:00:76:7a:d5:de:49:a1:d1:56:c9:a0:dc:ee:50: 60:e6:f1:f7:dd:9d:50:50:55:a5:ad:86:96:6c:15: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:F3:F4:3A:E2:71:A4:D4:CD:D7:D8:5D:5D:0C:BA:2E:03:C2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:99:43:dc:1d:10:be:37:04:1a:88:ea:de:c5:d4:0b:3e:e7: 3d:88:a7:54:83:97:3b:89:87:1e:b0:55:79:aa:8a:a5:8e:dc: b2:6b:49:54:c8:93:62:cb:c4:c3:e2:77:bb:be:37:b8:ca:e0: e0:8c:45:ea:ab:44:58:dc:f9:fb:98:98:ce:db:76:66:cf:a3: a4:46:98:de:4c:37:b8:b0:6d:dd:26:f3:53:74:ec:f4:b0:2c: c8:9b:d8:cc:c2:f2:68:7c:d5:66:f7:5e:cd:3d:e9:93:7b:18: a5:c7:37:bf:ad:23:ff:33:67:65:80:e6:45:ca:09:0a:25:ed: 0c:f9:09:9b:62:a5:44:34:de:f5:9c:8c:3c:eb:e4:a1:ac:02: 10:65:d6:f4:95:9c:13:03:8c:98:30:58:12:38:4f:d1:84:03: 5c:43:49:1a:b4:eb:00:27:8c:17:72:2f:ba:b9:f1:4d:89:df: a1:bf:25:2a:67:ab:4c:40:0c:c5:be:43:20:6d:0d:51:18:8a: ed:37:63:46:a6:b4:1a:fd:f3:23:18:a0:b7:6e:2c:7e:cb:6d: 65:a4:07:d0:e5:6f:42:a9:94:f1:ae:7b:2c:2b:22:52:7e:3a: 21:9c:06:a8:84:4c:63:22:2f:94:49:f6:01:2f:83:60:d0:51: fd:e0:ae:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU48ZGinHuMO5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YjdhYzI3MjMtYzYwNS00MmI1LWIwMzktYWFlNzBlZjYwNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpk0sFHimquLiZKZnc/QsVFPJTlYwroxcnUA qb4cGTLJVtayrUQLHrMOy4xYRt9D4VqfFDFMhaYiy1drmRev0lLRo4mdCyh5OJq0 WA0skmySJffPxe5+JBVdB8ELIkLiCBig7QnqTClmMARAYo6c6KBWiuP819Ij6bxc mnBxEWVPJEt5B29a7BMPB4NKzBXTI9lzUzvuDKjNzTjiN6xjrOFBWfkvprlrVAcm 53a1w32iEZTsMJ6zSKphfcS7a4PGBbfqmLWGbCfFsMw8c1Pe5qZDVLWrcfFcqPaD 6JHdzT+oAHZ61d5JodFWyaDc7lBg5vH33Z1QUFWlrYaWbBUnuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs/8/Q64nGk1M3X2F1dDLouA8KLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDM0NTgyY2UtYmQ2ZC0z ZTdjLWE0MmMtOTY4YmU2ZjE5ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2ZQ9wdEL43BBqI6t7F1As+5z2Ip1SDlzuJhx6wVXmqiqWO3LJrSVTI k2LLxMPid7u+N7jK4OCMReqrRFjc+fuYmM7bdmbPo6RGmN5MN7iwbd0m81N07PSw LMib2MzC8mh81Wb3Xs096ZN7GKXHN7+tI/8zZ2WA5kXKCQol7Qz5CZtipUQ03vWc jDzr5KGsAhBl1vSVnBMDjJgwWBI4T9GEA1xDSRq06wAnjBdyL7q58U2J36G/JSpn q0xADMW+QyBtDVEYiu03Y0amtBr98yMYoLduLH7LbWWkB9Dlb0KplPGueywrIlJ+ OiGcBqiETGMiL5RJ9gEvg2DQUf3grvE= -----END CERTIFICATE-----Generated at Mon Oct 12 03:27:14 2026 by rpki-client