$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa File: d51fd254-9132-3c5e-9f20-b890540aa448.roa (raw, json) Hash identifier: Aeyz6dH0FJlY4YhQrgDpfUm8BTMKgrYoMWpZxwTm1Dw= Subject key identifier: 6A:ED:29:81:17:18:D3:23:81:36:B2:E3:4F:2E:24:CF:0E:5E:98:32 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D4E181135A4E92952BA00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 64.4.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4e:18:11:35:a4:e9:29:52:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=350c1310-7668-47b0-9f4d-cbdb351cc85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:cb:57:5c:50:f5:8d:01:30:10:db:05:2b: ed:24:54:92:64:f7:f7:90:bc:0b:24:c4:d1:bc:b2: 6e:1e:c0:40:52:aa:11:21:ae:9b:be:06:a5:1b:db: 6d:34:73:ab:85:50:7f:22:5d:b6:66:ef:4f:f2:a6: 35:49:17:bd:39:fa:91:14:a2:f9:ef:20:0c:fa:d8: 13:ed:fc:88:d0:51:1c:94:66:e6:bf:66:42:3c:2e: 41:88:08:ce:df:a6:3b:be:99:f0:48:88:7a:27:5d: e1:38:91:b6:6a:2b:b0:34:36:bb:c1:c9:66:d7:34: 8a:a3:5f:81:f4:7a:56:d8:48:6e:0d:c8:7e:10:77: 77:93:1d:9a:9f:ac:c1:5e:28:1c:ee:d9:2e:f4:59: 8f:7b:0f:7a:56:dc:4f:67:65:2f:79:68:0b:4d:b1: 35:48:e7:d1:87:31:85:48:11:51:5d:38:f5:d8:cf: c8:04:dc:dd:b3:12:8d:f8:a7:7a:87:10:e8:16:79: ec:db:c1:bc:5b:ee:93:1e:b8:c6:0c:46:55:aa:2c: ea:69:71:45:82:33:c0:61:23:d0:5f:09:7a:e7:00: a6:03:49:30:42:4d:85:a2:79:01:bb:32:88:31:4c: c4:02:e1:6d:0b:40:69:ff:96:8b:4e:21:9b:64:1d: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:ED:29:81:17:18:D3:23:81:36:B2:E3:4F:2E:24:CF:0E:5E:98:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:06:3a:e9:44:74:d1:31:52:a1:06:6a:c0:14:14:5b:f6:67: 55:a3:cb:94:f5:af:cb:21:fc:68:0e:0d:03:61:b4:64:26:6f: 38:40:b6:d8:a2:db:7e:31:26:40:12:26:16:a5:ba:a3:de:5b: c7:a2:2c:9f:bc:d0:aa:14:b7:42:e5:a9:26:36:97:a0:e9:57: bb:a3:48:2d:05:6c:54:68:f3:e7:ee:bc:ca:77:e7:30:81:4f: ca:6d:87:5d:19:19:3a:25:02:c6:4c:20:68:56:58:6b:16:67: 70:71:e5:2b:6b:90:4e:84:a8:4b:82:0e:74:e6:04:35:3e:87: 6c:ee:20:56:28:d9:78:7c:62:85:2e:7b:a6:91:a1:8a:41:73: b5:6c:b1:67:ce:a0:97:88:19:aa:eb:1a:33:7c:3b:1f:6c:8b: 9b:4f:63:be:94:6b:e0:90:5d:67:84:32:bf:84:56:23:c0:10: b2:b6:54:be:07:7e:a6:a3:45:a0:57:c3:71:89:37:fd:ae:c0: 04:b0:23:68:62:57:17:3b:a9:a7:9c:08:64:c5:39:65:eb:43: c8:a4:ea:fb:fa:ab:d9:6a:5c:93:15:4d:37:e4:72:01:b4:46: 21:15:2c:fb:af:82:2c:4a:42:7f:1c:f7:2d:e9:0b:58:51:c8: c7:49:63:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU4YETWk6SlSugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MzUwYzEzMTAtNzY2OC00N2IwLTlmNGQtY2JkYjM1MWNjODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0TLV1xQ9Y0BMBDbBSvtJFSSZPf3kLwLJMTR vLJuHsBAUqoRIa6bvgalG9ttNHOrhVB/Il22Zu9P8qY1SRe9OfqRFKL57yAM+tgT 7fyI0FEclGbmv2ZCPC5BiAjO36Y7vpnwSIh6J13hOJG2aiuwNDa7wclm1zSKo1+B 9HpW2EhuDch+EHd3kx2an6zBXigc7tku9FmPew96VtxPZ2UveWgLTbE1SOfRhzGF SBFRXTj12M/IBNzdsxKN+Kd6hxDoFnns28G8W+6THrjGDEZVqizqaXFFgjPAYSPQ Xwl65wCmA0kwQk2FonkBuzKIMUzEAuFtC0Bp/5aLTiGbZB046wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrtKYEXGNMjgTay408uJM8OXpgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDUxZmQyNTQtOTEzMi0z YzVlLTlmMjAtYjg5MDU0MGFhNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsGOulEdNExUqEGasAUFFv2Z1Wjy5T1r8sh/GgODQNhtGQmbzhAttii 234xJkASJhaluqPeW8eiLJ+80KoUt0LlqSY2l6DpV7ujSC0FbFRo8+fuvMp35zCB T8pth10ZGTolAsZMIGhWWGsWZ3Bx5StrkE6EqEuCDnTmBDU+h2zuIFYo2Xh8YoUu e6aRoYpBc7VssWfOoJeIGarrGjN8Ox9si5tPY76Ua+CQXWeEMr+EViPAELK2VL4H fqajRaBXw3GJN/2uwASwI2hiVxc7qaecCGTFOWXrQ8ik6vv6q9lqXJMVTTfkcgG0 RiEVLPuvgixKQn8c9y3pC1hRyMdJY8c= -----END CERTIFICATE-----Generated at Sun Oct 11 17:13:09 2026 by rpki-client