$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa File: db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa (raw, json) Hash identifier: eZtYgXG4eornF6MWDVKgi54Z3W08aF7lvRsubPUu+mk= Subject key identifier: CF:05:81:23:56:E7:01:A7:62:57:F0:99:BA:05:2C:90:EB:49:08:24 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F4976415A9058C2B9F036D080 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 216.152.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:41:5a:90:58:c2:b9:f0:36:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d45f2785-5b5f-4ece-90a9-847de63cbffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:c0:9b:8d:dd:00:ec:5f:ad:97:c7:08:e5: f2:ce:29:ca:5b:02:d5:51:a7:e7:c9:1a:a0:3c:6d: 44:f7:d5:80:f0:8a:36:e0:84:9b:39:2c:85:af:26: 30:34:c9:9b:e7:be:f5:36:2a:22:43:01:af:f7:c0: 72:9c:ba:40:6b:4d:eb:eb:a8:95:ff:4a:03:0e:f6: 6e:d4:c1:60:e7:c0:68:71:5e:02:c1:0f:d9:4f:17: ee:b3:1a:b6:cf:a4:09:cc:d6:39:be:3a:a2:31:57: 55:c8:67:31:16:38:40:96:13:03:22:e8:35:35:5f: 7a:32:d9:23:84:a6:69:a5:2f:59:55:db:b1:1a:6e: bc:8d:a1:9f:2c:20:df:68:27:67:90:8b:77:dc:22: 7d:2e:a0:fa:b7:38:22:15:66:61:87:91:10:3e:8b: e4:27:2d:d5:24:be:55:46:5b:e5:5d:ad:ce:ae:06: 82:1d:b7:99:1d:db:47:83:ce:8d:82:65:7f:68:2f: 79:4a:75:2d:22:38:87:82:a9:8d:eb:80:bc:6e:89: 92:1a:fd:03:95:7f:e5:56:be:0a:86:62:28:c7:76: 92:49:94:12:df:16:f9:51:71:2f:e7:39:9f:d3:a5: 4b:14:84:de:1a:98:59:0e:fc:c1:56:75:ce:2b:16: 0e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:81:23:56:E7:01:A7:62:57:F0:99:BA:05:2C:90:EB:49:08:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f0:5e:22:06:b8:e5:3a:dd:03:4d:96:fc:32:4b:e1:28:3e: 36:a3:f2:f5:5d:b2:47:7d:84:2a:9f:0a:b2:d6:dd:0f:ed:68: fc:4f:88:08:62:01:8f:94:d1:88:75:7a:73:88:91:96:08:1e: 6a:a1:a4:3f:17:23:68:d6:16:47:6e:9e:65:ba:a3:8b:78:40: 14:37:97:63:d1:0a:29:dd:80:e3:09:59:09:e3:2c:bb:78:28: f7:3f:d6:de:b0:ce:c6:16:fd:22:62:29:4a:78:d8:13:17:b5: e9:1b:45:4b:d9:0a:c6:29:2c:15:a3:68:4b:68:27:8e:53:c5: 58:b7:e6:3d:fa:68:83:da:82:59:95:e9:2b:83:dc:47:6a:1e: 4d:11:37:a8:8f:71:19:eb:d5:b7:01:7e:d8:1e:5e:98:de:83: a0:04:ed:35:01:6a:6f:bf:8f:38:37:b2:98:de:e4:21:3d:1d: 8d:af:57:ee:a4:3e:25:8f:5f:a8:a9:ac:60:f8:22:15:7d:7b: 4f:81:9e:a0:4b:45:1b:1e:cc:a5:92:df:64:64:4b:3a:12:fd: d7:cf:dc:ae:ea:3a:ce:7c:7a:c4:14:a7:f3:db:8a:50:55:43: 30:33:1e:98:86:50:45:19:58:f2:38:be:e3:7d:0c:fe:c4:60: 52:d1:e5:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkFakFjCufA20IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ1ZjI3ODUtNWI1Zi00ZWNlLTkwYTktODQ3ZGU2M2NiZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIjAm43dAOxfrZfHCOXyzinKWwLVUafnyRqg PG1E99WA8Io24ISbOSyFryYwNMmb5771NioiQwGv98BynLpAa03r66iV/0oDDvZu 1MFg58BocV4CwQ/ZTxfusxq2z6QJzNY5vjqiMVdVyGcxFjhAlhMDIug1NV96Mtkj hKZppS9ZVduxGm68jaGfLCDfaCdnkIt33CJ9LqD6tzgiFWZhh5EQPovkJy3VJL5V RlvlXa3OrgaCHbeZHdtHg86NgmV/aC95SnUtIjiHgqmN64C8bomSGv0DlX/lVr4K hmIox3aSSZQS3xb5UXEv5zmf06VLFITeGphZDvzBVnXOKxYOMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8FgSNW5wGnYlfwmboFLJDrSQgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGIwYWIzZjQtZjJhYi0z NDA2LWJjZWQtNjc1ODliOWUwYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPwXiIGuOU63QNNlvwyS+EoPjaj8vVdskd9hCqfCrLW3Q/taPxPiAhi AY+U0Yh1enOIkZYIHmqhpD8XI2jWFkdunmW6o4t4QBQ3l2PRCindgOMJWQnjLLt4 KPc/1t6wzsYW/SJiKUp42BMXtekbRUvZCsYpLBWjaEtoJ45TxVi35j36aIPaglmV 6SuD3EdqHk0RN6iPcRnr1bcBftgeXpjeg6AE7TUBam+/jzg3spje5CE9HY2vV+6k PiWPX6iprGD4IhV9e0+BnqBLRRsezKWS32RkSzoS/dfP3K7qOs58esQUp/PbilBV QzAzHpiGUEUZWPI4vuN9DP7EYFLR5YU= -----END CERTIFICATE-----Generated at Mon Oct 12 21:18:35 2026 by rpki-client