$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa File: dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json) Hash identifier: ZSyOA+8+R2S533BF+SH4a1anOF+gHx8rqcRDHpsBWB4= Subject key identifier: 1E:D0:CB:BD:B8:5B:D1:6E:BD:61:40:79:61:59:04:06:43:5C:34:F2 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D4EB7713B22AA737D4F00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 64.4.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4e:b7:71:3b:22:aa:73:7d:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=c9e4f289-ea7b-4cdf-beec-d597724619db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:1a:39:9c:c3:ea:53:51:11:3d:31:1f:df: 73:c8:80:b4:05:01:b7:a4:82:55:48:7f:df:b4:85: 6d:e2:ea:7c:db:e8:bc:15:3d:30:11:10:34:fa:d7: 7f:f3:e3:21:b1:7c:5a:f3:81:b7:e4:0b:89:b7:12: 1e:16:4f:c6:98:83:86:eb:7d:6a:96:a4:28:75:aa: bf:c8:46:0d:c7:3b:70:c9:12:5b:64:e3:a6:40:8c: 40:5b:c0:0f:8c:02:bd:1b:91:d7:1a:ef:3c:33:c1: f5:8b:15:1d:d8:1d:22:c8:ba:4b:56:16:bf:f6:8c: 64:d3:48:5e:22:58:01:3b:86:bc:9b:a0:0f:8d:18: c9:67:88:06:98:6e:00:c3:bf:a9:fe:fb:b1:25:6c: 67:38:79:3c:1e:52:b6:cf:df:47:27:eb:95:de:8c: fe:a9:35:9a:1f:64:cc:74:07:06:25:4b:3b:9f:e6: 02:48:f1:9f:51:f3:f7:57:eb:cf:bb:f8:d7:c8:f3: 5a:e4:93:40:40:9a:f2:54:c4:05:62:74:95:fa:a5: bf:d0:a0:a3:fa:58:3c:bf:df:b2:05:db:ee:ca:f0: 74:8f:29:34:df:a5:22:0d:6c:af:7d:14:00:29:5a: 05:82:cc:22:32:e9:9f:f2:8e:b0:ab:17:06:3d:85: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D0:CB:BD:B8:5B:D1:6E:BD:61:40:79:61:59:04:06:43:5C:34:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9d:49:52:6f:26:d2:ea:49:aa:5a:b0:fe:46:35:4f:0a:a6: de:42:15:00:ee:70:65:cc:5c:cd:5d:0f:8f:bd:f0:cb:93:4b: f0:27:ba:5b:3e:4d:10:e0:64:4a:07:ea:ca:da:5b:9f:1d:e7: 7f:c5:86:62:b4:02:49:e2:40:e7:e7:c0:4b:6e:b8:e5:b2:84: 35:cc:43:c4:23:02:9d:a0:08:9e:1c:d1:12:a3:1f:08:d5:c8: db:03:07:27:e3:40:ec:33:94:09:c5:ae:de:3e:7c:f1:84:dc: 03:dd:eb:38:16:3c:3e:b5:40:7a:9c:e3:d6:4a:af:c3:65:48: 93:a4:d9:20:2f:9b:79:11:ae:be:59:6f:68:0f:68:75:82:36: bf:d4:1f:b4:e4:c4:09:7e:d8:b6:11:00:84:5e:04:c8:22:7f: 53:1f:1d:d1:ae:d1:09:bd:b0:c3:26:69:30:2e:91:59:2e:eb: 81:f8:b9:e3:1b:64:8e:67:b9:8e:ce:30:ca:fc:75:af:1b:6c: af:ed:25:2a:a3:d2:dd:e1:4b:10:de:41:a6:3d:2f:66:ba:4d: 7d:57:0c:da:3c:c9:62:65:f7:ce:f0:e4:e2:07:0a:ec:df:6b: ba:8f:91:fc:7c:4a:d4:19:29:06:20:4f:9e:5d:4a:b0:ef:96: 91:99:7f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU63cTsiqnN9TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YzllNGYyODktZWE3Yi00Y2RmLWJlZWMtZDU5NzcyNDYxOWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlsaOZzD6lNRET0xH99zyIC0BQG3pIJVSH/f tIVt4up82+i8FT0wERA0+td/8+MhsXxa84G35AuJtxIeFk/GmIOG631qlqQodaq/ yEYNxztwyRJbZOOmQIxAW8APjAK9G5HXGu88M8H1ixUd2B0iyLpLVha/9oxk00he IlgBO4a8m6APjRjJZ4gGmG4Aw7+p/vuxJWxnOHk8HlK2z99HJ+uV3oz+qTWaH2TM dAcGJUs7n+YCSPGfUfP3V+vPu/jXyPNa5JNAQJryVMQFYnSV+qW/0KCj+lg8v9+y BdvuyvB0jyk036UiDWyvfRQAKVoFgswiMumf8o6wqxcGPYXtQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7Qy724W9FuvWFAeWFZBAZDXDTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGZmYzk3ZmItNzg2ZS0z MThiLWI0ZWUtMjkzZDFhMGYxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKdSVJvJtLqSapasP5GNU8Kpt5CFQDucGXMXM1dD4+98MuTS/Anuls+ TRDgZEoH6sraW58d53/FhmK0AkniQOfnwEtuuOWyhDXMQ8QjAp2gCJ4c0RKjHwjV yNsDByfjQOwzlAnFrt4+fPGE3APd6zgWPD61QHqc49ZKr8NlSJOk2SAvm3kRrr5Z b2gPaHWCNr/UH7TkxAl+2LYRAIReBMgif1MfHdGu0Qm9sMMmaTAukVku64H4ueMb ZI5nuY7OMMr8da8bbK/tJSqj0t3hSxDeQaY9L2a6TX1XDNo8yWJl987w5OIHCuzf a7qPkfx8StQZKQYgT55dSrDvlpGZf5Q= -----END CERTIFICATE-----Generated at Mon Oct 12 02:29:08 2026 by rpki-client