$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa File: e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa (raw, json) Hash identifier: GjIvrZpb5SO1IUWIe/+8w+CAnX2N8AZ5ZU4ueM4f+iY= Subject key identifier: AA:E7:20:44:4B:41:DD:BA:38:91:A0:43:93:D3:F6:3D:AD:0B:8E:D1 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D4E78003946C30A7A2B80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 64.4.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4e:78:00:39:46:c3:0a:7a:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=cd8a172a-46e2-4e8d-8b73-6f72d4a9eff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:09:74:06:1f:a6:59:fc:17:8f:a3:45:1f:f3: de:14:3f:c7:e4:7a:1f:21:4c:1b:9d:0a:dd:96:ac: cf:d5:3e:1a:99:9e:40:3f:78:df:5e:02:94:2c:0b: 17:d7:8b:e1:78:56:be:62:8d:11:a9:4d:64:90:b9: 4e:de:21:41:33:e5:3e:69:97:b4:2d:f2:fa:21:a5: 88:d2:cf:c3:c4:87:b6:cb:7c:26:92:ec:a9:7d:25: 46:a5:49:04:2a:63:e4:c3:d3:bc:73:e2:11:21:f5: 1e:85:64:6e:1f:98:dc:75:ad:a8:fc:e8:74:08:22: 1e:9b:5d:a6:bf:6c:51:ad:55:9f:21:a9:a6:0d:26: e3:7d:ae:90:a1:aa:65:8f:fa:72:50:3f:2b:a6:d5: af:44:11:78:98:85:a7:b6:0d:5d:20:82:a6:b8:fd: 1f:ca:d7:11:00:63:f3:b1:8d:0a:49:98:71:08:4b: ef:06:d1:cd:f0:d3:2b:17:df:7b:42:fd:28:11:e8: 66:51:75:77:c8:e5:4d:b7:e8:a8:3d:5d:6d:7e:28: d9:64:42:e2:05:c3:1e:6c:fb:c6:22:dd:15:ee:63: 9c:d0:53:8f:d7:fb:34:9c:a8:01:6e:25:c8:f6:df: 77:4c:de:fd:de:e3:be:5f:df:59:e0:ea:c9:4f:37: ca:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E7:20:44:4B:41:DD:BA:38:91:A0:43:93:D3:F6:3D:AD:0B:8E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b6:16:a4:ab:cc:98:e8:1d:d4:30:1d:4f:b8:fa:61:6a:81: 21:d9:85:3d:ff:75:e6:c1:82:a4:a7:fe:36:2c:60:9e:af:01: 98:31:e7:b5:91:f8:51:90:55:19:31:3b:76:c4:79:2c:d6:29: a9:ee:49:bc:16:3f:78:86:ee:f9:f8:b5:0a:e3:d0:6d:a1:c1: 6a:95:b0:b0:23:9e:01:ad:77:e4:ea:08:96:9d:f5:a1:6f:53: d1:27:39:61:10:ba:8d:83:ad:54:1b:de:8b:dc:62:77:78:2a: 33:f0:08:05:3c:cb:f3:e5:a1:62:ed:13:5c:48:cf:55:39:4a: 82:6f:a7:a8:7e:ad:6a:70:21:2d:97:49:cc:8c:83:4d:f0:cd: d3:0d:51:61:5c:50:19:cf:47:b4:48:d3:ff:90:93:ed:bc:d6: b5:aa:f0:c6:52:ab:2e:97:e1:8e:96:24:6f:dd:97:a1:db:6a: a8:8f:16:45:cc:df:fb:f7:d7:37:75:91:0b:58:02:31:bc:1b: 0c:73:3f:11:9f:84:25:14:00:c7:25:ee:d0:cc:20:d0:23:a8: fa:8f:37:48:6a:9a:10:f5:f7:f7:ba:c2:9d:1e:7a:04:7b:82: 82:bc:0c:83:5f:b6:ab:cf:4a:2f:93:80:1c:0a:91:7f:a8:86: e3:94:f9:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU54ADlGwwp6K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2Q4YTE3MmEtNDZlMi00ZThkLThiNzMtNmY3MmQ0YTllZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwl0Bh+mWfwXj6NFH/PeFD/H5HofIUwbnQrd lqzP1T4amZ5AP3jfXgKULAsX14vheFa+Yo0RqU1kkLlO3iFBM+U+aZe0LfL6IaWI 0s/DxIe2y3wmkuypfSVGpUkEKmPkw9O8c+IRIfUehWRuH5jcda2o/Oh0CCIem12m v2xRrVWfIammDSbjfa6Qoaplj/pyUD8rptWvRBF4mIWntg1dIIKmuP0fytcRAGPz sY0KSZhxCEvvBtHN8NMrF997Qv0oEehmUXV3yOVNt+ioPV1tfijZZELiBcMebPvG It0V7mOc0FOP1/s0nKgBbiXI9t93TN793uO+X99Z4OrJTzfKOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrnIERLQd26OJGgQ5PT9j2tC47RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZTRmZjFiZmEtODdmZi0z OTdjLWI4ODctMGE4ZjhkYWZkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa2FqSrzJjoHdQwHU+4+mFqgSHZhT3/debBgqSn/jYsYJ6vAZgx57WR +FGQVRkxO3bEeSzWKanuSbwWP3iG7vn4tQrj0G2hwWqVsLAjngGtd+TqCJad9aFv U9EnOWEQuo2DrVQb3ovcYnd4KjPwCAU8y/PloWLtE1xIz1U5SoJvp6h+rWpwIS2X ScyMg03wzdMNUWFcUBnPR7RI0/+Qk+281rWq8MZSqy6X4Y6WJG/dl6HbaqiPFkXM 3/v31zd1kQtYAjG8GwxzPxGfhCUUAMcl7tDMINAjqPqPN0hqmhD19/e6wp0eegR7 goK8DINftqvPSi+TgBwKkX+ohuOU+Z8= -----END CERTIFICATE-----Generated at Tue Oct 13 08:11:19 2026 by rpki-client