$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa File: ef290b1f-5b52-39da-9484-acbda5333639.roa (raw, json) Hash identifier: HiGJZVt7iAZTI1UIC8ES061KW7g0gHf59HabBfujvJg= Subject key identifier: EA:FC:BD:0D:B6:B1:15:4F:8C:C3:35:80:D4:25:1A:A6:D5:72:F8:06 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F506D4E306D8A06E9C6F5ED00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 11090 IP address blocks: 64.4.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4e:30:6d:8a:06:e9:c6:f5:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=f3d508a9-9eb4-499e-aa48-9d649793e19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:4c:a7:5b:e4:0d:e6:89:70:96:ec:b2:79: 8e:8d:3a:3f:bb:ea:63:14:9c:5c:ce:6e:57:01:32: c5:df:94:b5:8d:28:db:96:9e:6e:7c:a2:c5:8d:6d: fc:41:d3:85:bc:4f:6c:a3:99:b0:96:05:83:c2:1a: 79:6c:f5:c8:7c:32:d5:00:9d:2d:39:29:be:2c:e0: 1a:e3:ff:43:d2:66:26:83:d7:a4:88:e7:dc:65:3e: ee:27:dc:82:f6:4b:bf:a0:f2:9c:fc:63:e5:3b:87: 10:fa:47:d1:57:84:5c:90:f3:c4:fc:30:21:83:74: 38:25:27:32:e2:10:d1:5c:1c:de:5c:3d:bd:6a:1f: 37:3c:be:bc:b6:46:fb:33:f5:25:ee:1f:3e:ec:b9: 9c:e4:8c:9e:57:52:8b:57:b5:73:ed:d5:53:fe:39: a6:0a:81:24:51:2e:08:c9:6d:f9:3f:5f:98:b5:df: 5e:66:d6:91:f8:14:63:47:61:d7:c2:a7:08:5d:3f: 07:c1:a7:6a:e0:64:e9:b4:e4:a1:6f:d9:79:99:2e: 99:87:4a:ff:2f:c5:7a:60:da:09:82:bf:56:e4:39: 37:88:59:fa:23:d4:79:16:c9:ab:fa:95:7d:ff:df: a2:d1:9f:d8:bb:9d:5c:62:0b:a1:c3:3d:9a:de:7c: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:BD:0D:B6:B1:15:4F:8C:C3:35:80:D4:25:1A:A6:D5:72:F8:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:32:37:e7:fb:a7:28:f5:19:42:ed:b4:96:72:6c:0d:34:7d: f6:e7:aa:ba:f7:4c:ff:e4:bf:cb:43:ef:ab:7d:1b:1b:e0:bc: d1:55:ee:a0:2e:be:81:44:ea:fa:11:bc:82:4b:1f:c2:96:b5: 87:a3:66:d9:3a:98:3f:7e:81:a5:a5:1d:94:12:99:22:4f:cb: 13:95:36:f4:04:5f:4d:cd:d8:c6:4c:06:b7:ab:f2:05:96:25: e5:4c:2d:76:fd:f7:07:f4:1f:cf:7b:fa:a4:21:db:e0:d0:04: 62:89:e6:ec:27:c9:bb:2b:fa:f2:dc:fc:ae:52:ea:89:5c:64: f0:d1:41:3e:0c:d5:e2:92:3b:27:11:6b:2c:d7:ff:84:1f:b6: 72:bd:b1:67:ec:d2:03:af:60:98:f1:0e:78:10:f4:09:b2:fb: 0d:d3:d7:50:24:b2:90:44:ae:b9:23:e5:f6:a2:f6:eb:4f:fa: 0d:db:70:9b:f2:9e:6b:ea:58:7b:91:a2:c3:02:0b:58:d3:31: da:5a:94:a5:e1:0f:a0:6e:76:73:96:df:15:86:a9:1c:b8:2d: f8:07:a9:b9:55:fc:11:29:5b:f9:4f:99:5d:02:5a:18:62:e8: 1a:59:ef:6a:0b:1a:ff:4c:0c:23:98:c2:71:a5:5c:60:3c:21: 0a:05:07:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU4wbYoG6cb17QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjNkNTA4YTktOWViNC00OTllLWFhNDgtOWQ2NDk3OTNlMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqthMp1vkDeaJcJbssnmOjTo/u+pjFJxczm5X ATLF35S1jSjblp5ufKLFjW38QdOFvE9so5mwlgWDwhp5bPXIfDLVAJ0tOSm+LOAa 4/9D0mYmg9ekiOfcZT7uJ9yC9ku/oPKc/GPlO4cQ+kfRV4RckPPE/DAhg3Q4JScy 4hDRXBzeXD29ah83PL68tkb7M/Ul7h8+7Lmc5IyeV1KLV7Vz7dVT/jmmCoEkUS4I yW35P1+Ytd9eZtaR+BRjR2HXwqcIXT8Hwadq4GTptOShb9l5mS6Zh0r/L8V6YNoJ gr9W5Dk3iFn6I9R5Fsmr+pV9/9+i0Z/Yu51cYguhwz2a3nxUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr8vQ22sRVPjMM1gNQlGqbVcvgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZWYyOTBiMWYtNWI1Mi0z OWRhLTk0ODQtYWNiZGE1MzMzNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYyN+f7pyj1GULttJZybA00ffbnqrr3TP/kv8tD76t9GxvgvNFV7qAu voFE6voRvIJLH8KWtYejZtk6mD9+gaWlHZQSmSJPyxOVNvQEX03N2MZMBrer8gWW JeVMLXb99wf0H897+qQh2+DQBGKJ5uwnybsr+vLc/K5S6olcZPDRQT4M1eKSOycR ayzX/4QftnK9sWfs0gOvYJjxDngQ9Amy+w3T11AkspBErrkj5fai9utP+g3bcJvy nmvqWHuRosMCC1jTMdpalKXhD6BudnOW3xWGqRy4LfgHqblV/BEpW/lPmV0CWhhi 6BpZ72oLGv9MDCOYwnGlXGA8IQoFB2g= -----END CERTIFICATE-----Generated at Tue Oct 13 17:35:54 2026 by rpki-client