$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f6694cc-437e-3114-a07b-066cb267d9d3.roa File: 3f6694cc-437e-3114-a07b-066cb267d9d3.roa (raw, json) Hash identifier: oN70PdyYaUrUP2ppPVuCJCJ/Q04E1KiFq8b6ndLs6g8= Subject key identifier: C7:74:39:4C:7D:C9:2C:83:29:53:8D:33:F2:2D:93:6D:CB:9C:70:9E Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584F612D62A2310922A0C959F480 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f6694cc-437e-3114-a07b-066cb267d9d3.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 395807 IP address blocks: 199.60.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:62:a2:31:09:22:a0:c9:59:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=2d299079-8078-4cdc-8ba4-df765d9b6c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:30:62:25:8f:65:bc:07:31:2e:8e:4a:56: dd:20:53:98:a1:7b:f7:d2:12:c6:93:63:47:e1:03: b1:b5:80:a1:e4:32:96:57:fd:fd:10:d2:7c:72:e4: 78:3d:83:bf:b1:7e:4c:6b:04:b6:0d:dc:a2:48:f3: aa:ab:55:9c:b8:6b:0f:77:49:7d:5f:c7:72:a9:08: db:2d:c6:d5:7d:31:98:2f:4c:94:2f:f2:05:99:1f: 49:06:28:e3:24:2d:63:0f:82:ac:3b:d8:dc:c8:27: be:14:b8:5a:ad:79:cb:be:af:22:f5:48:fa:52:c1: 2e:28:bf:f5:75:85:cb:69:ad:da:c5:a7:42:79:38: 49:3b:c8:b5:1f:cd:d0:88:8d:fc:d1:08:c9:63:3b: 5f:d8:4d:e2:1b:24:4f:4b:8a:a4:4d:c8:4a:c3:db: fb:46:a8:80:04:7b:a2:57:11:a3:30:d0:35:d7:f0: 50:29:89:0c:b0:24:e5:90:d3:4a:bd:08:92:eb:fd: 39:95:c4:93:e2:12:19:3e:eb:5d:62:01:2e:0e:85: d6:36:67:a8:84:77:72:05:3d:99:08:22:82:85:e4: 82:8c:0d:ba:f2:74:77:c6:77:af:2a:ca:fc:e1:58: 11:52:d4:11:43:b6:8c:ee:12:c2:03:28:24:5a:92: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:74:39:4C:7D:C9:2C:83:29:53:8D:33:F2:2D:93:6D:CB:9C:70:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f6694cc-437e-3114-a07b-066cb267d9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2c:ed:ff:68:97:ae:5e:65:ac:b9:ad:ee:4a:eb:8e:b7:b1: cd:6e:91:09:10:ef:86:cc:61:2c:38:62:38:2b:86:49:49:17: 2a:55:1a:0d:93:de:cf:f2:cb:64:4b:f3:ef:8e:67:5a:cf:6c: 81:33:27:74:32:be:e6:93:52:56:ec:f4:e7:6d:73:aa:9f:42: 81:81:a9:5c:70:1a:22:b4:c3:a0:dd:61:cf:88:38:49:cd:03: 03:31:87:61:6a:e6:8c:9e:1a:cb:29:be:22:29:c3:fb:54:6f: 5c:24:f3:f5:b0:68:08:8e:4f:fb:d1:d8:63:ab:08:e0:dd:cc: b4:cf:ce:5c:6d:70:c7:11:dd:47:22:5c:9e:da:e4:6c:cf:f1: 84:78:0a:83:17:0f:88:07:b0:2f:7c:9b:65:c6:59:a5:55:37: 7b:41:da:42:15:12:dc:48:71:97:00:3a:a4:ba:4a:0d:bd:7a: 26:89:93:85:7b:48:0a:32:ca:9a:00:f1:34:ec:cb:3d:f3:75: a2:68:f1:97:9e:17:78:26:e4:e7:04:9a:d0:cd:81:3d:1c:43: 7a:98:d9:2a:6a:e7:75:83:a9:c0:12:8e:ad:8f:c9:0b:20:f8: d1:70:b2:f2:4b:b0:ec:2e:71:f0:4f:26:38:d5:5e:7d:72:12: 4d:4d:a3:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWKiMQkioMlZ9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MmQyOTkwNzktODA3OC00Y2RjLThiYTQtZGY3NjVkOWI2YzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPYwYiWPZbwHMS6OSlbdIFOYoXv30hLGk2NH 4QOxtYCh5DKWV/39ENJ8cuR4PYO/sX5MawS2DdyiSPOqq1WcuGsPd0l9X8dyqQjb LcbVfTGYL0yUL/IFmR9JBijjJC1jD4KsO9jcyCe+FLharXnLvq8i9Uj6UsEuKL/1 dYXLaa3axadCeThJO8i1H83QiI380QjJYztf2E3iGyRPS4qkTchKw9v7RqiABHui VxGjMNA11/BQKYkMsCTlkNNKvQiS6/05lcST4hIZPutdYgEuDoXWNmeohHdyBT2Z CCKCheSCjA268nR3xnevKsr84VgRUtQRQ7aM7hLCAygkWpIhTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd0OUx9ySyDKVONM/Itk23LnHCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvM2Y2Njk0Y2MtNDM3ZS0z MTE0LWEwN2ItMDY2Y2IyNjdkOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABss7f9ol65eZay5re5K6463sc1ukQkQ74bMYSw4YjgrhklJFypVGg2T 3s/yy2RL8++OZ1rPbIEzJ3QyvuaTUlbs9Odtc6qfQoGBqVxwGiK0w6DdYc+IOEnN AwMxh2Fq5oyeGsspviIpw/tUb1wk8/WwaAiOT/vR2GOrCODdzLTPzlxtcMcR3Uci XJ7a5GzP8YR4CoMXD4gHsC98m2XGWaVVN3tB2kIVEtxIcZcAOqS6Sg29eiaJk4V7 SAoyypoA8TTsyz3zdaJo8ZeeF3gm5OcEmtDNgT0cQ3qY2Spq53WDqcASjq2PyQsg +NFwsvJLsOwucfBPJjjVXn1yEk1No5E= -----END CERTIFICATE-----Generated at Sat Oct 10 13:48:45 2026 by rpki-client