$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa File: 3f9ad2a5-8547-3650-a790-25df90ed3852.roa (raw, json) Hash identifier: 4OJZxTpFqSrdiRsTc/6sbyPGfMAJEuIRBGJufNX/KpQ= Subject key identifier: 3F:EF:0A:C4:A1:0B:73:23:88:5B:72:D4:31:4B:9A:B0:E3:B0:0A:89 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584F612D626A5523457C6E964980 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 395807 IP address blocks: 199.60.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:62:6a:55:23:45:7c:6e:96:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=25415e56-e271-4fb2-9801-f0c2f0b535de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:9a:89:59:75:43:19:da:4e:b4:b6:7f:fe: 62:b8:11:e9:66:16:7a:cb:87:fe:ab:df:fc:1a:d4: ac:13:ad:b2:93:be:70:e7:95:36:1e:c1:c6:97:c9: d4:10:fb:ae:20:2c:a0:60:fb:25:56:44:83:4c:24: 2c:2e:91:d7:a7:e0:33:bc:eb:0b:40:d3:17:12:70: 3c:96:c0:9a:17:af:a9:6a:3e:88:93:2d:58:51:f3: c0:4b:48:87:4f:ef:03:22:7e:1a:ce:f0:7f:c9:54: 75:7e:d0:b9:da:1d:c5:4b:ad:b9:52:89:ea:87:3b: a4:b9:bf:d1:6c:68:0e:45:f3:50:af:6e:60:64:5c: a3:13:46:a7:60:95:c7:38:b0:53:af:ba:45:73:f1: db:fc:4a:92:81:41:62:36:00:e8:f2:0d:64:d4:5e: 41:44:15:15:ea:f0:fb:e6:3f:b0:9f:95:c3:2f:bc: 68:c5:c4:6e:04:47:55:66:38:38:9d:17:fb:bd:9b: 77:24:c0:11:63:45:9d:86:b8:81:54:7f:f3:7e:db: 9d:6d:39:58:17:be:aa:73:e7:63:d1:f6:c1:55:b2: 2e:cb:c4:cd:24:87:5a:6a:69:59:9b:70:14:5b:21: 6d:42:61:e7:25:35:ff:5c:f4:29:cc:b8:94:db:87: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EF:0A:C4:A1:0B:73:23:88:5B:72:D4:31:4B:9A:B0:E3:B0:0A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2e:9a:7a:44:ea:48:5e:54:e1:42:60:11:af:0a:e4:ed:27: 2a:26:86:8c:7d:51:25:11:41:91:8b:2d:7e:3a:5a:2d:2b:cb: 32:e1:ba:cf:e3:59:3b:41:d9:34:66:d6:c8:2c:0a:75:a6:27: ca:85:f3:79:3b:51:09:9f:57:57:5f:09:ae:13:18:0f:95:bd: 36:f9:ce:15:d8:a0:a3:9c:a8:4e:eb:62:17:23:bd:83:cf:46: 64:80:f1:89:81:f2:7d:90:1f:23:de:7e:12:9d:22:ba:1f:8a: 35:28:45:f7:c9:69:89:df:3a:94:ce:98:82:87:69:dd:7c:bd: 4b:f5:5d:fd:83:de:96:d4:ee:9e:ad:1f:c7:1a:e8:fd:c8:a2: 47:54:64:bf:f8:81:5b:44:2d:94:c8:21:b3:fd:0d:dc:44:67: 93:fc:be:ec:ac:b5:6f:7f:d2:1e:28:c2:9e:e8:dc:eb:8b:0b: d5:72:0c:fc:5a:70:40:af:99:78:56:73:ff:b1:ff:2e:e1:34: 28:ed:a7:ee:f5:de:27:84:80:64:d3:d2:53:92:f0:58:9a:3a: 92:13:f2:ba:94:b9:75:66:8a:86:e7:02:b1:10:b2:e1:4d:3e: b6:f8:9a:e8:a0:5c:03:db:c4:6f:8d:ab:4c:04:81:b1:b6:db: c1:c7:33:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWJqVSNFfG6WSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MjU0MTVlNTYtZTI3MS00ZmIyLTk4MDEtZjBjMmYwYjUzNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDCaiVl1QxnaTrS2f/5iuBHpZhZ6y4f+q9/8 GtSsE62yk75w55U2HsHGl8nUEPuuICygYPslVkSDTCQsLpHXp+AzvOsLQNMXEnA8 lsCaF6+paj6Iky1YUfPAS0iHT+8DIn4azvB/yVR1ftC52h3FS625Uonqhzukub/R bGgORfNQr25gZFyjE0anYJXHOLBTr7pFc/Hb/EqSgUFiNgDo8g1k1F5BRBUV6vD7 5j+wn5XDL7xoxcRuBEdVZjg4nRf7vZt3JMARY0WdhriBVH/zftudbTlYF76qc+dj 0fbBVbIuy8TNJIdaamlZm3AUWyFtQmHnJTX/XPQpzLiU24e1QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/vCsShC3MjiFty1DFLmrDjsAqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvM2Y5YWQyYTUtODU0Ny0z NjUwLWE3OTAtMjVkZjkwZWQzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxzyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoumnpE6kheVOFCYBGvCuTtJyomhox9USURQZGLLX46Wi0ryzLhus/j WTtB2TRm1sgsCnWmJ8qF83k7UQmfV1dfCa4TGA+VvTb5zhXYoKOcqE7rYhcjvYPP RmSA8YmB8n2QHyPefhKdIrofijUoRffJaYnfOpTOmIKHad18vUv1Xf2D3pbU7p6t H8ca6P3IokdUZL/4gVtELZTIIbP9DdxEZ5P8vuystW9/0h4owp7o3OuLC9VyDPxa cECvmXhWc/+x/y7hNCjtp+713ieEgGTT0lOS8FiaOpIT8rqUuXVmiobnArEQsuFN Prb4muigXAPbxG+Nq0wEgbG228HHMxE= -----END CERTIFICATE-----Generated at Sun Oct 11 11:08:39 2026 by rpki-client