$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa File: 3b4f080a-93ea-356c-9216-559219ab2f01.roa (raw, json) Hash identifier: mOq1vZ54NkZ/j4k4vzERzAujlbnH1u7Sg42HFi0nieo= Subject key identifier: A9:19:C9:45:EC:53:0C:21:6E:40:51:09:8D:61:9F:C4:9D:72:98:57 Certificate issuer: /CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Certificate serial: 010D0C9F4328584CC3474257A22C2DB27A6FDA00 Authority key identifier: 01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 8075 IP address blocks: 192.12.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:42:57:a2:2c:2d:b2:7a:6f:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=a9810dcf-e986-4cf2-b103-66c1cd8aad5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:2c:4f:6c:e7:25:eb:e6:1a:27:d4:64:c9: 3d:e5:6d:60:98:1e:a9:06:35:ad:ce:a2:64:cf:7c: 8d:67:38:e2:00:a7:75:cf:22:1a:95:3b:05:fd:55: a5:35:d4:3a:a9:9a:7a:22:52:1a:ef:28:70:a4:b6: 24:d2:44:02:17:46:b6:31:2f:d1:b3:a9:1f:d4:3b: f2:aa:47:2b:d2:d9:28:c9:61:ca:75:68:9d:3c:42: d5:22:1a:e0:6e:da:ec:14:ae:06:73:03:46:a3:67: 6b:fd:61:77:47:d9:f6:4b:78:1c:bf:67:d9:bc:00: 20:f4:c0:2d:64:ea:ae:6f:80:8f:61:5e:7d:b4:38: d1:b9:49:66:ab:fa:cc:40:7b:14:8c:4b:83:ab:43: ab:20:20:1b:7f:c8:26:8d:fc:8d:e0:c6:1b:e3:6c: fa:8c:49:e0:35:22:af:45:e9:c5:22:92:ea:d0:79: de:9d:09:d2:a2:9c:0f:7e:73:31:a3:eb:c1:e5:c6: ea:22:e0:a1:01:78:6d:56:f3:cf:a4:34:13:bd:ea: f8:a6:4d:44:6f:fc:cc:74:e5:6c:d3:cb:57:7e:e2: a6:e3:ee:0c:93:90:40:70:97:fb:47:cb:e2:8f:de: b5:d0:04:af:10:b2:22:2c:b7:44:cc:16:5e:65:b2: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:C9:45:EC:53:0C:21:6E:40:51:09:8D:61:9F:C4:9D:72:98:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl X509v3 Authority Key Identifier: keyid:01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e5:a2:09:6d:45:86:35:1b:1c:26:59:96:76:a8:4e:60:b0: 05:10:d4:4a:f1:99:f4:1d:bb:d7:95:90:20:76:03:40:4d:ac: 62:dd:04:e3:45:f9:f5:bb:49:97:fd:c5:19:81:79:23:0c:78: 84:12:79:f2:ad:76:9a:d9:1d:17:5f:d3:b1:60:69:e8:0f:83: c8:88:30:be:62:f2:24:05:85:ff:10:61:fd:a0:8b:52:3e:7b: f1:ab:3b:1c:14:3b:84:88:e6:e2:27:73:3f:2e:63:65:37:12: cf:6f:4f:65:19:d7:07:81:f6:1c:d6:cd:30:b3:8c:64:c4:ff: ef:9a:6a:e0:8c:9e:32:d3:51:a6:b5:ad:9b:d5:5c:bd:62:08: 44:df:6e:e9:08:2b:6e:41:3d:49:7f:da:57:71:0e:03:ba:42: 43:11:a3:ac:f6:77:e8:e2:f6:f8:ef:db:4d:20:a9:35:24:f0: b5:e7:3c:91:d8:23:f6:2c:2b:ca:e9:f3:12:a4:a4:fe:49:2b: 92:bf:69:af:be:11:6f:a9:ad:42:02:05:33:aa:52:a9:5e:89: 93:29:b4:12:ae:7c:4c:61:18:5b:eb:32:c7:6a:1a:19:e5:d2: d1:e3:3e:ad:13:6c:54:7a:9c:62:98:40:9a:f0:75:69:ee:aa: 4d:73:65:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0JXoiwtsnpv2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhmYmY4YjItZDJiYy00ZWQ4LWJkNTctMmE1ZTQzYTMw ZjNhMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTk4MTBkY2YtZTk4Ni00Y2YyLWIxMDMtNjZjMWNkOGFhZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRcsT2znJevmGifUZMk95W1gmB6pBjWtzqJk z3yNZzjiAKd1zyIalTsF/VWlNdQ6qZp6IlIa7yhwpLYk0kQCF0a2MS/Rs6kf1Dvy qkcr0tkoyWHKdWidPELVIhrgbtrsFK4GcwNGo2dr/WF3R9n2S3gcv2fZvAAg9MAt ZOqub4CPYV59tDjRuUlmq/rMQHsUjEuDq0OrICAbf8gmjfyN4MYb42z6jEngNSKv RenFIpLq0HnenQnSopwPfnMxo+vB5cbqIuChAXhtVvPPpDQTver4pk1Eb/zMdOVs 08tXfuKm4+4Mk5BAcJf7R8vij9610ASvELIiLLdEzBZeZbLuZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkZyUXsUwwhbkBRCY1hn8SdcphXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGZi ZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVlNDNhMzBmM2EvM2I0ZjA4MGEtOTNlYS0z NTZjLTkyMTYtNTU5MjE5YWIyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhmYmY4YjItZDJiYy00ZWQ4LWJk NTctMmE1ZTQzYTMwZjNhL2Q4ZmJmOGIyLWQyYmMtNGVkOC1iZDU3LTJhNWU0M2Ez MGYzYS5jcmwwHwYDVR0jBBgwFoAUAamV2enW0oeEHc6Nh2edpM3R/tQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGZiZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVl NDNhMzBmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTlogltRYY1GxwmWZZ2qE5gsAUQ1ErxmfQdu9eVkCB2A0BNrGLdBONF +fW7SZf9xRmBeSMMeIQSefKtdprZHRdf07FgaegPg8iIML5i8iQFhf8QYf2gi1I+ e/GrOxwUO4SI5uIncz8uY2U3Es9vT2UZ1weB9hzWzTCzjGTE/++aauCMnjLTUaa1 rZvVXL1iCETfbukIK25BPUl/2ldxDgO6QkMRo6z2d+ji9vjv200gqTUk8LXnPJHY I/YsK8rp8xKkpP5JK5K/aa++EW+prUICBTOqUqleiZMptBKufExhGFvrMsdqGhnl 0tHjPq0TbFR6nGKYQJrwdWnuqk1zZTU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:23:35 2026 by rpki-client