$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa File: 3b4f080a-93ea-356c-9216-559219ab2f01.roa (raw, json) Hash identifier: B6CyoF3ZNbKBj0ojkFL/+/JVfV1JOrzhP0x2SBk7nOk= Subject key identifier: 31:96:81:79:29:1A:82:A1:F0:BB:63:E7:85:C4:A6:C1:FC:89:C6:4A Certificate issuer: /CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Certificate serial: 010D0C9F4328584F268D062EA38B73928710FF80 Authority key identifier: 01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 8075 IP address blocks: 192.12.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:06:2e:a3:8b:73:92:87:10:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=323fa4d0-16e2-488c-b764-1512f80de772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:4d:7f:b3:d7:9b:f8:0b:4b:d5:86:d3:23: f0:f2:09:08:60:e2:c9:96:42:cc:06:9e:1a:b5:73: a7:70:fd:3d:31:4b:e1:42:98:7d:d4:95:49:15:bc: 1b:e9:96:0f:d6:27:b2:f2:71:3b:c8:69:c2:20:44: 1c:09:36:2e:a6:42:b9:cf:02:3f:a0:81:4c:04:a1: 61:b7:63:0a:4e:14:9c:0b:82:61:36:69:d2:ad:98: 6a:ff:29:7b:ab:f3:ba:c1:fa:f3:f2:2a:c5:c1:15: 15:5d:61:8a:92:6e:bd:81:21:c9:6b:d9:00:0b:8c: 22:a5:27:46:5d:49:53:e4:6d:21:01:6a:26:30:cf: 07:27:e9:c0:7b:78:3a:65:a0:a7:4e:3c:a1:3d:45: c3:66:4e:8e:63:e7:60:dd:71:83:0c:32:50:e0:35: 56:8f:e9:c3:ac:66:ad:65:35:70:b0:c8:07:f9:78: 3a:33:18:b2:df:f1:ad:8e:33:c4:45:6d:d6:dd:f9: 19:33:0c:86:3b:ff:b2:37:74:0b:61:21:8a:77:30: cb:5e:02:a2:a3:53:a0:ca:92:0f:e6:51:87:d5:d3: ab:86:17:6f:65:a3:e0:4b:69:ef:ba:9d:0e:3b:33: 24:d6:9c:18:96:b4:b5:82:1e:07:27:d2:73:06:03: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:81:79:29:1A:82:A1:F0:BB:63:E7:85:C4:A6:C1:FC:89:C6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl X509v3 Authority Key Identifier: keyid:01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f5:aa:36:89:2b:e4:7d:aa:4c:3f:cb:d1:0b:fa:8e:b7:eb: 23:9a:d3:5f:7b:77:69:69:41:fe:b4:e0:09:c5:e7:58:95:dd: de:d7:d7:b8:73:97:5c:42:20:6a:25:c9:d9:f2:0e:67:32:a1: c9:62:13:64:88:e3:35:b2:70:9d:38:19:3a:03:d5:98:74:2e: 12:03:dc:7c:36:a3:18:87:5f:0a:30:8b:a7:f9:5e:96:2b:25: 1a:a7:fe:75:a8:f8:a1:92:04:c8:a3:e0:81:ad:5c:eb:72:21: c0:1c:cf:c7:fb:71:7b:71:a9:e7:38:fb:1d:46:dd:ab:06:be: 6e:c5:24:6b:83:b1:04:99:9e:f3:34:44:27:77:8d:6c:5e:8d: fc:d4:de:a0:d5:43:19:28:27:62:59:ad:ea:80:08:ed:7a:d2: 0f:37:ff:33:eb:88:79:e2:b9:10:ee:13:bf:1e:81:79:40:dc: d9:30:7e:d7:c1:c2:4b:fd:b2:63:57:34:65:dd:30:f7:1c:1c: 3f:5b:0b:12:c1:5a:e0:bd:b7:ea:09:38:82:8b:64:88:6d:98: 90:e9:8c:dc:60:42:f0:d7:82:b3:a7:24:7c:49:ac:c4:34:15: bc:cf:5a:7a:ca:06:53:1d:d8:5f:c1:91:1c:6c:0b:de:d1:8a: 2d:2e:ca:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQYuo4tzkocQ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhmYmY4YjItZDJiYy00ZWQ4LWJkNTctMmE1ZTQzYTMw ZjNhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk MzIzZmE0ZDAtMTZlMi00ODhjLWI3NjQtMTUxMmY4MGRlNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMBNf7PXm/gLS9WG0yPw8gkIYOLJlkLMBp4a tXOncP09MUvhQph91JVJFbwb6ZYP1iey8nE7yGnCIEQcCTYupkK5zwI/oIFMBKFh t2MKThScC4JhNmnSrZhq/yl7q/O6wfrz8irFwRUVXWGKkm69gSHJa9kAC4wipSdG XUlT5G0hAWomMM8HJ+nAe3g6ZaCnTjyhPUXDZk6OY+dg3XGDDDJQ4DVWj+nDrGat ZTVwsMgH+Xg6Mxiy3/GtjjPERW3W3fkZMwyGO/+yN3QLYSGKdzDLXgKio1OgypIP 5lGH1dOrhhdvZaPgS2nvup0OOzMk1pwYlrS1gh4HJ9JzBgPtywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGWgXkpGoKh8Ltj54XEpsH8icZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGZi ZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVlNDNhMzBmM2EvM2I0ZjA4MGEtOTNlYS0z NTZjLTkyMTYtNTU5MjE5YWIyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhmYmY4YjItZDJiYy00ZWQ4LWJk NTctMmE1ZTQzYTMwZjNhL2Q4ZmJmOGIyLWQyYmMtNGVkOC1iZDU3LTJhNWU0M2Ez MGYzYS5jcmwwHwYDVR0jBBgwFoAUAamV2enW0oeEHc6Nh2edpM3R/tQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGZiZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVl NDNhMzBmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP1qjaJK+R9qkw/y9EL+o636yOa0197d2lpQf604AnF51iV3d7X17hz l1xCIGolydnyDmcyocliE2SI4zWycJ04GToD1Zh0LhID3Hw2oxiHXwowi6f5XpYr JRqn/nWo+KGSBMij4IGtXOtyIcAcz8f7cXtxqec4+x1G3asGvm7FJGuDsQSZnvM0 RCd3jWxejfzU3qDVQxkoJ2JZreqACO160g83/zPriHniuRDuE78egXlA3NkwftfB wkv9smNXNGXdMPccHD9bCxLBWuC9t+oJOIKLZIhtmJDpjNxgQvDXgrOnJHxJrMQ0 FbzPWnrKBlMd2F/BkRxsC97Rii0uyj0= -----END CERTIFICATE-----Generated at Mon Sep 21 16:07:54 2026 by rpki-client