$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa File: 3a897dcb-8200-3442-a76b-4fec09f925ce.roa (raw, json) Hash identifier: nTQ4fTKL1CgqYegrHsITs+2eWziC5H2S6vZ6dmIoziE= Subject key identifier: 92:DC:F7:4F:68:31:A2:F3:89:7C:FB:3C:E5:59:39:2E:68:20:2A:64 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584DFA7084FBE8ABAB66DE354680 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 11090 IP address blocks: 199.192.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:84:fb:e8:ab:ab:66:de:35:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=1b6ea006-b2bd-498e-b324-0d89c3829b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:23:d6:09:b9:3b:cb:55:cc:2f:ec:6e:ab: ac:1f:2e:58:fb:0b:bf:66:0d:2d:43:85:8d:0c:19: c8:92:e9:07:0f:64:18:e3:9b:53:23:3e:b6:b5:3a: d3:da:1e:ad:09:66:73:c2:a0:6a:c9:55:f6:d0:32: 02:a4:d8:fa:03:21:26:2b:f0:bf:0c:69:2b:fe:22: 71:20:7e:66:62:41:a7:c2:b5:b1:b7:de:0b:a5:fe: 95:0a:ed:a2:8c:73:d4:f0:4c:c2:ab:c0:27:f0:a5: 82:1d:ae:aa:5a:11:c1:5c:61:a6:ef:92:80:3b:f5: 88:9a:9c:fc:01:70:ba:80:33:b9:95:a9:77:81:ff: 03:53:6c:31:4a:b4:b9:1d:ed:b6:41:d5:50:5f:3a: 4f:31:91:a7:87:cb:a6:d5:60:6c:13:4c:56:99:93: 15:51:d2:ff:4c:59:ba:e6:ed:19:8e:62:c9:b0:c7: 4f:b5:41:25:37:9c:e8:87:b3:08:e7:06:a4:82:7f: d2:59:00:ef:06:5d:5c:ea:21:47:19:02:84:f4:df: f2:37:e1:9f:ae:c3:18:54:05:cb:75:1d:fd:5f:0e: cf:74:74:39:5c:e2:4d:2e:c0:19:b5:3d:2c:53:29: 56:5e:cd:95:d5:8e:5d:50:a5:4d:5a:72:73:5d:2c: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DC:F7:4F:68:31:A2:F3:89:7C:FB:3C:E5:59:39:2E:68:20:2A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:51:7b:32:4e:17:df:51:e7:4d:62:ae:3d:cd:f4:4a:d2:51: 52:2f:48:bf:c3:12:00:b6:b5:03:14:10:d1:45:10:8d:df:72: 98:25:c9:2c:4f:82:62:be:6b:88:ca:5a:cd:f5:dc:b1:89:92: c8:d2:6c:25:11:8a:37:36:f7:49:41:c6:bd:db:76:06:ff:62: ff:18:83:31:2d:96:9c:43:b7:77:8f:86:e6:15:9d:d6:05:d6: ba:cd:64:1b:b4:51:3e:d2:9e:0a:1f:2b:5b:f0:b7:0d:f6:59: 0c:2b:c7:a5:4c:9b:d2:2b:b0:94:82:c8:97:12:3a:07:0a:88: e7:c9:53:a6:54:34:2b:f9:49:8c:01:e2:92:7d:74:b5:50:e0: 71:fa:47:ef:0e:69:04:f9:bc:5e:9b:2a:d3:e4:df:70:17:c4: ce:fe:f8:05:0e:67:bc:4a:55:23:cf:d9:0d:10:b3:76:71:06: c9:0d:90:ee:46:b2:41:03:54:ff:f3:25:c3:db:70:71:7c:85: dd:ac:a2:e0:86:a7:9a:ba:ef:68:b8:f1:a3:b4:86:3d:33:6c: 7b:16:49:73:91:16:bf:2f:db:74:57:97:96:40:53:67:08:99: 82:00:22:c5:1b:03:d0:98:7d:37:11:8b:b6:d2:d7:db:3c:0e: d2:f3:a5:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIT76KurZt41RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MWI2ZWEwMDYtYjJiZC00OThlLWIzMjQtMGQ4OWMzODI5YjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y8j1gm5O8tVzC/sbqusHy5Y+wu/Zg0tQ4WN DBnIkukHD2QY45tTIz62tTrT2h6tCWZzwqBqyVX20DICpNj6AyEmK/C/DGkr/iJx IH5mYkGnwrWxt94Lpf6VCu2ijHPU8EzCq8An8KWCHa6qWhHBXGGm75KAO/WImpz8 AXC6gDO5lal3gf8DU2wxSrS5He22QdVQXzpPMZGnh8um1WBsE0xWmZMVUdL/TFm6 5u0ZjmLJsMdPtUElN5zoh7MI5wakgn/SWQDvBl1c6iFHGQKE9N/yN+GfrsMYVAXL dR39Xw7PdHQ5XOJNLsAZtT0sUylWXs2V1Y5dUKVNWnJzXSxejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLc909oMaLziXz7POVZOS5oICpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2E4OTdkY2ItODIwMC0z NDQyLWE3NmItNGZlYzA5ZjkyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJRezJOF99R501irj3N9ErSUVIvSL/DEgC2tQMUENFFEI3fcpglySxP gmK+a4jKWs313LGJksjSbCURijc290lBxr3bdgb/Yv8YgzEtlpxDt3ePhuYVndYF 1rrNZBu0UT7SngofK1vwtw32WQwrx6VMm9IrsJSCyJcSOgcKiOfJU6ZUNCv5SYwB 4pJ9dLVQ4HH6R+8OaQT5vF6bKtPk33AXxM7++AUOZ7xKVSPP2Q0Qs3ZxBskNkO5G skEDVP/zJcPbcHF8hd2souCGp5q672i48aO0hj0zbHsWSXORFr8v23RXl5ZAU2cI mYIAIsUbA9CYfTcRi7bS19s8DtLzpTM= -----END CERTIFICATE-----Generated at Sat Jun 13 14:22:57 2026 by rpki-client