$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa File: 3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa (raw, json) Hash identifier: oBnF4a5lKbDGJlV+sk/nS+fSmji4bmC/lenVhoNdy3I= Subject key identifier: 40:B5:C1:CC:CC:8B:D0:99:C5:8E:1E:5C:02:77:67:13:90:6B:D4:57 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584E0005E45662219ED021A5EBC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 11090 IP address blocks: 216.152.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:e4:56:62:21:9e:d0:21:a5:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=03014ce4-7a79-42d1-a3aa-0b651cc7ddd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:00:e2:bf:3f:fc:b2:bb:dd:3c:87:ca:f0: 86:ce:c5:1c:05:3f:55:0f:89:6b:6b:53:e2:0f:a4: e2:8a:d8:5e:84:36:b6:2e:98:e6:ab:e2:16:1e:9f: 98:5e:0c:59:6a:72:55:2a:8e:53:b1:0a:84:b7:d9: 6e:ea:47:a1:a4:28:3b:42:eb:99:e0:f2:fe:ae:37: 1a:15:7f:58:44:8e:70:bf:1a:98:f6:08:e9:f4:ef: 5d:5f:67:74:5d:7d:b2:d3:91:6c:3a:f2:b5:4e:94: 1b:da:b1:fa:8f:ea:09:85:73:7b:6d:77:6d:52:30: 49:3e:b8:c0:16:0e:89:25:f3:f1:99:d4:79:6e:13: 6b:9e:db:5c:c3:78:d2:b7:7f:14:7f:52:20:8c:23: 5c:91:f2:05:14:9e:48:e4:e7:1c:ee:ab:51:a2:e6: 2e:fb:32:13:62:66:bc:af:c5:02:5e:d8:a6:7c:d9: 08:7d:3e:68:b9:f4:e4:1d:40:29:2f:fa:ad:7d:b9: 1d:38:4d:ca:40:14:a9:24:ee:b9:cb:a6:50:82:59: ea:11:ef:cf:0b:a9:3b:3c:29:a2:99:ae:24:6c:59: 17:de:00:5e:a3:7b:14:ae:b1:6b:c5:e4:f2:1d:80: e4:78:bc:ad:3a:d8:9c:cd:45:1d:8c:ab:39:5f:09: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B5:C1:CC:CC:8B:D0:99:C5:8E:1E:5C:02:77:67:13:90:6B:D4:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a2:ed:fb:aa:83:58:15:cd:d4:24:fb:3d:fc:8b:42:57:fd: 84:5d:02:33:93:21:29:5d:7d:c0:e7:cf:e2:4a:35:47:85:42: 14:7b:b6:c3:30:56:9a:1e:18:78:63:3f:d9:3b:c4:67:94:52: ef:82:69:a7:7f:e7:cf:c9:97:01:ee:0c:ee:92:17:98:1c:89: 7b:49:df:a3:fc:3a:3c:f0:79:a9:7e:31:dd:b7:84:20:28:2c: e3:e0:b7:66:d8:2c:ea:1d:52:e0:d0:87:99:33:71:e0:36:75: 79:ca:67:56:39:19:56:fd:c3:88:e8:8b:9d:0b:83:74:5c:7a: 9b:cf:1b:d5:d3:5d:b7:32:85:33:0a:08:9e:2f:e1:08:d6:a6: 06:86:2b:3e:cd:65:01:82:22:77:c8:b5:3f:4c:70:b1:dc:4f: ee:60:23:73:dd:8b:ee:fc:64:8d:34:83:1d:0e:93:48:de:77: be:2e:f6:11:84:96:b5:db:b6:04:50:74:9d:08:d5:a4:ba:39: 18:46:75:7c:35:e5:89:85:53:93:f3:9e:eb:e9:27:02:c3:05: 1e:f3:94:80:00:71:df:60:a9:8c:e3:41:3e:4b:62:74:0d:74: 37:39:6e:02:36:20:32:bc:02:c2:e3:c5:38:ac:b3:17:69:f4: f5:e9:d1:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABeRWYiGe0CGl68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MDMwMTRjZTQtN2E3OS00MmQxLWEzYWEtMGI2NTFjYzdkZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv58A4r8//LK73TyHyvCGzsUcBT9VD4lra1Pi D6TiithehDa2Lpjmq+IWHp+YXgxZanJVKo5TsQqEt9lu6kehpCg7QuuZ4PL+rjca FX9YRI5wvxqY9gjp9O9dX2d0XX2y05FsOvK1TpQb2rH6j+oJhXN7bXdtUjBJPrjA Fg6JJfPxmdR5bhNrnttcw3jSt38Uf1IgjCNckfIFFJ5I5Occ7qtRouYu+zITYma8 r8UCXtimfNkIfT5oufTkHUApL/qtfbkdOE3KQBSpJO65y6ZQglnqEe/PC6k7PCmi ma4kbFkX3gBeo3sUrrFrxeTyHYDkeLytOticzUUdjKs5XwmjVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC1wczMi9CZxY4eXAJ3ZxOQa9RXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2IyNjhkMTQtN2VjMy0z ZjNjLWEwZDYtYWMyYTY2OWM2MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+i7fuqg1gVzdQk+z38i0JX/YRdAjOTISldfcDnz+JKNUeFQhR7tsMw VpoeGHhjP9k7xGeUUu+Caad/58/JlwHuDO6SF5gciXtJ36P8Ojzweal+Md23hCAo LOPgt2bYLOodUuDQh5kzceA2dXnKZ1Y5GVb9w4joi50Lg3RcepvPG9XTXbcyhTMK CJ4v4QjWpgaGKz7NZQGCInfItT9McLHcT+5gI3Pdi+78ZI00gx0Ok0jed74u9hGE lrXbtgRQdJ0I1aS6ORhGdXw15YmFU5PznuvpJwLDBR7zlIAAcd9gqYzjQT5LYnQN dDc5bgI2IDK8AsLjxTissxdp9PXp0dM= -----END CERTIFICATE-----Generated at Sat Jun 13 13:05:36 2026 by rpki-client