$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa File: 3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa (raw, json) Hash identifier: dfkoDqy7u/l2KSlJPfbxi6po5uCsv5CISsjnw5MRM/Y= Subject key identifier: DC:B3:AF:00:66:3B:43:78:3E:06:F1:23:5B:1B:6E:21:40:D4:D3:5A Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584E0C1ED62ED70F860CB4D33000 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 11090 IP address blocks: 64.4.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d6:2e:d7:0f:86:0c:b4:d3:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=a1b119a0-42f6-4659-9dab-f3d251d08a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:34:2f:c7:f4:af:08:d8:38:f9:5f:57:36: 41:c6:9d:ad:c6:13:84:74:b1:68:85:ca:ed:2d:40: 8e:4e:fa:1d:62:43:63:61:96:00:fa:a2:3d:a2:55: 0b:cd:7f:ea:3e:bb:28:bc:c4:10:30:a6:1e:8c:d9: 89:ef:24:e4:45:a3:ed:ee:58:1a:82:c9:12:e6:2f: d0:2b:9d:71:d2:6e:04:8e:1c:68:f8:89:6d:8b:bd: 8c:74:70:71:00:0e:2a:82:86:ba:43:c3:39:ed:06: 18:0e:d3:97:b9:81:9f:79:53:4e:26:4d:e3:2f:8a: cd:16:a6:a8:3a:8f:ad:f4:2f:4f:32:91:47:99:9d: f5:ee:b0:4e:31:c0:c1:23:11:f5:f7:fe:32:bc:1c: 08:34:a5:25:7d:f1:ae:2b:84:f2:c6:cb:7e:98:57: ea:27:f4:07:0f:72:ff:9d:ed:7f:67:95:0a:f7:bf: 60:0e:18:97:6d:36:c5:7e:ae:15:24:7d:b1:9a:0f: 51:17:d4:13:ec:df:15:e7:61:5d:9e:4d:13:d4:40: 18:e2:ac:c6:19:0c:41:3b:58:b3:bd:bd:53:94:d2: 9b:f7:67:a6:37:32:9d:9b:e7:c7:dd:e4:45:89:08: f1:68:1a:b5:b7:bc:06:cf:1e:34:25:b6:e9:c3:2d: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B3:AF:00:66:3B:43:78:3E:06:F1:23:5B:1B:6E:21:40:D4:D3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5d:a7:66:ee:25:76:54:43:84:51:a8:cc:30:bd:f7:4e:67: 66:45:8e:54:5b:a6:f7:3c:ef:f1:ad:95:13:36:1f:2c:64:72: 39:0e:60:c2:69:a2:f3:e2:37:da:f6:21:20:3a:cc:9e:15:3f: 73:c8:62:6c:50:93:e0:5c:05:32:3b:a8:8a:ef:d9:d6:62:4b: 8b:f5:15:5f:99:6b:db:6f:71:15:5a:7c:eb:fa:70:ff:08:ef: 1c:b3:84:a7:53:1c:c7:0f:01:43:2f:20:a8:c0:8f:76:14:1c: 83:07:55:de:a7:e2:84:1b:34:1f:75:0a:08:ed:b1:d5:13:64: e3:6a:a0:f3:1c:d7:13:10:a3:14:d7:14:cf:fc:7c:2f:cc:e7: ec:62:e6:b4:55:5e:82:05:63:3d:05:3e:3a:7b:e6:88:2a:83: 8f:b6:b1:c0:ab:0f:50:53:c7:89:5f:8d:8b:8a:82:29:ff:52: 11:3d:a0:d5:28:7d:c1:26:1f:05:ea:1e:3f:19:e9:be:20:63: b3:11:71:ea:6b:51:f9:3e:a7:f0:48:2a:5e:b5:49:8d:e9:39: d8:ea:f9:a6:1c:ac:b4:a9:73:0c:67:62:2a:1c:da:f8:05:94: 48:e6:ed:ff:e3:ee:d8:7f:ae:01:aa:d8:47:93:7d:95:7b:f8: 1a:56:a7:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtYu1w+GDLTTMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YTFiMTE5YTAtNDJmNi00NjU5LTlkYWItZjNkMjUxZDA4YTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUc0L8f0rwjYOPlfVzZBxp2txhOEdLFohcrt LUCOTvodYkNjYZYA+qI9olULzX/qPrsovMQQMKYejNmJ7yTkRaPt7lgagskS5i/Q K51x0m4Ejhxo+Ilti72MdHBxAA4qgoa6Q8M57QYYDtOXuYGfeVNOJk3jL4rNFqao Oo+t9C9PMpFHmZ317rBOMcDBIxH19/4yvBwINKUlffGuK4Tyxst+mFfqJ/QHD3L/ ne1/Z5UK979gDhiXbTbFfq4VJH2xmg9RF9QT7N8V52Fdnk0T1EAY4qzGGQxBO1iz vb1TlNKb92emNzKdm+fH3eRFiQjxaBq1t7wGzx40Jbbpwy1bgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyzrwBmO0N4PgbxI1sbbiFA1NNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2NmNDFmY2ItYTk4NS0z NDczLTllNjktZDkyZTNlN2FjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhdp2buJXZUQ4RRqMwwvfdOZ2ZFjlRbpvc87/GtlRM2HyxkcjkOYMJp ovPiN9r2ISA6zJ4VP3PIYmxQk+BcBTI7qIrv2dZiS4v1FV+Za9tvcRVafOv6cP8I 7xyzhKdTHMcPAUMvIKjAj3YUHIMHVd6n4oQbNB91CgjtsdUTZONqoPMc1xMQoxTX FM/8fC/M5+xi5rRVXoIFYz0FPjp75ogqg4+2scCrD1BTx4lfjYuKgin/UhE9oNUo fcEmHwXqHj8Z6b4gY7MRceprUfk+p/BIKl61SY3pOdjq+aYcrLSpcwxnYioc2vgF lEjm7f/j7th/rgGq2EeTfZV7+BpWp6U= -----END CERTIFICATE-----Generated at Wed Jun 17 09:12:02 2026 by rpki-client