$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa File: 4203a888-ffda-34ce-bf72-ac4a102906e4.roa (raw, json) Hash identifier: wkcsac1gogjPxb85W8BC712PNqhFo48MBdJt8oI8hvI= Subject key identifier: EC:41:D6:75:98:DB:D9:3F:31:C5:A6:F8:4B:4C:45:79:42:20:91:26 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584C4CA11D10B9A19F8FD3AAC4EA Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 11090 IP address blocks: 64.4.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:1d:10:b9:a1:9f:8f:d3:aa:c4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=92f79aa3-6764-4a42-a85a-e92e2ef7a375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:58:e6:0f:09:24:28:d5:1a:2d:27:7b:da: c2:51:15:cf:0c:5a:36:3f:43:a7:69:8b:d2:22:97: 8f:06:48:63:41:db:e6:f9:ce:f7:04:4b:e1:39:f6: 70:21:52:95:91:76:8e:45:43:79:56:cf:01:5b:82: f5:38:53:f1:3c:6a:8b:78:f3:b5:65:8a:ef:d6:ee: 5c:6d:a2:59:54:a5:5e:80:9b:4f:34:9e:49:f4:7e: b8:b3:b7:fa:55:0a:60:62:ed:93:bd:04:c8:3a:15: 98:46:b4:4e:79:a7:fa:a0:58:73:0e:ff:14:36:05: 4f:04:71:12:5b:d0:e5:46:63:1c:5d:8d:bb:ef:38: be:1e:b7:a8:a5:88:eb:d7:3e:b7:f0:5e:4b:be:52: 2f:70:36:ef:b8:75:20:c4:e9:9e:2c:2c:ad:f6:e9: 3d:b1:d7:f6:b5:48:4d:d4:b1:a3:84:5d:9a:45:de: bd:c8:28:35:bf:28:e0:cf:cb:3d:36:08:4b:78:18: 57:25:54:78:6e:0c:c0:1f:ff:04:81:b1:11:f2:d5: 4a:cf:ee:96:c4:9f:4f:90:65:14:61:1c:6e:3d:be: 6d:a9:9f:40:bc:79:d9:ad:b8:95:ea:02:54:69:86: 36:8d:28:43:e8:80:29:84:26:e5:55:0d:a6:78:1b: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:41:D6:75:98:DB:D9:3F:31:C5:A6:F8:4B:4C:45:79:42:20:91:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7b:55:25:39:93:50:01:f3:57:d1:42:7c:1b:65:d0:92:35: 69:29:5a:5f:27:a2:1a:8c:c1:e6:83:58:db:ff:ca:d8:af:d0: e3:57:b7:c9:d9:5a:53:6d:f4:47:d9:3b:d0:4a:78:00:56:18: 02:7b:ff:12:58:33:97:f2:f1:2a:37:a3:3a:d7:b2:3a:e5:b9: 89:a6:27:29:27:1f:01:b3:5f:70:13:97:5a:17:74:3f:5a:c5: 19:a8:08:98:a5:58:db:e2:b9:c3:0d:c5:8d:16:d0:f2:10:c2: c2:59:92:77:fc:16:c7:66:bc:17:89:61:73:d7:8b:7b:1e:9e: 3b:92:3f:38:ab:d7:28:f1:f5:51:35:e3:c7:e3:8d:20:ac:2f: b0:9e:25:8c:01:2d:f6:97:05:48:d3:76:1c:b1:19:68:88:08: 2c:51:69:d8:08:15:1c:4d:a2:7b:ea:f5:97:3e:33:b8:e0:a2: 48:c4:96:ff:09:43:92:e3:8d:6d:04:04:b0:60:37:77:cc:9f: 18:b0:85:69:90:a2:8c:a8:68:ab:a4:67:ef:ed:1c:84:a5:9a: 49:11:d2:ef:51:ed:1d:de:6e:45:21:47:09:77:d7:38:56:ff: 4e:9d:68:53:93:59:d7:a6:ca:db:f7:f3:48:47:fe:66:e1:91: 05:45:8a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoR0QuaGfj9OqxOowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTJmNzlhYTMtNjc2NC00YTQyLWE4NWEtZTkyZTJlZjdhMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qZY5g8JJCjVGi0ne9rCURXPDFo2P0OnaYvS IpePBkhjQdvm+c73BEvhOfZwIVKVkXaORUN5Vs8BW4L1OFPxPGqLePO1ZYrv1u5c baJZVKVegJtPNJ5J9H64s7f6VQpgYu2TvQTIOhWYRrROeaf6oFhzDv8UNgVPBHES W9DlRmMcXY277zi+HreopYjr1z638F5LvlIvcDbvuHUgxOmeLCyt9uk9sdf2tUhN 1LGjhF2aRd69yCg1vyjgz8s9NghLeBhXJVR4bgzAH/8EgbER8tVKz+6WxJ9PkGUU YRxuPb5tqZ9AvHnZrbiV6gJUaYY2jShD6IAphCblVQ2meBu5XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxB1nWY29k/McWm+EtMRXlCIJEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIwM2E4ODgtZmZkYS0z NGNlLWJmNzItYWM0YTEwMjkwNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh7VSU5k1AB81fRQnwbZdCSNWkpWl8nohqMweaDWNv/ytiv0ONXt8nZ WlNt9EfZO9BKeABWGAJ7/xJYM5fy8So3ozrXsjrluYmmJyknHwGzX3ATl1oXdD9a xRmoCJilWNviucMNxY0W0PIQwsJZknf8FsdmvBeJYXPXi3senjuSPzir1yjx9VE1 48fjjSCsL7CeJYwBLfaXBUjTdhyxGWiICCxRadgIFRxNonvq9Zc+M7jgokjElv8J Q5LjjW0EBLBgN3fMnxiwhWmQooyoaKukZ+/tHISlmkkR0u9R7R3ebkUhRwl31zhW /06daFOTWdemytv380hH/mbhkQVFitE= -----END CERTIFICATE-----Generated at Mon Mar 2 07:10:29 2026 by rpki-client