$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa File: dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json) Hash identifier: 0tdr7W3RxRsscEp9dUper3XdtXYwf6HTZ6HJ2W2dJCE= Subject key identifier: B9:EB:81:E1:BC:89:B3:A3:28:A4:64:83:CF:61:91:04:19:5C:D7:D6 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584E0C1ED646205F6A8DAD3522C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 11090 IP address blocks: 64.4.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d6:46:20:5f:6a:8d:ad:35:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=d3983d01-5061-421c-a995-45830cc2d951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:ad:6c:f0:29:75:8b:bb:cb:4a:93:97:52: 0a:3e:ea:c1:53:01:80:c0:ad:15:6e:09:61:d2:4f: 77:30:17:4b:14:49:88:62:af:df:f9:12:66:fd:65: 08:e0:6b:6d:2a:13:ca:1e:79:38:a6:0e:35:42:cc: 09:c3:3a:ba:b7:18:31:50:12:04:fb:b9:55:34:9b: 1e:a6:c7:49:dc:75:a6:bc:7a:08:31:13:72:30:19: f6:bb:87:60:eb:2a:23:74:8a:5d:4f:e7:8f:9d:19: 4c:9f:c6:b6:da:b6:ee:4c:00:8a:34:0d:71:01:0a: 4c:a5:d1:e1:bd:f2:bd:5b:6b:45:04:30:a7:20:7d: 50:1c:be:ad:19:9d:a3:ae:ee:88:b1:34:b3:54:b0: bc:d2:03:99:58:16:95:3d:98:4e:26:1d:49:0d:a4: f4:35:1d:e7:9e:48:bd:67:fc:35:0e:2a:34:96:e9: ac:bd:cc:d3:3a:e0:a0:c4:11:a7:e9:d3:2a:36:b5: b7:5c:0c:50:9b:9c:11:37:13:af:6f:26:49:62:e8: d5:a2:3b:b5:8f:58:3c:ea:2a:ea:cd:a5:78:4c:12: 91:a5:10:88:b6:fc:15:e2:c3:4c:3e:97:6a:75:57: b0:d3:47:87:f5:49:ed:29:8f:e3:35:de:2d:d3:a5: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:81:E1:BC:89:B3:A3:28:A4:64:83:CF:61:91:04:19:5C:D7:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:07:f6:4a:68:e2:5b:9c:11:5a:d1:e2:01:df:6a:d4:0d:7f: cd:66:9e:10:19:b4:69:2c:bc:6e:8d:1f:e3:eb:c2:72:85:ce: 72:a3:57:5e:32:89:09:5f:26:8d:8b:37:5c:7c:34:26:aa:94: 86:68:8a:1b:b8:a4:ed:a9:bd:2c:bc:9a:b7:36:fd:0e:d3:b4: 5c:1b:1c:73:58:8b:de:3f:ca:68:28:17:62:80:db:20:43:f8: 1a:de:b6:f3:f3:3b:86:3f:75:33:7d:4c:5d:8b:c8:fe:81:03: d7:54:12:2b:a6:18:f5:1a:86:0f:2d:48:22:ed:55:01:b8:2e: aa:8f:13:14:f7:59:4f:2b:e3:ea:ed:c9:de:b0:86:52:0d:b6: a4:2f:4c:31:17:17:6d:c5:0e:5a:52:46:0c:a0:36:00:a6:c9: 18:5f:c3:83:89:19:80:bc:9a:a5:aa:8d:b1:58:c9:8d:c0:c0: 78:a4:04:c0:40:ce:66:48:bc:09:11:df:ae:d0:75:cb:bc:1e: 4f:24:4a:43:d8:18:51:98:09:9e:0b:77:0a:7d:b9:1a:fe:3c: 4e:2d:3b:cd:9a:bb:1f:f4:cd:81:f8:0e:7e:e0:bd:e8:53:83: 50:db:cf:8c:59:aa:14:9c:fe:5d:fd:74:d9:aa:3b:a6:df:9c: 34:28:2f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtZGIF9qja01IsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZDM5ODNkMDEtNTA2MS00MjFjLWE5OTUtNDU4MzBjYzJkOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2CtbPApdYu7y0qTl1IKPurBUwGAwK0Vbglh 0k93MBdLFEmIYq/f+RJm/WUI4GttKhPKHnk4pg41QswJwzq6txgxUBIE+7lVNJse psdJ3HWmvHoIMRNyMBn2u4dg6yojdIpdT+ePnRlMn8a22rbuTACKNA1xAQpMpdHh vfK9W2tFBDCnIH1QHL6tGZ2jru6IsTSzVLC80gOZWBaVPZhOJh1JDaT0NR3nnki9 Z/w1Dio0lumsvczTOuCgxBGn6dMqNrW3XAxQm5wRNxOvbyZJYujVoju1j1g86irq zaV4TBKRpRCItvwV4sNMPpdqdVew00eH9UntKY/jNd4t06UrdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnrgeG8ibOjKKRkg89hkQQZXNfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGZmYzk3ZmItNzg2ZS0z MThiLWI0ZWUtMjkzZDFhMGYxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMH9kpo4lucEVrR4gHfatQNf81mnhAZtGksvG6NH+PrwnKFznKjV14y iQlfJo2LN1x8NCaqlIZoihu4pO2pvSy8mrc2/Q7TtFwbHHNYi94/ymgoF2KA2yBD +BretvPzO4Y/dTN9TF2LyP6BA9dUEiumGPUahg8tSCLtVQG4LqqPExT3WU8r4+rt yd6whlINtqQvTDEXF23FDlpSRgygNgCmyRhfw4OJGYC8mqWqjbFYyY3AwHikBMBA zmZIvAkR367Qdcu8Hk8kSkPYGFGYCZ4Ldwp9uRr+PE4tO82aux/0zYH4Dn7gvehT g1Dbz4xZqhSc/l39dNmqO6bfnDQoLzY= -----END CERTIFICATE-----Generated at Sat Jun 13 13:07:40 2026 by rpki-client