$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa File: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (raw, json) Hash identifier: a/96yeMLgtjdQcaPvGtmFUmMteJc9WDC1khgZc9ihl8= Subject key identifier: 96:F3:E3:6B:A1:FD:67:C7:8D:82:AE:F7:ED:CC:1C:EA:A3:68:5F:24 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584F23C25A2B7EFA799328F0C080 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 30691 IP address blocks: 65.111.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5a:2b:7e:fa:79:93:28:f0:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=91206448-3905-48c5-8c0c-3a806cc46d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:0b:7e:b1:20:ce:df:8f:6f:ba:9f:94:f7: f2:17:23:2a:cd:bf:a0:26:4e:f8:22:ca:d9:40:0c: 75:18:af:6f:ed:2d:9d:0c:31:1e:85:37:77:79:3f: 89:f5:f9:b8:0e:a8:a2:c2:e1:0d:1e:bb:e2:6a:3b: 1e:98:2f:d7:fb:58:09:da:74:15:e6:38:50:cc:d0: 1f:90:f6:db:b0:67:14:e9:ca:fd:a9:a4:dc:8f:a8: 31:07:a7:c4:f0:c6:21:a5:cf:3c:7c:e6:4b:f2:17: c2:5e:12:b3:9c:60:bd:31:08:95:65:84:10:1a:4d: 2d:7e:82:fa:74:c9:d2:37:f3:38:be:5e:50:27:d5: 73:b0:ef:27:c9:d9:33:3c:af:71:e7:00:2f:cb:28: b2:fd:f8:9c:97:19:0a:0d:57:9c:c5:f9:9c:e8:3f: 5c:62:22:31:a3:30:07:af:48:32:92:3c:63:b8:d2: 19:22:52:b4:fe:6b:e9:db:47:da:4f:37:4b:6e:f4: 90:86:27:2b:c7:87:25:43:62:86:ed:17:60:98:4e: f0:c3:10:a5:74:cf:d5:28:1f:47:d9:a4:42:59:a9: d9:fd:4f:b2:8d:bc:75:e4:e9:a1:30:b3:3a:32:ff: fb:bf:98:da:00:b3:30:7d:3a:e7:d2:23:55:06:ae: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F3:E3:6B:A1:FD:67:C7:8D:82:AE:F7:ED:CC:1C:EA:A3:68:5F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:40:a5:ad:66:79:e6:e2:23:40:52:67:7a:80:3a:1d:c2:73: a0:df:74:e2:85:a8:5b:72:ba:c2:ed:d3:0a:0a:e0:ee:14:31: a5:0c:5a:ee:4d:87:f0:c4:0c:7b:c2:22:e7:64:ac:7f:3e:4d: ef:50:cc:f7:25:52:32:a3:09:1d:ad:a8:7e:68:e6:5e:9f:14: 84:37:08:f5:a0:83:fa:40:f6:d9:94:6e:04:e6:6e:12:db:cb: ac:eb:3e:4c:97:4b:99:9b:39:bb:26:46:89:d7:23:1c:c2:83: 80:6f:a7:a6:d8:72:cc:ce:c4:e0:c5:bf:89:cc:ba:6c:0c:e5: c9:84:ad:09:b0:a1:49:5d:c3:14:d0:d4:db:4b:71:38:8b:85: 52:40:47:88:d2:12:a5:36:dd:15:59:70:79:b1:76:1b:c6:af: 8d:4c:77:24:08:44:0d:2b:26:5d:0e:0f:7f:a8:ca:70:e9:27: 58:90:e6:89:ad:41:67:2f:86:1b:07:14:86:28:5f:d9:c6:dc: ab:70:f0:6a:57:74:b5:a0:05:17:f8:de:be:c1:55:16:08:4c: ea:f5:08:d6:43:9a:80:a4:46:0a:b7:26:01:24:f7:a6:ae:50: 86:ef:9c:e2:f3:18:95:19:5a:6c:97:9e:79:a8:00:d2:b7:52: b3:51:2a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlorfvp5kyjwwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk OTEyMDY0NDgtMzkwNS00OGM1LThjMGMtM2E4MDZjYzQ2ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLcLfrEgzt+Pb7qflPfyFyMqzb+gJk74IsrZ QAx1GK9v7S2dDDEehTd3eT+J9fm4DqiiwuENHrviajsemC/X+1gJ2nQV5jhQzNAf kPbbsGcU6cr9qaTcj6gxB6fE8MYhpc88fOZL8hfCXhKznGC9MQiVZYQQGk0tfoL6 dMnSN/M4vl5QJ9VzsO8nydkzPK9x5wAvyyiy/ficlxkKDVecxfmc6D9cYiIxozAH r0gykjxjuNIZIlK0/mvp20faTzdLbvSQhicrx4clQ2KG7RdgmE7wwxCldM/VKB9H 2aRCWanZ/U+yjbx15OmhMLM6Mv/7v5jaALMwfTrn0iNVBq7KhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbz42uh/WfHjYKu9+3MHOqjaF8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvN2RhZTIyZjgtOTM5YS0z YTU0LWI4MWMtODg5MDIzM2JjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQW/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNApa1meebiI0BSZ3qAOh3Cc6DfdOKFqFtyusLt0woK4O4UMaUMWu5N h/DEDHvCIudkrH8+Te9QzPclUjKjCR2tqH5o5l6fFIQ3CPWgg/pA9tmUbgTmbhLb y6zrPkyXS5mbObsmRonXIxzCg4Bvp6bYcszOxODFv4nMumwM5cmErQmwoUldwxTQ 1NtLcTiLhVJAR4jSEqU23RVZcHmxdhvGr41MdyQIRA0rJl0OD3+oynDpJ1iQ5omt QWcvhhsHFIYoX9nG3Ktw8GpXdLWgBRf43r7BVRYITOr1CNZDmoCkRgq3JgEk96au UIbvnOLzGJUZWmyXnnmoANK3UrNRKto= -----END CERTIFICATE-----Generated at Thu Sep 24 22:07:13 2026 by rpki-client