$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa File: 3b4f080a-93ea-356c-9216-559219ab2f01.roa (raw, json) Hash identifier: l/12UnMsU6vKq6H+AQ21ZBhRkbdZKHn3gjjVE029KR4= Subject key identifier: 3C:C0:6A:FF:5F:DD:C5:8B:2C:A1:E7:D3:51:C7:D5:F2:D6:1B:FB:6B Certificate issuer: /CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Certificate serial: 010D0C9F4328584DA3E5604F7C14DB91235A5D80 Authority key identifier: 01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 8075 IP address blocks: 192.12.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:60:4f:7c:14:db:91:23:5a:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=90e52445-e78a-4431-9c9f-e04e16f22e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:ba:ec:60:d7:d5:c6:ab:00:3e:65:48:46: 95:56:00:6c:fc:60:90:2a:50:f6:38:c0:f9:75:14: 86:70:82:50:d4:d2:66:70:1b:5b:f0:7a:80:84:bc: be:3c:29:a5:07:c8:9f:f1:f4:86:de:d2:19:f5:44: 7c:4a:ae:2f:ed:18:44:01:e8:eb:48:cd:0a:55:bc: 87:8e:90:fb:98:5b:2a:0f:ad:e0:b6:84:4f:96:2c: 73:21:24:d7:54:e4:35:1f:75:e2:df:55:46:14:22: bd:7d:62:f3:d0:cd:2a:a8:45:35:ec:c0:3c:8d:56: a6:20:2d:57:bd:aa:c9:1a:84:b7:75:d2:a9:d1:fe: 28:e1:b5:6b:a5:cf:d2:9b:3e:e3:d2:1e:52:6f:51: 31:71:0c:de:1a:86:6d:d6:92:8a:ca:67:2b:cf:66: 49:95:9d:71:b2:a7:ed:1c:73:c9:64:34:1b:05:02: 92:2c:fc:23:07:db:7a:8c:b7:a5:0b:a9:03:1c:44: 2c:05:85:95:10:54:9c:7f:55:09:51:70:bd:26:92: 27:a1:e9:1f:b2:4f:87:6a:7e:14:42:ec:59:03:a6: 82:27:0e:25:ce:17:83:00:a1:54:60:64:15:90:52: f8:68:3b:d0:0c:2a:5f:9b:da:63:dd:b2:40:d7:43: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C0:6A:FF:5F:DD:C5:8B:2C:A1:E7:D3:51:C7:D5:F2:D6:1B:FB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl X509v3 Authority Key Identifier: keyid:01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f5:45:06:cf:4f:cd:99:1d:69:aa:8a:c7:78:bc:6d:00:da: 67:7a:27:2a:99:81:cb:4c:37:14:a1:ed:d6:27:fe:e2:63:b7: df:99:3e:61:fd:9f:1a:45:0b:b2:68:93:dd:23:17:8e:7f:0f: 15:32:11:85:77:7c:b3:86:7e:62:16:29:ec:b4:29:6f:25:46: 48:7e:7a:3d:d7:87:60:31:f3:ae:b5:1f:ca:78:87:36:f7:89: 46:b2:99:d7:f0:fb:77:cf:33:8d:b9:d8:99:2c:d8:16:fe:33: d2:02:28:28:59:f5:18:15:81:e5:f6:ef:ed:f9:db:da:db:bc: 58:43:9c:73:20:06:06:f3:12:f3:77:38:d5:a5:59:c4:e0:05: 98:a0:c4:b3:ec:29:65:db:e7:a3:81:7e:00:6d:f2:b4:53:8a: a1:41:d4:8c:8e:3c:2b:db:11:da:d0:4e:f5:65:81:7e:21:d6: d1:18:be:60:b2:f1:96:f4:a1:58:1e:a8:c5:17:36:bb:20:3c: 32:24:88:59:84:4c:2a:46:53:36:62:3f:4f:e3:d7:91:ab:db: 63:1e:1d:08:37:51:ce:31:9e:2d:e5:cd:1c:f9:c7:17:28:5e: ac:c4:49:41:cf:13:3b:13:b5:8a:9d:ae:42:3a:b8:cd:d8:9e: 99:b9:a0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WBPfBTbkSNaXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhmYmY4YjItZDJiYy00ZWQ4LWJkNTctMmE1ZTQzYTMw ZjNhMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk OTBlNTI0NDUtZTc4YS00NDMxLTljOWYtZTA0ZTE2ZjIyZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6G67GDX1carAD5lSEaVVgBs/GCQKlD2OMD5 dRSGcIJQ1NJmcBtb8HqAhLy+PCmlB8if8fSG3tIZ9UR8Sq4v7RhEAejrSM0KVbyH jpD7mFsqD63gtoRPlixzISTXVOQ1H3Xi31VGFCK9fWLz0M0qqEU17MA8jVamIC1X varJGoS3ddKp0f4o4bVrpc/Smz7j0h5Sb1ExcQzeGoZt1pKKymcrz2ZJlZ1xsqft HHPJZDQbBQKSLPwjB9t6jLelC6kDHEQsBYWVEFScf1UJUXC9JpInoekfsk+Han4U QuxZA6aCJw4lzheDAKFUYGQVkFL4aDvQDCpfm9pj3bJA10OSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzAav9f3cWLLKHn01HH1fLWG/trMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGZi ZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVlNDNhMzBmM2EvM2I0ZjA4MGEtOTNlYS0z NTZjLTkyMTYtNTU5MjE5YWIyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhmYmY4YjItZDJiYy00ZWQ4LWJk NTctMmE1ZTQzYTMwZjNhL2Q4ZmJmOGIyLWQyYmMtNGVkOC1iZDU3LTJhNWU0M2Ez MGYzYS5jcmwwHwYDVR0jBBgwFoAUAamV2enW0oeEHc6Nh2edpM3R/tQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGZiZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVl NDNhMzBmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz1RQbPT82ZHWmqisd4vG0A2md6JyqZgctMNxSh7dYn/uJjt9+ZPmH9 nxpFC7Jok90jF45/DxUyEYV3fLOGfmIWKey0KW8lRkh+ej3Xh2Ax8661H8p4hzb3 iUaymdfw+3fPM4252Jks2Bb+M9ICKChZ9RgVgeX27+3529rbvFhDnHMgBgbzEvN3 ONWlWcTgBZigxLPsKWXb56OBfgBt8rRTiqFB1IyOPCvbEdrQTvVlgX4h1tEYvmCy 8Zb0oVgeqMUXNrsgPDIkiFmETCpGUzZiP0/j15Gr22MeHQg3Uc4xni3lzRz5xxco XqzESUHPEzsTtYqdrkI6uM3Ynpm5oLc= -----END CERTIFICATE-----Generated at Wed May 13 03:38:34 2026 by rpki-client