$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa File: 39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa (raw, json) Hash identifier: CKJQbC6eVQVWPsqDE8eRTeYH6bel4QGXuLR4fkit5+0= Subject key identifier: FF:0D:D3:52:47:60:34:AA:97:EE:A5:CE:98:35:C1:92:CC:D2:E1:ED Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F49763A5F43AA8AF355C45140 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 198.160.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:3a:5f:43:aa:8a:f3:55:c4:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1225cd00-4d4c-4c49-b3d7-f65b9798b997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:42:b9:d6:7c:bd:41:83:7d:6f:8b:3f:cf: 0d:97:a4:d3:13:53:47:27:bd:97:1f:5e:b7:77:8f: 6c:40:17:04:ec:64:6f:0a:30:a0:6e:06:ba:f6:ca: 78:13:16:56:69:9b:8c:09:92:7e:6e:b1:50:e4:8a: 82:f5:0f:49:0f:a7:87:4e:90:b7:93:91:9a:51:b4: bf:9b:6c:10:9d:0e:81:93:e8:cc:5b:2e:57:5e:0d: ed:aa:6e:d2:76:e9:0f:82:27:c9:80:5e:41:05:4c: 66:9f:9e:5d:f2:84:0c:ad:c5:66:cb:21:7f:27:d3: 38:04:9d:2e:fb:e7:29:03:9a:19:42:9b:9a:e0:23: 43:e4:69:9b:1f:bc:c9:81:d4:25:6e:62:1b:0e:d5: 13:74:e5:7a:32:fa:49:8b:51:77:c6:0f:84:3d:23: 23:3e:d9:f0:da:97:93:b3:2e:59:1a:1b:e1:0d:ff: 71:e6:70:ca:f7:71:04:ce:c2:3a:65:e4:15:89:bc: 25:6d:8b:02:b7:4e:c2:13:1d:ee:7f:e0:99:ff:73: a5:41:e1:d4:1f:cd:2b:e0:d7:8e:a1:f4:c1:45:f3: 0a:bb:2b:77:e7:e8:c0:6d:c8:32:c8:47:ae:df:e0: c1:ee:5e:f1:33:b1:11:46:22:71:39:20:56:fb:1b: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0D:D3:52:47:60:34:AA:97:EE:A5:CE:98:35:C1:92:CC:D2:E1:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.160.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bf:54:9e:55:7e:59:20:16:75:ac:dc:c6:2e:4b:e8:d2:dd: 60:01:43:ff:53:48:b7:04:3f:6e:3a:27:4f:20:6e:47:a3:11: 91:af:ed:d5:b3:d5:3a:48:62:76:ee:85:34:1c:89:06:3f:c9: b3:50:14:0d:8e:40:eb:f8:32:cb:7d:41:49:90:ec:19:89:f8: f7:73:bb:0a:c1:f4:cd:1a:92:d0:0a:5f:5d:85:7f:8d:72:10: ad:3c:31:af:82:42:1f:d1:a9:a1:84:d0:a1:e5:8d:ba:2a:38: 6f:17:77:af:69:fd:a9:72:af:49:93:e5:53:67:f1:16:54:aa: d3:8e:d5:2d:ba:89:9a:bc:47:b9:14:10:08:04:8c:63:c8:d5: 60:1b:8d:7f:9a:26:7e:ad:f2:9a:46:ed:c4:02:9c:de:4a:f8: 0f:46:c8:7e:84:19:fb:f8:ba:39:5b:20:79:8a:56:33:34:32: 57:b9:51:a1:ca:ee:95:81:1b:09:b5:0e:76:67:ad:ba:bc:4e: 87:47:81:1f:7c:91:f6:07:47:89:bb:7c:82:d5:13:c8:6a:7e: c3:52:77:c1:44:40:dd:79:18:0a:18:a1:bf:63:cc:1c:b8:d8: 03:b8:1e:90:10:5b:ea:22:fb:74:06:6f:5f:63:2c:7e:0e:ce: 0a:d7:d4:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdjpfQ6qK81XEUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTIyNWNkMDAtNGQ0Yy00YzQ5LWIzZDctZjY1Yjk3OThiOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtBCudZ8vUGDfW+LP88Nl6TTE1NHJ72XH163 d49sQBcE7GRvCjCgbga69sp4ExZWaZuMCZJ+brFQ5IqC9Q9JD6eHTpC3k5GaUbS/ m2wQnQ6Bk+jMWy5XXg3tqm7SdukPgifJgF5BBUxmn55d8oQMrcVmyyF/J9M4BJ0u ++cpA5oZQpua4CND5GmbH7zJgdQlbmIbDtUTdOV6MvpJi1F3xg+EPSMjPtnw2peT sy5ZGhvhDf9x5nDK93EEzsI6ZeQVibwlbYsCt07CEx3uf+CZ/3OlQeHUH80r4NeO ofTBRfMKuyt35+jAbcgyyEeu3+DB7l7xM7ERRiJxOSBW+xsMlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8N01JHYDSql+6lzpg1wZLM0uHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzliMjM0NmQtMTI0Zi0z NzNhLWE5YTMtNDFhM2FjMWUzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+/VJ5VflkgFnWs3MYuS+jS3WABQ/9TSLcEP246J08gbkejEZGv7dWz 1TpIYnbuhTQciQY/ybNQFA2OQOv4Mst9QUmQ7BmJ+PdzuwrB9M0aktAKX12Ff41y EK08Ma+CQh/RqaGE0KHljboqOG8Xd69p/alyr0mT5VNn8RZUqtOO1S26iZq8R7kU EAgEjGPI1WAbjX+aJn6t8ppG7cQCnN5K+A9GyH6EGfv4ujlbIHmKVjM0Mle5UaHK 7pWBGwm1DnZnrbq8TodHgR98kfYHR4m7fILVE8hqfsNSd8FEQN15GAoYob9jzBy4 2AO4HpAQW+oi+3QGb19jLH4OzgrX1Cw= -----END CERTIFICATE-----Generated at Tue Sep 29 19:17:03 2026 by rpki-client