$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa File: 3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa (raw, json) Hash identifier: FeIpDMOyZ5l99lCDNmp/SVf6TMJZKL6JR9OL5GFtsHM= Subject key identifier: 58:73:68:65:5A:80:DD:D0:38:61:D2:5D:65:45:0A:E9:3B:B6:3D:FA Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D2BDA175C3C081335BC87F000 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 64.4.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:17:5c:3c:08:13:35:bc:87:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=51f18e62-b7d0-4c7a-9fbb-132649cdfe7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:7d:c7:f9:53:cd:97:44:2e:44:9c:93:31: 16:0d:1c:90:b0:b7:95:e0:01:f2:19:a1:b1:88:ac: a8:db:24:58:ef:cb:2b:91:d0:58:4d:be:6c:1e:53: 4e:fb:da:25:84:7e:bc:d9:75:ad:71:fe:0d:79:3f: bf:de:35:82:78:2a:1e:9c:03:7f:68:39:ab:8a:d3: 4b:07:85:28:47:56:a0:b2:7f:bd:fe:81:cd:69:34: ac:f8:e2:2e:01:7d:35:bf:96:60:b5:b1:02:db:1e: 39:a5:42:21:db:d9:70:56:af:18:64:6f:69:87:1a: bd:53:e2:40:57:41:a7:a7:99:69:65:ec:82:20:4c: 40:25:0c:0f:f8:75:bd:e1:95:7e:ec:6b:3f:6d:f2: 7e:4b:cd:92:b4:80:e5:61:42:5c:bb:0a:8a:8d:84: b9:71:d5:5f:bb:53:d3:3c:f5:97:e9:65:f2:06:8c: 6f:a9:6a:7c:9e:43:52:bf:b0:07:e5:72:2c:19:6f: a2:4f:06:47:fd:8e:0a:b7:69:0b:a3:c2:0d:3d:2f: 70:e1:81:fd:ff:28:86:d6:c7:e4:45:15:73:e7:5f: 99:d6:c1:ac:8e:d4:d5:36:7f:dc:2c:33:dd:c1:91: 3b:e6:2f:06:1d:4c:71:69:2c:29:dc:9f:33:38:bf: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:73:68:65:5A:80:DD:D0:38:61:D2:5D:65:45:0A:E9:3B:B6:3D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3e:68:6d:3b:1a:15:9a:a6:23:59:1b:0e:62:36:20:3f:a6: 8b:c9:20:87:ee:17:ca:a4:91:65:e5:15:88:9a:51:58:2d:da: 63:3f:0d:5f:10:4f:69:1c:b6:b4:8a:53:ff:c2:35:85:e9:be: 75:aa:ff:8a:a4:7b:09:82:bf:27:7e:b2:f7:f8:77:43:1f:fe: 2d:d0:d6:00:81:40:85:67:66:dc:c9:e1:eb:16:08:0e:93:c6: 92:24:7c:3e:d4:cf:97:4e:d0:10:43:39:25:06:f5:25:90:a4: 5d:e1:15:56:4a:15:e3:65:30:0f:17:ea:47:cf:62:d8:fe:6f: 95:bf:66:80:40:2a:18:fa:89:46:de:56:0e:d5:f0:27:fe:fc: ae:65:a2:39:22:64:76:4e:5f:0b:73:42:a1:51:53:5c:6a:41: 40:31:02:b9:83:81:1c:de:17:a4:75:67:2f:08:9e:96:cd:a7: b6:07:40:5a:69:03:a8:bd:84:ac:59:76:0c:bc:9f:3b:02:83: a8:1b:99:a2:4e:89:35:75:f4:d5:a7:53:c2:72:d4:4b:0b:ec: b5:c3:bb:b1:a1:b2:bb:3b:c7:c0:6f:b3:0e:f7:e9:9d:96:cb: 06:19:d3:52:08:31:fd:3b:85:23:13:15:e1:c4:c4:5b:95:10: ef:10:76:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hdcPAgTNbyH8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NTFmMThlNjItYjdkMC00YzdhLTlmYmItMTMyNjQ5Y2RmZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQF9x/lTzZdELkSckzEWDRyQsLeV4AHyGaGx iKyo2yRY78srkdBYTb5sHlNO+9olhH682XWtcf4NeT+/3jWCeCoenAN/aDmritNL B4UoR1agsn+9/oHNaTSs+OIuAX01v5ZgtbEC2x45pUIh29lwVq8YZG9phxq9U+JA V0Gnp5lpZeyCIExAJQwP+HW94ZV+7Gs/bfJ+S82StIDlYUJcuwqKjYS5cdVfu1PT PPWX6WXyBoxvqWp8nkNSv7AH5XIsGW+iTwZH/Y4Kt2kLo8INPS9w4YH9/yiG1sfk RRVz51+Z1sGsjtTVNn/cLDPdwZE75i8GHUxxaSwp3J8zOL/kLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhzaGVagN3QOGHSXWVFCuk7tj36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2NmNDFmY2ItYTk4NS0z NDczLTllNjktZDkyZTNlN2FjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM+aG07GhWapiNZGw5iNiA/povJIIfuF8qkkWXlFYiaUVgt2mM/DV8Q T2kctrSKU//CNYXpvnWq/4qkewmCvyd+svf4d0Mf/i3Q1gCBQIVnZtzJ4esWCA6T xpIkfD7Uz5dO0BBDOSUG9SWQpF3hFVZKFeNlMA8X6kfPYtj+b5W/ZoBAKhj6iUbe Vg7V8Cf+/K5lojkiZHZOXwtzQqFRU1xqQUAxArmDgRzeF6R1Zy8InpbNp7YHQFpp A6i9hKxZdgy8nzsCg6gbmaJOiTV19NWnU8Jy1EsL7LXDu7Ghsrs7x8Bvsw736Z2W ywYZ01IIMf07hSMTFeHExFuVEO8QdpI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:57:51 2026 by rpki-client