$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c32a39a3-2ff3-3275-bc33-703111400b46.roa File: c32a39a3-2ff3-3275-bc33-703111400b46.roa (raw, json) Hash identifier: B4YXzj+8AAyA9IMIxn1e0YHtDN+eu+b60fKIZr95OfI= Subject key identifier: 17:92:A8:DF:EB:33:06:0D:AB:1D:93:F6:74:15:FF:73:C2:EB:5B:F3 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584CF6ECDA86BFFD187C3CE1B280 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c32a39a3-2ff3-3275-bc33-703111400b46.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 13768 IP address blocks: 209.15.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:da:86:bf:fd:18:7c:3c:e1:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=d8ab8e0f-3a84-49e0-aa59-264b649d8401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:3b:17:48:45:71:92:2f:d2:be:96:9b:4f: e5:94:f1:36:69:a6:17:ad:98:ff:e0:19:c5:44:c2: 61:28:98:60:85:6e:81:fd:4a:07:ee:d9:2b:4c:40: cb:64:3a:7a:44:ef:14:f6:4a:7d:89:69:08:ff:03: 93:36:74:34:dd:a3:33:e4:18:fd:0d:c8:9d:da:90: d4:de:ec:bc:54:ae:ba:b4:3e:23:7c:e3:31:b1:85: 4a:dd:91:64:42:33:5b:38:aa:49:4f:66:39:26:ce: c3:5b:85:d3:a8:06:3d:b8:48:5e:0b:81:e8:f7:36: 10:1a:8c:8c:1c:72:82:37:6a:95:cc:70:98:e0:03: 9c:82:e1:4e:9c:5c:03:e1:fa:0b:0a:b3:e4:e7:09: 8b:7a:d4:c7:45:1d:cc:00:c2:fb:b1:28:34:d7:0d: 2f:b0:f5:d7:ba:4d:49:e3:03:83:e1:07:5f:64:50: bb:be:73:e4:2c:bf:47:68:d9:fe:bd:db:29:f4:b8: 49:c4:d6:2c:d3:78:c5:12:9a:0a:2a:73:e3:86:fa: f4:ab:58:5f:fe:fb:fc:23:2f:a9:2d:ab:f5:bf:42: 5c:2e:04:4b:81:9c:01:66:c6:5e:be:bf:cf:62:da: 4f:18:03:f0:41:67:a8:79:83:b1:86:89:1c:79:a2: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:92:A8:DF:EB:33:06:0D:AB:1D:93:F6:74:15:FF:73:C2:EB:5B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c32a39a3-2ff3-3275-bc33-703111400b46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 209.15.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:39:0d:9d:53:b3:df:20:50:cd:2a:46:6d:dd:9c:2d:75:ee: 74:db:2c:bd:5a:fd:4c:9a:32:85:c8:8b:67:76:32:55:2d:59: db:52:e1:d5:89:8a:b9:fe:e2:41:7a:05:4f:07:06:80:0c:6e: 64:3a:90:7b:e6:e9:bc:d1:96:a8:3a:1f:b0:ff:61:cf:33:fc: 4d:4b:6b:b6:25:e0:3b:08:92:c9:4c:5a:e0:2b:44:ef:87:48: cc:aa:be:e3:46:d8:51:a3:6f:27:d4:b0:61:89:ca:04:40:07: 09:5e:ba:1f:26:90:c2:cc:c4:6a:88:76:f8:32:01:d9:d7:c3: f5:2e:51:06:68:65:37:6f:7b:6c:ff:06:82:87:b5:6a:73:ac: 2a:bc:d3:de:0e:9a:bc:50:8c:b4:a6:d7:5f:11:bf:86:f0:41: f9:be:56:dc:aa:ec:44:b7:96:38:f6:ff:39:c3:cd:b8:f7:fa: 2d:39:c8:22:e7:f2:83:ee:28:5f:71:36:98:ff:d0:e8:f4:67: cb:c3:99:d7:78:6b:09:c0:5d:92:7e:15:c9:b5:f8:7e:e9:ec: 95:5f:a9:60:de:64:34:b5:7b:93:5d:6d:13:ec:81:15:42:04: f3:6e:f9:a0:90:91:ee:c6:c3:0f:ae:4b:74:11:36:b1:79:b9: a6:ca:9e:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NqGv/0YfDzhsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZDhhYjhlMGYtM2E4NC00OWUwLWFhNTktMjY0YjY0OWQ4NDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQ7F0hFcZIv0r6Wm0/llPE2aaYXrZj/4BnF RMJhKJhghW6B/UoH7tkrTEDLZDp6RO8U9kp9iWkI/wOTNnQ03aMz5Bj9Dcid2pDU 3uy8VK66tD4jfOMxsYVK3ZFkQjNbOKpJT2Y5Js7DW4XTqAY9uEheC4Ho9zYQGoyM HHKCN2qVzHCY4AOcguFOnFwD4foLCrPk5wmLetTHRR3MAML7sSg01w0vsPXXuk1J 4wOD4QdfZFC7vnPkLL9HaNn+vdsp9LhJxNYs03jFEpoKKnPjhvr0q1hf/vv8Iy+p Lav1v0JcLgRLgZwBZsZevr/PYtpPGAPwQWeoeYOxhokceaIuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeSqN/rMwYNqx2T9nQV/3PC61vzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvYzMyYTM5YTMtMmZmMy0z Mjc1LWJjMzMtNzAzMTExNDAwYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Q8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE05DZ1Ts98gUM0qRm3dnC117nTbLL1a/UyaMoXIi2d2MlUtWdtS4dWJ irn+4kF6BU8HBoAMbmQ6kHvm6bzRlqg6H7D/Yc8z/E1La7Yl4DsIkslMWuArRO+H SMyqvuNG2FGjbyfUsGGJygRABwleuh8mkMLMxGqIdvgyAdnXw/UuUQZoZTdve2z/ BoKHtWpzrCq8094OmrxQjLSm118Rv4bwQfm+Vtyq7ES3ljj2/znDzbj3+i05yCLn 8oPuKF9xNpj/0Oj0Z8vDmdd4awnAXZJ+Fcm1+H7p7JVfqWDeZDS1e5NdbRPsgRVC BPNu+aCQke7Gww+uS3QRNrF5uabKnuA= -----END CERTIFICATE-----Generated at Mon Mar 2 14:25:55 2026 by rpki-client