$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: FgT4A/6R6GLemIVlNZVQv42UgLVshN1fvk994ZCbUzA= Subject key identifier: 34:CF:85:0F:BA:0D:E7:0D:56:FC:B2:07:4E:48:07:70:62:EB:CA:B7 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584CAE57384E43420C2B3C194A80 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 53281 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:38:4e:43:42:0c:2b:3c:19:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=bd6e93e8-cc58-4050-b62a-a629a031e320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4c:16:b2:e9:4d:08:b3:64:70:88:c9:18:c9: aa:52:7e:0a:9c:07:ac:61:b8:c8:8f:9b:42:b2:49: 9e:29:98:bb:35:36:cd:1e:dc:2b:8d:8d:f7:32:14: 86:b6:ee:87:5f:00:77:84:a2:23:1e:9e:ef:66:06: b3:8c:e4:83:5d:61:9b:10:6e:c6:77:ec:d0:fd:36: ab:2e:28:58:3e:20:5f:5b:a8:4e:a0:51:39:b6:0d: be:47:76:b7:9c:c5:88:a0:ef:01:80:8d:c1:f3:3c: 2f:2c:a2:ce:22:06:10:47:94:fe:86:e7:d2:1f:27: c9:dc:b6:56:26:1a:1e:c6:0b:73:a1:1d:61:72:5d: 43:28:c8:ab:fc:83:84:9b:f9:ff:51:2b:db:6b:97: fc:01:b8:24:85:76:46:09:0d:5e:6b:ce:40:f2:66: 60:1c:d5:64:d4:92:f3:98:6e:61:5c:cc:96:4e:6a: 93:b3:bf:af:64:be:fc:4e:99:1c:ba:20:84:a1:7a: 5f:ee:07:5a:c7:ac:cf:75:46:a9:39:6b:8b:35:95: f1:74:77:e7:09:53:24:f6:66:41:ee:06:43:f1:9b: 85:42:31:7f:1e:a4:87:93:ad:15:24:e8:1f:c0:10: 28:e7:34:ce:73:77:d7:01:d8:25:d1:c9:0f:3e:4d: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CF:85:0F:BA:0D:E7:0D:56:FC:B2:07:4E:48:07:70:62:EB:CA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:76:a3:94:36:28:81:20:cf:b7:14:4a:e6:a9:e8:56:95:5e: a3:e0:35:e9:12:48:01:3d:1e:99:f1:4b:ab:42:63:55:2c:99: 23:e8:51:ba:59:29:3b:36:e0:fd:81:39:9b:56:0f:90:13:8b: 99:1a:c4:c8:95:5f:d3:a7:98:14:65:15:e5:88:e3:de:b7:39: fe:96:32:68:cd:59:60:bd:d5:58:93:8c:a7:bb:de:fa:62:1f: 5b:7a:18:e8:f9:46:7d:8c:c1:8e:7e:69:63:9c:cc:49:e6:ae: 32:05:37:b6:a6:ad:be:84:05:55:17:be:3a:cf:ce:7d:cf:ba: 08:a6:dd:52:47:44:a5:a7:e0:b5:cd:06:c0:80:25:06:c9:60: cd:a9:09:df:dc:bf:10:a5:42:63:56:a9:1a:17:65:fa:6b:de: 18:27:3b:c2:5f:f8:dd:16:41:79:ba:f7:2f:b0:a1:ac:79:4c: ce:d9:8c:2a:12:33:a6:d7:52:ee:a9:80:60:41:49:95:4b:59: ee:58:a0:de:25:9c:ff:f8:8d:30:cb:68:07:a8:47:eb:aa:32: 69:63:a3:24:8c:cd:95:b3:f5:8d:cc:c4:03:ab:d6:90:38:d1: 2f:b8:9e:96:bc:e7:db:fc:19:71:66:5e:86:36:c3:7f:1e:31: 2f:3d:22:b3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyuVzhOQ0IMKzwZSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmQ2ZTkzZTgtY2M1OC00MDUwLWI2MmEtYTYyOWEwMzFlMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEwWsulNCLNkcIjJGMmqUn4KnAesYbjIj5tC skmeKZi7NTbNHtwrjY33MhSGtu6HXwB3hKIjHp7vZgazjOSDXWGbEG7Gd+zQ/Tar LihYPiBfW6hOoFE5tg2+R3a3nMWIoO8BgI3B8zwvLKLOIgYQR5T+hufSHyfJ3LZW JhoexgtzoR1hcl1DKMir/IOEm/n/USvba5f8AbgkhXZGCQ1ea85A8mZgHNVk1JLz mG5hXMyWTmqTs7+vZL78TpkcuiCEoXpf7gdax6zPdUapOWuLNZXxdHfnCVMk9mZB 7gZD8ZuFQjF/HqSHk60VJOgfwBAo5zTOc3fXAdgl0ckPPk0PsQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDTPhQ+6DecNVvyyB05IB3Bi68q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANh2o5Q2KIEgz7cUSuap6FaVXqPgNekSSAE9HpnxS6tCY1Us mSPoUbpZKTs24P2BOZtWD5ATi5kaxMiVX9OnmBRlFeWI4963Of6WMmjNWWC91ViT jKe73vpiH1t6GOj5Rn2MwY5+aWOczEnmrjIFN7amrb6EBVUXvjrPzn3Pugim3VJH RKWn4LXNBsCAJQbJYM2pCd/cvxClQmNWqRoXZfpr3hgnO8Jf+N0WQXm69y+woax5 TM7ZjCoSM6bXUu6pgGBBSZVLWe5YoN4lnP/4jTDLaAeoR+uqMmljoySMzZWz9Y3M xAOr1pA40S+4npa859v8GXFmXoY2w38eMS89IrM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:23 2026 by rpki-client