$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: pHPbwEEVFJJX7b/xQ2ylHwEm3FRyvKHrKmJAphReYl8= Subject key identifier: EB:2B:AD:D5:6F:80:20:33:C1:EE:B7:20:28:A9:50:65:C7:25:92:C5 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584CAE57385CD9B0BFF0407BF3C8 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:38:5c:d9:b0:bf:f0:40:7b:f3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=810a0301-eb83-4840-bb5c-89b461bd38fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:61:c6:a9:5b:b8:dc:3c:24:3f:d9:ee:d8:9a: 25:8d:5c:45:19:6b:90:d5:67:8e:db:01:95:0e:83: cc:6c:db:a7:00:91:4c:ea:b5:e7:f3:38:e8:59:bb: be:cf:66:3f:c9:71:92:36:8c:5a:c1:e3:52:7d:35: 89:a4:fc:30:4b:1f:c9:9e:9d:5a:4d:bf:9f:d1:3a: e4:4f:e1:a2:6d:20:66:46:d2:b2:48:f2:3b:ae:dd: db:b4:28:b7:af:30:8d:a3:31:5b:be:68:d0:c6:af: 9d:0a:c4:3c:34:6d:91:ad:65:8a:75:be:6c:dc:a4: 5e:ca:4f:d9:e0:f2:73:1e:f2:5e:c0:a6:a5:66:7a: 58:8a:c2:19:79:f8:4f:fe:b3:78:a3:2a:19:7f:a6: 35:75:55:93:ea:cd:d7:a1:d2:3f:79:e8:a5:b4:a1: 13:4b:c9:7d:a2:fc:8a:44:2d:fb:c7:22:5f:0d:4b: e7:44:45:5e:b8:01:68:a0:ca:b5:a8:9c:94:14:34: ea:fb:16:90:70:66:db:64:a9:8d:9d:d0:ca:74:fc: 2c:5c:55:15:40:c8:3e:ce:c7:b4:45:c0:78:b5:53: cd:f7:6e:c7:68:9c:db:47:59:cf:49:17:db:39:0a: 75:34:7b:1d:9f:ae:da:34:78:cb:95:b4:01:6a:54: 6b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2B:AD:D5:6F:80:20:33:C1:EE:B7:20:28:A9:50:65:C7:25:92:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:39:5e:61:d8:d8:e0:19:72:0a:7d:12:6e:b1:aa:56:8c:a3: 4b:2d:9e:0e:98:4e:44:f8:95:54:06:cb:42:50:30:fd:7c:f0: 5d:3e:29:11:62:97:75:9e:98:04:9d:a6:50:e4:52:81:f4:88: b9:27:56:9e:92:c1:55:bb:11:01:84:75:a2:1a:f1:54:62:31: 02:a8:7b:b3:30:85:aa:9e:32:51:50:cf:5a:ed:51:a6:48:9f: 0d:01:b8:0b:ff:c5:54:f0:f4:e3:96:fa:77:db:ae:cf:5d:d9: 1b:c9:c9:54:3e:b2:1a:82:e2:1c:20:53:a9:b4:cc:41:6d:c6: 18:ad:25:ff:c0:b7:90:4e:f8:9a:a3:c7:cb:bb:8f:a0:f4:05: 66:7f:b8:85:ee:0b:50:45:52:7d:e2:14:da:bf:3a:6b:8f:5a: 23:ff:af:1e:76:c4:60:78:61:71:a9:d5:fb:9a:62:76:5b:7d: 50:bb:28:c0:cb:5d:6e:e7:c6:96:ef:2e:b7:11:76:81:87:f1: 9e:c1:6e:64:97:67:93:e2:3e:6c:d0:a9:72:88:46:1f:10:a3: d4:db:2a:55:56:8e:49:3f:95:62:8d:b4:2e:bb:db:86:02:e7: 30:19:a6:7c:73:f9:14:c6:c7:bb:e4:ea:2d:f6:3d:5c:f8:ae: 17:63:29:fc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyuVzhc2bC/8EB788gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODEwYTAzMDEtZWI4My00ODQwLWJiNWMtODliNDYxYmQzOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWHGqVu43DwkP9nu2JoljVxFGWuQ1WeO2wGV DoPMbNunAJFM6rXn8zjoWbu+z2Y/yXGSNoxaweNSfTWJpPwwSx/Jnp1aTb+f0Trk T+GibSBmRtKySPI7rt3btCi3rzCNozFbvmjQxq+dCsQ8NG2RrWWKdb5s3KReyk/Z 4PJzHvJewKalZnpYisIZefhP/rN4oyoZf6Y1dVWT6s3XodI/eeiltKETS8l9ovyK RC37xyJfDUvnREVeuAFooMq1qJyUFDTq+xaQcGbbZKmNndDKdPwsXFUVQMg+zse0 RcB4tVPN927HaJzbR1nPSRfbOQp1NHsdn67aNHjLlbQBalRrcwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOsrrdVvgCAzwe63ICipUGXHJZLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEI5XmHY2OAZcgp9Em6xqlaMo0stng6YTkT4lVQGy0JQMP18 8F0+KRFil3WemASdplDkUoH0iLknVp6SwVW7EQGEdaIa8VRiMQKoe7MwhaqeMlFQ z1rtUaZInw0BuAv/xVTw9OOW+nfbrs9d2RvJyVQ+shqC4hwgU6m0zEFtxhitJf/A t5BO+Jqjx8u7j6D0BWZ/uIXuC1BFUn3iFNq/OmuPWiP/rx52xGB4YXGp1fuaYnZb fVC7KMDLXW7nxpbvLrcRdoGH8Z7BbmSXZ5PiPmzQqXKIRh8Qo9TbKlVWjkk/lWKN tC6724YC5zAZpnxz+RTGx7vk6i32PVz4rhdjKfw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:09 2026 by rpki-client