$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa File: 00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa (raw, json) Hash identifier: J7uXpMlCKUvGuEHe/MoiX6KiQYMXQZuE664EdFMbHWg= Subject key identifier: DA:BE:40:75:9A:09:2E:7D:29:A3:9E:B9:FF:E0:9F:E0:31:86:CE:6B Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD99CE048C10F251F8E1BC000 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 45.42.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:e0:48:c1:0f:25:1f:8e:1b:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=152a7966-4116-474d-b5a1-7058f56d8194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:47:b9:ac:7b:bb:48:a6:6b:4f:b2:f8:99: 8d:67:00:4d:38:d8:e8:0e:ab:ce:c3:c2:73:30:2a: cd:f8:a0:01:1a:93:5c:70:0c:29:07:23:5a:e0:65: 59:38:02:a7:ad:50:71:c6:fa:15:20:d3:cf:fe:f6: 1c:1e:57:9f:5c:50:73:c5:8b:47:3e:fe:0f:f6:ba: 46:f1:a7:8a:d7:93:a0:32:96:f6:c1:e8:e8:df:84: 7c:55:0f:00:b7:e6:95:83:1a:6a:bf:97:f4:e6:93: f6:97:73:9b:8c:85:76:fa:25:05:3b:6d:a5:56:7a: 4a:a2:ea:d5:2a:ce:f5:d2:58:34:28:a5:71:f5:dc: 88:c5:bb:59:cc:3f:38:9c:fc:40:3a:26:3e:02:e6: c8:81:74:92:3a:23:87:69:33:91:f0:a6:be:06:dd: f8:bb:92:e2:f1:a3:6f:1c:2b:59:54:00:05:fd:bd: 0d:08:7f:13:fe:bc:4e:f8:5f:41:3f:8a:65:ce:fe: c3:2c:58:c2:f7:d2:61:86:d2:b2:a5:61:9a:4d:c3: d9:90:03:5e:7a:5b:f8:e2:37:42:5f:cd:f5:ac:57: 8b:71:44:79:ca:f9:c5:7c:68:9a:07:bf:b2:03:ce: bd:ce:81:e1:fb:21:2a:58:c0:76:ee:47:0b:c2:e1: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BE:40:75:9A:09:2E:7D:29:A3:9E:B9:FF:E0:9F:E0:31:86:CE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4c:25:d6:fa:b4:f6:19:c6:9b:f2:bd:67:b1:3f:9f:e9:00: 83:2c:8f:b4:ba:69:5a:33:6d:18:f7:43:7c:ee:b3:7c:c5:7d: db:97:34:e7:46:51:31:37:26:f3:8d:0e:6f:59:85:69:9b:a9: f7:2f:9a:36:bd:66:94:61:8c:2c:41:3b:59:68:2f:e2:ad:74: 62:84:7f:89:e2:95:39:b6:6c:88:76:b3:9f:94:de:d8:cc:09: 1e:ef:0e:7d:f9:17:94:5e:5c:76:6a:a8:7c:76:0d:0e:12:7c: cc:e0:38:99:40:bd:e5:db:59:49:08:06:e4:f6:15:09:e7:48: 51:06:09:0b:c8:34:31:4a:d6:39:56:f3:7d:b4:77:48:20:8a: 6a:33:c8:d9:bf:15:3b:e0:3f:fe:72:14:5a:b7:0c:04:70:31: 52:bf:f3:16:54:d4:64:f3:6f:10:33:13:58:cc:97:0e:b1:08: b2:c5:f7:18:d3:e5:9c:b6:b1:0b:f3:ba:01:96:41:c1:97:55: bc:eb:d6:43:57:92:ba:58:a7:5e:4d:61:d9:8e:d1:3a:43:8a: 20:71:b6:e0:ed:89:d3:34:2f:45:5b:12:31:4f:af:f7:47:24: 9c:01:d2:c0:d0:11:c5:16:77:6a:fe:20:34:47:40:dc:38:a1: 77:63:5f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnOBIwQ8lH44bwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk MTUyYTc5NjYtNDExNi00NzRkLWI1YTEtNzA1OGY1NmQ4MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DFHuax7u0ima0+y+JmNZwBNONjoDqvOw8Jz MCrN+KABGpNccAwpByNa4GVZOAKnrVBxxvoVINPP/vYcHlefXFBzxYtHPv4P9rpG 8aeK15OgMpb2wejo34R8VQ8At+aVgxpqv5f05pP2l3ObjIV2+iUFO22lVnpKourV Ks710lg0KKVx9dyIxbtZzD84nPxAOiY+AubIgXSSOiOHaTOR8Ka+Bt34u5Li8aNv HCtZVAAF/b0NCH8T/rxO+F9BP4plzv7DLFjC99JhhtKypWGaTcPZkANeelv44jdC X831rFeLcUR5yvnFfGiaB7+yA869zoHh+yEqWMB27kcLwuHlNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq+QHWaCS59KaOeuf/gn+Axhs5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDBmN2E0ZjctYmZlNC0z MGYzLWFmOTktYjRlM2M5ZjkzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1MJdb6tPYZxpvyvWexP5/pAIMsj7S6aVozbRj3Q3zus3zFfduXNOdG UTE3JvONDm9ZhWmbqfcvmja9ZpRhjCxBO1loL+KtdGKEf4nilTm2bIh2s5+U3tjM CR7vDn35F5ReXHZqqHx2DQ4SfMzgOJlAveXbWUkIBuT2FQnnSFEGCQvINDFK1jlW 8320d0ggimozyNm/FTvgP/5yFFq3DARwMVK/8xZU1GTzbxAzE1jMlw6xCLLF9xjT 5Zy2sQvzugGWQcGXVbzr1kNXkrpYp15NYdmO0TpDiiBxtuDtidM0L0VbEjFPr/dH JJwB0sDQEcUWd2r+IDRHQNw4oXdjX+Y= -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:18 2026 by rpki-client