$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa File: 08b963ee-e094-3e46-84b1-392bbcac2a6b.roa (raw, json) Hash identifier: s/LZCOJV4p7+oH0AM5kR08JfhvcBSRM12svEnQeINGc= Subject key identifier: D4:23:09:D0:54:D8:B9:D1:E4:18:08:0F:55:33:95:EE:EB:BD:B8:AB Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD99CE1DC09DEDBF85E221928 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 24.122.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:e1:dc:09:de:db:f8:5e:22:19:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=65b373e8-ccc6-4f2f-a801-d8a1b9f4a036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:ed:58:05:8e:3c:98:58:63:86:ac:91:ad: 49:3b:d2:a9:ba:1c:0b:af:f7:fc:f3:6f:c2:b0:56: 34:bd:92:13:1d:fb:75:03:72:ce:0f:44:fc:63:d3: cf:ca:82:bd:2a:85:00:bf:2f:77:69:3d:76:d0:36: 92:d7:fb:e8:05:a9:b9:02:49:43:26:39:4b:ad:4d: d3:75:86:94:0b:74:e9:d9:26:07:8e:e9:48:11:af: 87:99:12:57:25:eb:00:a0:a7:82:39:2f:57:45:e7: 55:13:95:45:4f:03:a5:f5:4b:a0:f1:8a:51:ea:4b: b9:ec:96:16:16:d7:2a:7d:ee:c2:ca:9f:19:d6:79: 0a:4b:2e:05:b1:e7:d3:d1:ac:9b:9b:70:a8:de:20: a0:c7:63:ee:2f:7d:a4:64:2e:83:1e:41:74:85:99: 73:87:d7:d2:54:fc:32:62:aa:b0:3a:40:14:5d:b6: ca:df:83:66:00:83:f5:da:2a:92:92:15:dc:7e:94: fe:dd:e6:5e:06:ef:fd:97:82:d2:b8:7b:b4:96:9c: 61:9d:84:26:52:28:6f:66:4f:3e:d8:b3:58:90:7a: e3:7e:7b:91:a2:42:a3:8f:9e:83:77:3d:e2:c7:ea: ac:f4:ee:38:15:b9:84:15:71:25:7d:ef:13:c7:de: a5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:23:09:D0:54:D8:B9:D1:E4:18:08:0F:55:33:95:EE:EB:BD:B8:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:2a:8b:2d:a5:1e:d6:0e:ae:75:4a:5c:a9:a7:71:cd:a7:e1: be:7c:41:45:24:41:4f:f7:3e:0e:f5:17:6e:0d:11:26:f1:9d: 77:5d:e9:b4:c1:23:15:e1:d1:c4:b1:ed:3b:60:c9:0e:15:c8: 1d:70:3d:4e:ae:80:43:33:5a:5e:05:aa:5c:e8:a6:21:f4:58: 2a:e4:9f:43:eb:4e:cd:9e:75:d7:76:a8:04:c9:4f:c2:83:c4: 33:b0:fb:f4:25:4e:19:ba:9b:68:85:79:29:24:2d:6d:02:b9: 7c:cd:9c:43:f4:a6:85:14:36:f2:49:26:db:37:ec:8d:35:a4: 79:d0:b2:79:37:eb:3e:44:2b:16:01:88:6c:66:be:16:29:91: 15:11:73:26:3e:10:56:92:39:a3:28:b8:2f:3c:57:7b:b8:99: 4f:4b:77:c6:8a:f4:eb:0c:83:74:2d:e6:c3:67:22:dd:93:e1: ad:a8:b0:44:1a:f8:48:d8:31:e7:e6:b2:5a:78:3f:24:92:58: d5:6e:b7:a7:c7:bf:3c:a4:f1:64:21:00:db:b1:7a:8f:53:d7: 39:70:5c:93:ca:3e:b8:ff:0a:b7:6b:50:d7:15:f8:62:33:90: 67:1d:69:2d:e0:40:e7:46:91:23:39:04:21:d8:0a:44:c0:be: ca:eb:b1:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnOHcCd7b+F4iGSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk NjViMzczZTgtY2NjNi00ZjJmLWE4MDEtZDhhMWI5ZjRhMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk7tWAWOPJhYY4aska1JO9KpuhwLr/f882/C sFY0vZITHft1A3LOD0T8Y9PPyoK9KoUAvy93aT120DaS1/voBam5AklDJjlLrU3T dYaUC3Tp2SYHjulIEa+HmRJXJesAoKeCOS9XRedVE5VFTwOl9Uug8YpR6ku57JYW Ftcqfe7Cyp8Z1nkKSy4FsefT0aybm3Co3iCgx2PuL32kZC6DHkF0hZlzh9fSVPwy YqqwOkAUXbbK34NmAIP12iqSkhXcfpT+3eZeBu/9l4LSuHu0lpxhnYQmUihvZk8+ 2LNYkHrjfnuRokKjj56Ddz3ix+qs9O44FbmEFXElfe8Tx96lmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQjCdBU2LnR5BgID1Uzle7rvbirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDhiOTYzZWUtZTA5NC0z ZTQ2LTg0YjEtMzkyYmJjYWMyYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEqiy2lHtYOrnVKXKmncc2n4b58QUUkQU/3Pg71F24NESbxnXdd6bTB IxXh0cSx7TtgyQ4VyB1wPU6ugEMzWl4FqlzopiH0WCrkn0PrTs2eddd2qATJT8KD xDOw+/QlThm6m2iFeSkkLW0CuXzNnEP0poUUNvJJJts37I01pHnQsnk36z5EKxYB iGxmvhYpkRURcyY+EFaSOaMouC88V3u4mU9Ld8aK9OsMg3Qt5sNnIt2T4a2osEQa +EjYMefmslp4PySSWNVut6fHvzyk8WQhANuxeo9T1zlwXJPKPrj/CrdrUNcV+GIz kGcdaS3gQOdGkSM5BCHYCkTAvsrrsXI= -----END CERTIFICATE-----Generated at Mon Mar 2 21:24:19 2026 by rpki-client