$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa File: 1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa (raw, json) Hash identifier: UwfkFcqql7srltYEBoZMqm3mfGtgCEf0Xh5vDYcr0y4= Subject key identifier: 3D:3A:D8:CA:1E:33:16:0F:4D:FF:C2:A8:75:0C:19:2D:BE:3C:0C:7A Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2BB6108661A1321BBE00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 162.212.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:b6:10:86:61:a1:32:1b:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=5245b226-1de2-4164-ae65-ad9cb644d1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:da:11:07:d2:30:b6:94:4c:72:7b:32:e3: c5:bc:c5:27:42:40:7f:7f:8d:4f:2d:90:57:e0:28: 74:4d:3b:96:a0:90:0f:e8:c0:78:a9:9d:21:23:1d: d9:b9:dd:2b:6a:e7:12:a3:52:db:12:16:d7:19:cf: b0:69:27:5b:9c:e3:74:6a:b8:98:fa:4c:46:d7:46: 36:23:00:61:3a:bc:bb:23:50:3b:1e:33:31:8e:07: de:03:4e:b5:4d:9b:65:31:e5:57:7a:bc:25:54:3a: ed:d1:d8:ed:14:58:e5:58:a6:c9:44:6f:96:4e:61: 8d:4b:ca:8e:ce:13:6c:b4:57:53:7c:5d:18:8a:93: 01:c0:62:69:e7:9b:5a:27:78:57:f8:20:a1:2c:52: 89:12:6c:6f:60:31:06:cc:66:fd:11:4d:d8:63:9a: d8:73:cb:3b:7e:7f:8b:34:11:eb:92:fe:aa:ef:dc: 09:52:7d:23:c7:0a:6d:20:6f:03:ca:ff:df:33:7b: eb:d1:b8:3e:58:0b:4f:eb:b5:e8:52:34:5b:53:2d: 98:53:2f:37:f4:6f:6e:6d:00:93:ab:a1:94:4d:3a: 0a:e6:78:e6:32:44:25:06:82:bc:9b:02:11:dc:17: f5:b8:88:7b:68:7f:e2:d5:c7:c5:2c:30:a2:bb:ae: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:D8:CA:1E:33:16:0F:4D:FF:C2:A8:75:0C:19:2D:BE:3C:0C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.212.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d9:cd:7f:96:b3:6b:0b:4d:53:de:77:9a:59:6c:c5:e3:80: 95:64:36:a7:ca:9c:f7:ca:d7:1b:0c:46:41:df:ea:5f:7a:40: 49:05:85:4e:71:e0:76:a0:6d:c8:df:60:33:32:79:29:8f:89: 2d:5f:ac:7a:2c:ca:c9:08:3b:f7:56:07:66:f1:04:5d:ae:97: 29:fc:61:39:7d:40:c4:91:f2:f0:64:15:19:13:80:52:df:d3: d0:0b:0c:96:26:44:62:70:19:07:25:1b:ff:ee:a5:a4:da:63: 87:eb:4f:58:00:03:8c:3f:e2:f5:1a:14:33:ba:dc:e4:f1:d6: f4:09:77:14:18:fa:aa:c8:03:a0:0a:2f:21:13:cb:72:55:3f: 38:6a:11:61:ef:5e:cf:63:88:8b:5a:fd:4f:4f:90:1e:5c:c3: 90:d2:c2:f9:88:4f:a3:eb:1f:a2:28:40:c5:7a:12:0a:6a:d7: d1:c0:09:ed:6a:ed:6b:1f:06:f0:47:a9:0d:7c:47:ed:6b:9d: 87:bb:a4:a3:cc:fc:86:6e:8b:d0:e0:5b:56:22:e3:d3:4a:b3: a3:e1:c5:a2:b9:ab:06:c3:e4:b1:3f:f5:9b:84:52:e7:1d:db: ba:f6:1a:c6:bc:fa:ef:7f:3a:21:cf:d5:2e:92:7b:0f:ab:2e: b1:c1:c6:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSu2EIZhoTIbvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NTI0NWIyMjYtMWRlMi00MTY0LWFlNjUtYWQ5Y2I2NDRkMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluXaEQfSMLaUTHJ7MuPFvMUnQkB/f41PLZBX 4Ch0TTuWoJAP6MB4qZ0hIx3Zud0raucSo1LbEhbXGc+waSdbnON0ariY+kxG10Y2 IwBhOry7I1A7HjMxjgfeA061TZtlMeVXerwlVDrt0djtFFjlWKbJRG+WTmGNS8qO zhNstFdTfF0YipMBwGJp55taJ3hX+CChLFKJEmxvYDEGzGb9EU3YY5rYc8s7fn+L NBHrkv6q79wJUn0jxwptIG8Dyv/fM3vr0bg+WAtP67XoUjRbUy2YUy839G9ubQCT q6GUTToK5njmMkQlBoK8mwIR3Bf1uIh7aH/i1cfFLDCiu67abQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD062MoeMxYPTf/CqHUMGS2+PAx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWIyYjlkZjktMDZjYS0z MjNhLWI1YzgtMWVmMWRkNTk2OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDZzX+Ws2sLTVPed5pZbMXjgJVkNqfKnPfK1xsMRkHf6l96QEkFhU5x 4HagbcjfYDMyeSmPiS1frHosyskIO/dWB2bxBF2ulyn8YTl9QMSR8vBkFRkTgFLf 09ALDJYmRGJwGQclG//upaTaY4frT1gAA4w/4vUaFDO63OTx1vQJdxQY+qrIA6AK LyETy3JVPzhqEWHvXs9jiIta/U9PkB5cw5DSwvmIT6PrH6IoQMV6Egpq19HACe1q 7WsfBvBHqQ18R+1rnYe7pKPM/IZui9DgW1Yi49NKs6PhxaK5qwbD5LE/9ZuEUucd 27r2Gsa8+u9/OiHP1S6Sew+rLrHBxp4= -----END CERTIFICATE-----Generated at Wed Sep 23 15:19:17 2026 by rpki-client