$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa File: 2835e3ce-fa92-3982-99cc-4b7897a5f628.roa (raw, json) Hash identifier: YyvNU0bu2QIzZiG1liEZiE/Cv+FbvcmPmKL7+pAplQI= Subject key identifier: 57:40:FE:9F:BC:2E:C8:90:35:B2:A6:75:8F:18:F3:A2:D3:0D:51:8B Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD4076B6C260CE98B7E1C7C80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 199.36.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6b:6c:26:0c:e9:8b:7e:1c:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=0d2059fe-33af-49ea-94a5-b8a2b9d065ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ff:65:a8:ed:07:31:de:b0:1c:67:81:12:89: ad:6b:e1:3b:e7:f4:a6:d2:a9:05:11:d0:4a:6a:87: 34:d3:fb:94:7f:72:65:62:09:c8:ca:a3:d4:9c:c1: 9c:ad:fe:35:a8:c0:8c:c2:04:6d:82:76:9c:d7:59: 98:f4:c5:22:b7:f3:8a:b1:d2:d2:48:55:81:fa:4a: 58:73:eb:a7:23:1e:17:94:a5:2f:a4:41:5a:ca:35: c5:cd:a1:20:5e:38:14:2f:6f:1b:c9:7e:0b:39:4a: f9:fe:1c:b3:ce:2f:88:bc:ce:f3:dd:75:03:7e:31: 43:60:0c:df:ca:3e:8d:f5:a0:71:a9:b6:e4:67:3e: cf:06:c0:75:58:bc:78:8d:51:bf:a9:03:40:fe:75: 49:fb:df:37:32:86:ad:eb:ef:ac:de:73:b8:7e:24: f9:57:3e:0f:3a:f5:8a:9d:1e:34:de:e3:ec:3f:53: f7:84:c2:1a:d1:af:ab:d4:b7:8c:25:15:ef:e1:5c: ea:ff:8a:b6:95:67:49:94:db:a6:f7:a4:9d:93:75: 33:4e:d4:9e:3d:ce:d6:30:5b:41:b1:4f:a5:17:7b: a6:6b:26:29:30:ed:5c:fc:f8:77:15:57:1a:26:a2: d4:2f:16:00:26:97:60:e1:f4:d6:84:ca:8a:ba:5c: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:40:FE:9F:BC:2E:C8:90:35:B2:A6:75:8F:18:F3:A2:D3:0D:51:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.36.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a9:77:b7:a2:3f:10:41:7a:03:e2:09:c0:86:48:97:65:07: b1:ea:bc:a2:f8:eb:ca:57:96:51:e0:07:7f:6c:d4:45:cb:7b: 7e:36:1a:27:fe:f7:c4:57:a0:f1:a8:d7:45:ed:e9:8a:45:7c: 3e:46:c4:b8:b7:2a:50:98:54:dd:7a:31:f5:13:10:94:91:f2: 73:40:df:c7:c4:2d:5b:1c:93:39:b4:61:71:96:45:74:4d:4e: 44:2b:cd:e2:66:c8:0a:5c:ee:db:1d:7f:c9:b4:77:1f:aa:3e: 57:83:c4:06:91:3a:39:d0:4e:2c:b6:f6:70:b7:f6:5b:00:86: b4:fb:8c:af:f0:18:3c:7b:b8:f9:76:2b:43:af:e8:e5:3e:e2: 3c:8a:eb:73:af:48:85:53:48:1d:77:66:d5:bf:ea:cb:49:6d: 50:71:0b:7e:be:be:c5:4e:38:00:e8:ce:eb:1f:d3:77:0d:77: 21:9b:71:27:af:04:2d:38:42:55:29:70:99:9f:82:9e:f7:07: 02:30:d0:13:10:51:39:74:62:33:ef:ee:a1:ee:a4:d1:21:08: 99:7b:e7:58:aa:f9:57:5b:50:5a:f1:b4:e3:9e:e2:d3:5f:af: 5d:37:51:57:ef:2f:00:66:78:42:38:90:96:b6:5d:f5:59:2b: e0:06:7b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2tsJgzpi34cfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk MGQyMDU5ZmUtMzNhZi00OWVhLTk0YTUtYjhhMmI5ZDA2NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/9lqO0HMd6wHGeBEomta+E75/Sm0qkFEdBK aoc00/uUf3JlYgnIyqPUnMGcrf41qMCMwgRtgnac11mY9MUit/OKsdLSSFWB+kpY c+unIx4XlKUvpEFayjXFzaEgXjgUL28byX4LOUr5/hyzzi+IvM7z3XUDfjFDYAzf yj6N9aBxqbbkZz7PBsB1WLx4jVG/qQNA/nVJ+983Moat6++s3nO4fiT5Vz4POvWK nR403uPsP1P3hMIa0a+r1LeMJRXv4Vzq/4q2lWdJlNum96Sdk3UzTtSePc7WMFtB sU+lF3umayYpMO1c/Ph3FVcaJqLULxYAJpdg4fTWhMqKulwsQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdA/p+8LsiQNbKmdY8Y86LTDVGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMjgzNWUzY2UtZmE5Mi0z OTgyLTk5Y2MtNGI3ODk3YTVmNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCpd7eiPxBBegPiCcCGSJdlB7HqvKL468pXllHgB39s1EXLe342Gif+ 98RXoPGo10Xt6YpFfD5GxLi3KlCYVN16MfUTEJSR8nNA38fELVsckzm0YXGWRXRN TkQrzeJmyApc7tsdf8m0dx+qPleDxAaROjnQTiy29nC39lsAhrT7jK/wGDx7uPl2 K0Ov6OU+4jyK63OvSIVTSB13ZtW/6stJbVBxC36+vsVOOADozusf03cNdyGbcSev BC04QlUpcJmfgp73BwIw0BMQUTl0YjPv7qHupNEhCJl751iq+VdbUFrxtOOe4tNf r103UVfvLwBmeEI4kJa2XfVZK+AGe7E= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:08 2026 by rpki-client