$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa File: 2835e3ce-fa92-3982-99cc-4b7897a5f628.roa (raw, json) Hash identifier: O7xRPVF6LpVs+mje5fh0gcffxADB1Y/ldUap2s+qRLM= Subject key identifier: 6C:8C:3F:A9:72:58:C6:B1:06:0D:33:AD:58:FF:E6:15:68:C3:2A:B7 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2B2F9886A4AF0BB3F0C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 199.36.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:2f:98:86:a4:af:0b:b3:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=a0fd1fb1-73c8-4cf8-8420-1d0388203b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:b5:33:2d:d4:c3:b9:5b:3c:6e:a4:73:bd: e8:3e:56:06:fe:94:85:86:0a:8b:8a:ff:7b:7a:f9: c7:a8:5c:0b:3e:20:66:4e:18:40:8e:11:4b:90:78: 3e:d1:99:32:6a:a5:39:66:57:fa:1e:dd:45:5c:09: 5f:85:ed:20:11:8d:45:7e:e3:4c:7a:32:57:a6:c2: ba:20:f6:ef:9f:cf:77:6c:26:18:c5:80:0d:80:8d: 8d:b8:39:15:0a:77:c0:a2:f5:38:0b:76:b2:dc:be: 1f:79:90:33:fd:46:18:d6:e1:a4:68:33:45:b9:f5: 9b:18:e8:51:af:32:5d:6d:ca:a6:43:d4:f2:51:c3: ac:d3:00:e7:c6:ed:90:3a:30:94:9e:c5:8a:32:b6: 01:c1:00:de:ec:f4:43:45:13:46:5f:22:83:d6:2d: d1:1b:ee:69:cc:12:dd:d7:99:59:20:90:9d:73:bd: 88:f4:2e:b8:4f:4c:77:5d:a4:fc:d7:5d:e9:a1:79: 7d:ea:60:d4:96:55:e1:0b:a9:f9:87:37:0d:7e:c8: a9:83:52:a6:7a:a7:19:c1:c7:eb:a1:86:eb:98:01: a9:66:3b:a6:6a:c0:a8:5f:09:01:fc:3e:9e:2f:66: a4:f7:77:7f:25:30:2e:cb:b4:82:2c:04:cc:b2:91: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8C:3F:A9:72:58:C6:B1:06:0D:33:AD:58:FF:E6:15:68:C3:2A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2835e3ce-fa92-3982-99cc-4b7897a5f628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.36.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8e:ba:60:5b:5f:73:95:e6:e3:6b:3b:df:2b:1b:85:7e:35: 7f:7f:98:2b:5e:a4:1d:d1:8c:b6:3f:9e:74:48:3b:d1:ff:4b: 38:db:6d:09:3a:47:af:57:d1:cb:62:36:15:40:ca:a6:2e:77: 4c:62:b5:2f:e1:31:af:b2:11:23:67:01:fa:61:2b:3d:ac:21: e8:d4:cb:01:56:c5:12:6c:78:f1:cc:25:96:e2:9c:76:41:1f: f8:1c:30:51:b1:57:3e:7e:86:29:28:f8:7b:2c:45:ad:16:8f: 69:dc:f5:8e:1d:89:e7:fc:9a:4a:f8:46:55:bf:1f:69:c7:3d: cc:78:9d:d3:72:69:e8:ea:77:5e:34:71:5a:f3:83:d5:87:2e: 10:4a:22:69:a7:76:b9:9f:bc:86:77:4a:23:5f:7b:b6:7c:a1: 38:58:1c:92:f2:81:16:ca:d2:1e:d2:ea:15:08:69:af:fa:99: a0:4d:1a:89:a4:12:3e:16:db:2d:06:23:f6:52:77:c0:58:b7: 9e:b7:c0:d1:23:fb:ed:c6:32:1d:4d:80:72:af:e4:4b:c7:ee: 14:8b:0d:f6:14:0b:2e:4a:d8:da:14:b6:10:f4:14:2a:54:2d: 3e:9d:cb:ca:0f:11:3f:b6:35:00:52:c4:e9:bd:06:9b:66:26: 02:1c:6b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSsvmIakrwuz8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YTBmZDFmYjEtNzNjOC00Y2Y4LTg0MjAtMWQwMzg4MjAzYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo61My3Uw7lbPG6kc73oPlYG/pSFhgqLiv97 evnHqFwLPiBmThhAjhFLkHg+0ZkyaqU5Zlf6Ht1FXAlfhe0gEY1FfuNMejJXpsK6 IPbvn893bCYYxYANgI2NuDkVCnfAovU4C3ay3L4feZAz/UYY1uGkaDNFufWbGOhR rzJdbcqmQ9TyUcOs0wDnxu2QOjCUnsWKMrYBwQDe7PRDRRNGXyKD1i3RG+5pzBLd 15lZIJCdc72I9C64T0x3XaT8113poXl96mDUllXhC6n5hzcNfsipg1KmeqcZwcfr oYbrmAGpZjumasCoXwkB/D6eL2ak93d/JTAuy7SCLATMspGmawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyMP6lyWMaxBg0zrVj/5hVowyq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMjgzNWUzY2UtZmE5Mi0z OTgyLTk5Y2MtNGI3ODk3YTVmNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeOumBbX3OV5uNrO98rG4V+NX9/mCtepB3RjLY/nnRIO9H/SzjbbQk6 R69X0ctiNhVAyqYud0xitS/hMa+yESNnAfphKz2sIejUywFWxRJsePHMJZbinHZB H/gcMFGxVz5+hiko+HssRa0Wj2nc9Y4dief8mkr4RlW/H2nHPcx4ndNyaejqd140 cVrzg9WHLhBKImmndrmfvIZ3SiNfe7Z8oThYHJLygRbK0h7S6hUIaa/6maBNGomk Ej4W2y0GI/ZSd8BYt563wNEj++3GMh1NgHKv5EvH7hSLDfYUCy5K2NoUthD0FCpU LT6dy8oPET+2NQBSxOm9BptmJgIcayM= -----END CERTIFICATE-----Generated at Thu Sep 24 13:26:40 2026 by rpki-client