$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa File: 2e383e3e-0344-3c61-8718-33b9fa1deed1.roa (raw, json) Hash identifier: 9N1kEEuEsAmH+FCNSFkJLFTZdW/CQSGfbc9P8umRkps= Subject key identifier: 85:26:E3:F2:92:73:80:D7:CA:02:7F:6A:8A:DA:62:03:F4:AA:21:DF Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F3482722717531EDA0FEC2340 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 208.118.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:72:27:17:53:1e:da:0f:ec:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=21eefff6-3adc-4759-a126-7763a557de65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:e7:85:0b:e3:eb:5b:52:ce:38:cc:07:4c: d2:83:c7:8c:61:20:40:95:1a:cb:16:29:d1:cc:81: ee:c0:25:01:95:c7:17:ab:a4:4d:f1:9d:54:bb:31: 51:0c:b5:b8:3f:3c:e5:11:08:f4:ec:68:85:d8:64: 66:0f:cc:b3:d1:9c:85:ea:c2:b6:c2:e6:c2:70:89: cc:3c:92:bc:73:e7:83:64:88:cb:59:08:77:08:55: 00:a4:89:aa:4d:4a:40:8f:0e:20:40:75:28:b2:aa: be:70:9d:17:44:d3:bf:28:13:45:53:cc:eb:94:cb: 46:ae:c4:11:b3:8f:76:56:cb:c0:95:ee:42:7c:8a: 16:d7:9d:05:e6:1d:24:a5:e7:a2:72:71:98:97:5c: 82:f4:df:06:15:93:2e:9b:66:7f:87:c8:50:01:8c: cb:cb:af:c0:67:00:4d:09:d5:d8:7b:6f:04:81:68: c1:56:c9:9a:9b:fe:d0:37:62:01:4c:8d:ab:37:ab: ce:41:a1:6f:c8:26:05:c7:ed:e5:b3:89:dd:eb:30: a4:30:c0:c9:d3:f1:ed:40:1b:58:f0:50:d6:01:8a: dd:48:3b:92:36:38:3b:b0:de:cb:d2:2c:0e:0a:0d: 09:c1:c2:d4:35:89:34:18:e2:88:87:b2:c2:f2:98: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:E3:F2:92:73:80:D7:CA:02:7F:6A:8A:DA:62:03:F4:AA:21:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 208.118.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5a:98:fa:a9:bc:3a:16:58:b4:80:85:97:25:34:75:5c:93: dd:9b:8c:28:bb:08:b8:e6:b1:90:0a:a0:ef:11:7f:ec:96:de: 10:18:6c:38:dd:7f:9b:dd:92:05:bb:51:95:61:6e:97:bc:4a: 80:c9:e7:f7:46:e9:1b:72:f4:e0:64:d7:e4:a3:1b:b3:88:77: fb:40:33:68:f3:15:82:d7:ba:0c:7d:a9:b6:c8:60:20:6d:f2: 22:e3:34:96:0e:f6:ec:a4:1d:d6:8c:48:fa:c3:89:d9:b8:64: 2a:c2:ac:b4:26:9c:f5:d9:d4:bd:dd:41:b8:74:a4:00:88:8a: 6f:cb:21:5d:25:7d:8a:fe:73:58:ed:9a:6d:ff:1e:6f:7c:49: 38:53:2b:74:2e:c3:77:ab:4f:33:a9:08:94:f3:91:6f:e7:45: 28:27:59:38:e4:54:b2:cd:37:b5:26:f4:37:91:b8:ae:48:c8: 70:f6:ad:10:93:52:b2:6b:8a:32:da:52:c8:de:68:1f:99:af: d7:ef:ec:a1:2f:a2:3b:a0:56:62:1f:17:d7:87:68:22:c7:0c: b5:c3:b7:e2:a8:ab:14:29:59:5d:43:0a:f1:9b:1d:00:19:11: 34:ac:d2:c0:18:ac:2f:88:0b:01:80:9f:39:21:d6:c1:82:c7: 46:32:15:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnInF1Me2g/sI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk MjFlZWZmZjYtM2FkYy00NzU5LWExMjYtNzc2M2E1NTdkZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5DnhQvj61tSzjjMB0zSg8eMYSBAlRrLFinR zIHuwCUBlccXq6RN8Z1UuzFRDLW4PzzlEQj07GiF2GRmD8yz0ZyF6sK2wubCcInM PJK8c+eDZIjLWQh3CFUApImqTUpAjw4gQHUosqq+cJ0XRNO/KBNFU8zrlMtGrsQR s492VsvAle5CfIoW150F5h0kpeeicnGYl1yC9N8GFZMum2Z/h8hQAYzLy6/AZwBN CdXYe28EgWjBVsmam/7QN2IBTI2rN6vOQaFvyCYFx+3ls4nd6zCkMMDJ0/HtQBtY 8FDWAYrdSDuSNjg7sN7L0iwOCg0JwcLUNYk0GOKIh7LC8phgNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUm4/KSc4DXygJ/aoraYgP0qiHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmUzODNlM2UtMDM0NC0z YzYxLTg3MTgtMzNiOWZhMWRlZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRamPqpvDoWWLSAhZclNHVck92bjCi7CLjmsZAKoO8Rf+yW3hAYbDjd f5vdkgW7UZVhbpe8SoDJ5/dG6Rty9OBk1+SjG7OId/tAM2jzFYLXugx9qbbIYCBt 8iLjNJYO9uykHdaMSPrDidm4ZCrCrLQmnPXZ1L3dQbh0pACIim/LIV0lfYr+c1jt mm3/Hm98SThTK3Quw3erTzOpCJTzkW/nRSgnWTjkVLLNN7Um9DeRuK5IyHD2rRCT UrJrijLaUsjeaB+Zr9fv7KEvojugVmIfF9eHaCLHDLXDt+KoqxQpWV1DCvGbHQAZ ETSs0sAYrC+ICwGAnzkh1sGCx0YyFWw= -----END CERTIFICATE-----Generated at Wed Sep 23 07:49:01 2026 by rpki-client