$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2f1fcf9d-d140-3eef-a96f-794c153824e4.roa File: 2f1fcf9d-d140-3eef-a96f-794c153824e4.roa (raw, json) Hash identifier: /xbyYV3XfowYQYYOYwID8QiC+vTcSi9b3Ips1QDiS90= Subject key identifier: A8:A4:A9:EE:E2:D2:06:6E:27:9F:C6:1D:C1:FD:9B:E6:F0:64:C3:6C Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2B3B86783472E1229A80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2f1fcf9d-d140-3eef-a96f-794c153824e4.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 184.75.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:3b:86:78:34:72:e1:22:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=617303a9-624d-4b99-a406-918064da4f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:23:0f:cd:6f:c3:1c:f9:80:45:23:87:62: 19:c1:6f:16:c3:95:c1:5f:0b:5b:98:a1:ae:8c:82: ca:90:a7:69:32:de:ec:f3:e1:6a:bf:c3:e5:d7:92: 17:a0:ac:a1:b6:53:63:b8:18:6c:59:91:23:22:f7: b4:28:5a:09:f3:ee:47:06:82:43:0d:83:96:4a:32: 92:ef:cd:36:8c:88:ac:ba:b7:5f:f4:96:78:9d:f0: a1:a6:b4:cf:be:71:61:f6:73:0c:70:48:8a:58:4a: 6d:a6:81:7a:0b:1e:24:25:04:1a:20:62:9d:3a:9f: a4:34:d6:73:6b:c8:a3:da:67:ab:4f:28:ec:d7:33: f2:af:a8:fa:28:bc:07:d2:1d:44:e2:83:a7:b3:6f: 8e:6a:b6:1d:47:55:78:46:dc:50:56:58:36:36:2a: 28:07:35:6e:36:4e:91:1e:9f:7a:91:75:80:ef:50: 8c:f2:97:a5:6f:e7:00:74:73:c4:8a:d2:e0:48:13: 77:a4:43:95:ab:e2:39:0b:c1:2a:fa:8b:d8:e5:0f: 91:90:ac:c6:7b:ed:f0:ae:74:47:00:cd:cd:ca:5d: 1e:0c:24:4d:85:21:0c:3c:d3:86:87:b3:ee:b9:46: 5e:aa:4e:e0:35:44:1a:4b:2f:da:8b:ed:fd:f1:a8: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A4:A9:EE:E2:D2:06:6E:27:9F:C6:1D:C1:FD:9B:E6:F0:64:C3:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2f1fcf9d-d140-3eef-a96f-794c153824e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 184.75.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ef:aa:96:04:18:0a:53:b3:f0:1f:21:70:d5:17:94:1c:1d: 15:91:e6:4f:93:2a:97:ac:77:61:9b:26:73:58:2c:87:4d:40: 4d:1f:be:11:d8:35:b6:50:64:41:55:28:39:aa:d1:5b:95:6d: c1:04:1f:41:1f:cd:e7:12:7e:5d:88:36:2d:de:32:25:3c:10: d6:5b:9b:9c:24:65:73:e7:15:6f:31:a0:fd:b3:b4:89:3e:05: d1:f1:4f:54:04:5f:86:a3:e7:ce:4e:db:bb:dd:5a:dc:fb:0d: e5:26:f8:b3:65:3e:de:30:b3:92:ea:71:d8:4b:d3:33:ac:fe: 47:a8:46:0c:83:cf:ce:80:c2:e1:3f:5b:c8:b5:f6:93:1a:10: 86:15:17:d2:69:17:88:3d:f8:3e:1d:8f:74:91:e8:19:5a:1a: 47:50:81:5f:64:b4:64:5f:f7:14:fc:17:0e:14:f5:23:6d:1a: c4:5b:b6:b5:41:2e:66:24:30:7c:16:e6:c0:89:25:37:d8:17: e3:fe:cb:d9:35:c8:d2:3a:ca:af:17:ad:c8:e6:05:a5:f1:94: d2:40:0b:74:2d:1c:04:81:aa:28:74:60:e1:76:01:83:c2:ad: 18:a0:8c:7d:fe:2d:1e:9c:69:f9:4d:17:8d:ca:6b:32:3a:d0: 64:75:b0:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSs7hng0cuEimoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NjE3MzAzYTktNjI0ZC00Yjk5LWE0MDYtOTE4MDY0ZGE0ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz4jD81vwxz5gEUjh2IZwW8Ww5XBXwtbmKGu jILKkKdpMt7s8+Fqv8Pl15IXoKyhtlNjuBhsWZEjIve0KFoJ8+5HBoJDDYOWSjKS 7802jIisurdf9JZ4nfChprTPvnFh9nMMcEiKWEptpoF6Cx4kJQQaIGKdOp+kNNZz a8ij2merTyjs1zPyr6j6KLwH0h1E4oOns2+OarYdR1V4RtxQVlg2NiooBzVuNk6R Hp96kXWA71CM8pelb+cAdHPEitLgSBN3pEOVq+I5C8Eq+ovY5Q+RkKzGe+3wrnRH AM3Nyl0eDCRNhSEMPNOGh7PuuUZeqk7gNUQaSy/ai+398ahy1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKikqe7i0gZuJ5/GHcH9m+bwZMNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmYxZmNmOWQtZDE0MC0z ZWVmLWE5NmYtNzk0YzE1MzgyNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuEuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjvqpYEGApTs/AfIXDVF5QcHRWR5k+TKpesd2GbJnNYLIdNQE0fvhHY NbZQZEFVKDmq0VuVbcEEH0EfzecSfl2INi3eMiU8ENZbm5wkZXPnFW8xoP2ztIk+ BdHxT1QEX4aj585O27vdWtz7DeUm+LNlPt4ws5LqcdhL0zOs/keoRgyDz86AwuE/ W8i19pMaEIYVF9JpF4g9+D4dj3SR6BlaGkdQgV9ktGRf9xT8Fw4U9SNtGsRbtrVB LmYkMHwW5sCJJTfYF+P+y9k1yNI6yq8XrcjmBaXxlNJAC3QtHASBqih0YOF2AYPC rRigjH3+LR6caflNF43KazI60GR1sIs= -----END CERTIFICATE-----Generated at Wed Sep 23 07:33:23 2026 by rpki-client