$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa File: 4d58ad68-e72d-3144-8f6b-f06127b90f33.roa (raw, json) Hash identifier: qMZjaO0r9Oyfmg4sSEOIfFlnUP9rMgvUn19m6QOG1sQ= Subject key identifier: 88:9D:EE:AE:C0:99:5A:86:5C:5C:CF:7E:71:61:54:05:9C:7E:28:BF Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2BD9CEAF87D1B15AD320 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 144.168.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:d9:ce:af:87:d1:b1:5a:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=2f07cb32-7a2a-4c52-ae94-8a57324fee36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:b1:67:d5:ad:ad:d4:7c:49:ee:bd:b0:ad: f6:da:21:82:38:29:1f:56:12:84:ef:32:8a:41:68: f6:ad:29:df:94:22:d3:ae:5f:bb:c1:34:6b:cb:3c: 9b:bd:b6:d3:c2:d1:7a:42:62:56:cc:de:bf:88:21: b0:63:d2:10:be:60:c7:e4:01:98:6b:02:9d:68:e0: 77:fc:8a:a7:64:62:d8:11:d3:7f:ed:cf:ca:44:84: 5c:7c:95:b2:56:d4:6b:27:f0:85:43:57:40:02:6c: 1d:e1:e6:17:19:95:59:43:93:a3:2d:a4:3d:4d:64: 5b:85:f6:08:bd:48:92:66:e0:a3:d6:00:c3:d0:a6: 02:f9:40:e5:64:d3:8e:bc:7c:ad:2f:6c:4e:d0:f9: ff:3e:8b:a9:00:18:b2:57:03:e6:92:79:99:83:29: 48:df:7a:1f:bd:eb:3b:53:ab:b1:7e:c0:48:de:48: de:8d:6c:1a:c7:d8:3e:0f:ce:f8:3e:9c:5c:11:f5: d9:a0:a0:d5:eb:0a:bc:5f:37:49:6f:d1:67:c9:70: eb:f0:a9:df:f1:0e:a5:92:d6:54:88:d8:9f:b6:a5: 43:e6:dc:e7:e2:4d:0a:a0:d8:52:60:a2:35:73:d8: 82:ad:c6:ca:5e:37:b6:1a:f4:60:87:6e:89:ff:ae: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9D:EE:AE:C0:99:5A:86:5C:5C:CF:7E:71:61:54:05:9C:7E:28:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 144.168.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:44:88:ee:4d:9f:61:26:4e:21:67:d5:d2:a1:8f:1d:46:10: ce:7a:09:c9:37:5c:6a:af:7d:40:73:b4:f3:af:65:37:e3:2a: 80:f5:e4:e2:12:15:31:d4:68:6e:18:32:2c:58:a1:af:70:0b: 27:b3:22:15:a2:9d:dc:e2:ea:e2:9e:79:03:40:b3:d3:f3:6b: f5:5c:6d:24:1a:93:de:9e:3a:b6:f8:d5:24:8f:c1:f4:3f:b8: 93:b0:76:24:64:54:29:17:fa:66:1b:79:67:60:8a:a9:50:af: fc:30:3a:6c:dd:eb:e2:8f:a1:49:81:2c:01:08:14:32:9b:b4: e5:ae:7a:35:1f:4a:3d:83:54:b6:a1:54:25:83:13:b7:44:04: 5e:f9:5a:5a:05:52:f0:a3:c0:fb:e3:07:30:7b:9d:92:e3:ef: a2:69:91:f8:e7:b2:39:ab:16:09:1a:63:ca:fe:f3:33:76:ae: e0:1b:58:d2:9a:36:85:3b:75:59:bf:87:3d:47:d7:f1:c5:0b: 4e:01:c1:b0:e4:90:0f:ad:c7:78:e7:3d:a2:f3:a4:ab:9a:5d: 2e:5a:90:d0:dc:74:eb:9f:9c:cc:7b:e3:d4:ef:97:29:ac:82: fd:98:c7:af:20:95:ea:42:02:ee:69:a8:3e:61:bc:8b:41:51: 0d:9f:da:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSvZzq+H0bFa0yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk MmYwN2NiMzItN2EyYS00YzUyLWFlOTQtOGE1NzMyNGZlZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBWxZ9WtrdR8Se69sK322iGCOCkfVhKE7zKK QWj2rSnflCLTrl+7wTRryzybvbbTwtF6QmJWzN6/iCGwY9IQvmDH5AGYawKdaOB3 /IqnZGLYEdN/7c/KRIRcfJWyVtRrJ/CFQ1dAAmwd4eYXGZVZQ5OjLaQ9TWRbhfYI vUiSZuCj1gDD0KYC+UDlZNOOvHytL2xO0Pn/PoupABiyVwPmknmZgylI33ofves7 U6uxfsBI3kjejWwax9g+D874PpxcEfXZoKDV6wq8XzdJb9FnyXDr8Knf8Q6lktZU iNiftqVD5tzn4k0KoNhSYKI1c9iCrcbKXje2GvRgh26J/64QAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIid7q7AmVqGXFzPfnFhVAWcfii/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNGQ1OGFkNjgtZTcyZC0z MTQ0LThmNmItZjA2MTI3YjkwZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxEiO5Nn2EmTiFn1dKhjx1GEM56Cck3XGqvfUBztPOvZTfjKoD15OIS FTHUaG4YMixYoa9wCyezIhWindzi6uKeeQNAs9Pza/VcbSQak96eOrb41SSPwfQ/ uJOwdiRkVCkX+mYbeWdgiqlQr/wwOmzd6+KPoUmBLAEIFDKbtOWuejUfSj2DVLah VCWDE7dEBF75WloFUvCjwPvjBzB7nZLj76JpkfjnsjmrFgkaY8r+8zN2ruAbWNKa NoU7dVm/hz1H1/HFC04BwbDkkA+tx3jnPaLzpKuaXS5akNDcdOufnMx749Tvlyms gv2Yx68glepCAu5pqD5hvItBUQ2f2uA= -----END CERTIFICATE-----Generated at Wed Sep 23 05:19:42 2026 by rpki-client