$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa File: 65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa (raw, json) Hash identifier: BKgm3ibyIP3UoGrUmk7XT+3cZeSthG6tX7h1/8L7nDI= Subject key identifier: 8A:25:9D:40:8E:D5:7A:EB:4C:E2:35:18:F9:30:EE:1B:C1:7C:13:8E Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F3482725E60BC953A79A62AE0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 209.169.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:72:5e:60:bc:95:3a:79:a6:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=331ae921-70eb-4e16-bb01-667ffa3032e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:7a:59:5f:2d:f1:08:fe:c4:89:80:f7:a5: 7b:70:a8:0d:23:7a:5e:3c:db:1d:2a:1b:a3:80:6a: e3:20:39:74:28:fc:52:f9:f8:0a:25:58:e6:08:c6: 02:75:0a:e1:ed:31:9a:26:a2:85:09:5d:a6:a8:71: ac:bb:f0:fc:31:bd:5e:79:35:c9:b6:84:af:06:62: 0b:70:78:03:56:a0:a4:b9:9d:3d:d3:91:11:93:39: 2e:f5:0c:59:52:69:b5:fc:88:3c:37:33:da:45:88: 1c:c2:fc:6c:f2:01:f6:e0:5a:0c:3c:81:78:99:61: 95:c5:0d:ec:2d:2c:6f:8e:1b:c9:54:22:bc:7d:12: c8:14:2a:27:e8:69:a7:76:da:81:f8:e4:15:3c:1c: 47:70:66:f2:be:ce:f7:82:89:70:08:52:b9:f4:ae: e9:1f:27:1e:b2:42:c9:94:e9:d3:a8:ed:f2:26:8a: c8:1c:d0:a4:b9:44:17:b7:af:4a:ba:8c:a1:07:42: bb:38:19:81:b4:bd:b9:07:55:07:3d:3b:5c:32:3c: 48:e2:d7:8b:3b:c8:07:d0:33:39:0f:30:88:7c:c0: 6b:ef:e2:23:ce:07:a4:7b:34:48:54:ad:93:af:05: 9a:10:8e:b6:1d:4f:8f:03:c9:a7:6f:f6:82:1b:0c: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:9D:40:8E:D5:7A:EB:4C:E2:35:18:F9:30:EE:1B:C1:7C:13:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.169.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:10:e0:7e:8a:08:8c:b5:d2:1b:5f:a3:e3:ca:1b:aa:09:6c: ce:60:1f:e2:a6:e0:57:03:7a:3a:c0:bc:fa:90:ee:75:89:c4: e1:c3:3b:2b:35:8d:e9:bc:39:f0:1c:08:f2:85:71:11:5d:89: bf:bf:73:73:e6:77:9c:35:09:c8:30:fd:21:c7:b3:78:13:e2: 96:3f:83:f1:c7:ab:45:37:05:2f:b9:00:28:a2:87:93:92:8c: d4:1d:e1:72:d9:f6:8f:7f:1f:a3:74:c9:62:37:ae:8b:93:2a: 16:71:3c:d3:24:a2:79:fc:41:a7:0d:26:e1:3a:c0:af:b0:cb: e6:d0:b8:79:c2:65:94:92:9c:bf:bf:71:32:29:72:63:3f:74: 52:7f:00:3d:7e:9c:fa:90:5c:98:71:dd:c1:18:8b:90:d6:b5: 2d:89:5a:1b:1f:0e:9c:85:42:0e:c8:ea:71:a1:68:01:01:c5: 98:e3:0f:17:f6:7b:e2:68:12:84:17:ce:3d:61:0d:fb:50:bd: 5e:b1:40:51:06:d6:66:6a:a4:ae:cc:78:68:0b:de:ef:8a:b4: c1:8f:98:e4:79:28:f9:71:ee:8d:21:55:d1:8f:da:91:81:3d: db:75:9b:48:5e:72:8f:d5:c0:24:45:ac:3e:fc:d8:96:61:97: 07:3b:ef:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnJeYLyVOnmmKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk MzMxYWU5MjEtNzBlYi00ZTE2LWJiMDEtNjY3ZmZhMzAzMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Z6WV8t8Qj+xImA96V7cKgNI3pePNsdKhuj gGrjIDl0KPxS+fgKJVjmCMYCdQrh7TGaJqKFCV2mqHGsu/D8Mb1eeTXJtoSvBmIL cHgDVqCkuZ0905ERkzku9QxZUmm1/Ig8NzPaRYgcwvxs8gH24FoMPIF4mWGVxQ3s LSxvjhvJVCK8fRLIFCon6GmndtqB+OQVPBxHcGbyvs73golwCFK59K7pHyceskLJ lOnTqO3yJorIHNCkuUQXt69KuoyhB0K7OBmBtL25B1UHPTtcMjxI4teLO8gH0DM5 DzCIfMBr7+IjzgekezRIVK2TrwWaEI62HU+PA8mnb/aCGwwc/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIolnUCO1XrrTOI1GPkw7hvBfBOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjViZjhhMjgtZDNhNy0z ZTM1LWExNjAtMjdiZmFhY2RlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0amAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsQ4H6KCIy10htfo+PKG6oJbM5gH+Km4FcDejrAvPqQ7nWJxOHDOys1 jem8OfAcCPKFcRFdib+/c3Pmd5w1Ccgw/SHHs3gT4pY/g/HHq0U3BS+5ACiih5OS jNQd4XLZ9o9/H6N0yWI3rouTKhZxPNMkonn8QacNJuE6wK+wy+bQuHnCZZSSnL+/ cTIpcmM/dFJ/AD1+nPqQXJhx3cEYi5DWtS2JWhsfDpyFQg7I6nGhaAEBxZjjDxf2 e+JoEoQXzj1hDftQvV6xQFEG1mZqpK7MeGgL3u+KtMGPmOR5KPlx7o0hVdGP2pGB Pdt1m0heco/VwCRFrD782JZhlwc775g= -----END CERTIFICATE-----Generated at Wed Sep 23 23:37:51 2026 by rpki-client