$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa File: 65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa (raw, json) Hash identifier: acxOKey3iIMphrUtZSKk9iaVjiQaBzrjH6FfnM1Z6Lk= Subject key identifier: F5:43:DE:10:C6:63:AC:79:97:90:70:B1:70:E6:1F:14:CD:CC:67:7D Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD13CADC552250BDCB2E36E00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 209.169.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:ad:c5:52:25:0b:dc:b2:e3:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=3e3b8f8d-d575-4255-b563-436fc9165b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:4d:32:9d:e8:7b:d2:a8:3f:4c:81:98:31: 51:d8:38:f3:ce:01:5b:30:81:41:8f:8a:dd:f9:9f: 71:dc:2f:cc:9e:1d:1a:8e:51:fe:1c:e9:f8:2f:c7: 79:c5:44:4b:fc:31:2c:26:ed:03:a5:6a:60:1d:88: be:de:42:35:b4:9b:3e:5e:b3:43:52:22:d6:1c:b1: 9b:4f:52:38:c7:60:5a:cb:5f:87:0b:c6:c3:b5:e3: 16:49:95:a3:61:a2:e2:f2:db:c0:c4:6d:29:5f:40: 99:c4:19:53:c7:4c:69:c9:73:79:f0:f4:da:fc:1a: 87:5d:2a:f1:bd:ba:45:c9:7e:76:cb:28:a5:a3:c6: 5a:30:7f:89:f1:1c:dd:fb:ac:2c:67:e0:c6:35:d4: b6:82:c4:a0:6f:35:f4:2d:56:6f:fe:45:d2:56:ef: 38:5b:79:35:74:f8:0c:3c:4b:c5:0c:3b:db:a8:93: a3:9e:f3:c7:07:ba:72:a2:05:92:db:57:d9:ce:3e: 6f:ea:b9:21:b0:9a:67:89:21:0f:a2:8e:38:51:cd: 1c:49:87:24:6e:bb:fc:75:04:47:17:6c:1c:36:2e: 97:8b:9f:5c:a2:4b:37:15:5c:6b:27:03:46:8d:57: 2e:c6:ce:8c:2d:01:05:5f:ae:1b:0f:df:eb:9b:0f: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:43:DE:10:C6:63:AC:79:97:90:70:B1:70:E6:1F:14:CD:CC:67:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.169.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:11:9c:39:2f:ba:a5:fa:a4:cc:00:52:51:5a:cb:ea:c3:69: ea:0c:3b:04:28:d0:6f:d2:af:28:6c:91:e1:43:66:aa:41:19: 31:2d:70:9c:54:d8:9a:dd:11:0a:06:eb:0e:43:d4:02:38:74: 44:e8:f5:2a:a7:f5:53:52:13:d3:4c:8a:0f:33:72:a7:f2:01: a2:9d:d0:5a:30:de:47:b9:70:c3:3d:c6:67:bb:c3:00:57:e7: 6b:5f:c2:6b:d2:a5:42:01:8d:28:89:07:20:72:6f:6a:ce:5e: fd:d5:aa:25:c5:a1:0b:a1:7b:53:e2:2a:ed:9f:c8:1b:02:b7: 1a:b7:7d:66:af:62:72:20:71:0f:fa:21:66:ec:b0:33:35:ce: 82:58:da:31:0c:b1:0e:93:0d:ef:a7:06:e6:a6:37:28:44:dc: 9d:58:a4:11:4c:5b:e4:21:c4:eb:e6:dc:9b:b0:e0:12:04:44: c5:03:ce:c7:75:14:a6:c4:55:21:d4:60:31:96:42:e5:a9:f8: ea:e8:ea:c5:6a:94:e5:8d:a7:40:cf:84:a9:48:d1:23:cf:14: 82:4e:f4:56:cb:b6:b7:e3:70:99:38:ea:3b:94:ef:5c:17:8b: 9b:77:e6:c9:b3:bf:07:a9:15:7c:c1:d6:44:a7:ee:b9:50:fd: 19:79:02:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPK3FUiUL3LLjbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk M2UzYjhmOGQtZDU3NS00MjU1LWI1NjMtNDM2ZmM5MTY1Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyFNMp3oe9KoP0yBmDFR2DjzzgFbMIFBj4rd +Z9x3C/Mnh0ajlH+HOn4L8d5xURL/DEsJu0DpWpgHYi+3kI1tJs+XrNDUiLWHLGb T1I4x2Bay1+HC8bDteMWSZWjYaLi8tvAxG0pX0CZxBlTx0xpyXN58PTa/BqHXSrx vbpFyX52yyilo8ZaMH+J8Rzd+6wsZ+DGNdS2gsSgbzX0LVZv/kXSVu84W3k1dPgM PEvFDDvbqJOjnvPHB7pyogWS21fZzj5v6rkhsJpniSEPoo44Uc0cSYckbrv8dQRH F2wcNi6Xi59coks3FVxrJwNGjVcuxs6MLQEFX64bD9/rmw9IdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVD3hDGY6x5l5BwsXDmHxTNzGd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjViZjhhMjgtZDNhNy0z ZTM1LWExNjAtMjdiZmFhY2RlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0amAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIERnDkvuqX6pMwAUlFay+rDaeoMOwQo0G/SryhskeFDZqpBGTEtcJxU 2JrdEQoG6w5D1AI4dETo9Sqn9VNSE9NMig8zcqfyAaKd0Fow3ke5cMM9xme7wwBX 52tfwmvSpUIBjSiJByByb2rOXv3VqiXFoQuhe1PiKu2fyBsCtxq3fWavYnIgcQ/6 IWbssDM1zoJY2jEMsQ6TDe+nBuamNyhE3J1YpBFMW+QhxOvm3Juw4BIERMUDzsd1 FKbEVSHUYDGWQuWp+Oro6sVqlOWNp0DPhKlI0SPPFIJO9FbLtrfjcJk46juU71wX i5t35smzvwepFXzB1kSn7rlQ/Rl5Aq8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:41 2026 by rpki-client