$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa File: 8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa (raw, json) Hash identifier: cFVBIbpv43LgGKiMeJ7P7JxUodXhSbmQ2qUAWEM1ILA= Subject key identifier: 77:6E:62:B6:DC:18:77:B0:64:17:C4:C7:A4:F7:61:EB:92:1D:9A:E7 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD4076B93B7915878653E8B00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 173.0.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6b:93:b7:91:58:78:65:3e:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=e3679005-c5f8-4571-992f-487813b1efaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8a:a4:71:a0:22:b9:d2:79:c6:4f:fb:67:03: 65:79:03:2f:bd:73:80:67:d6:77:6e:f2:4a:6a:31: a1:2c:d3:33:b7:02:d0:f7:ee:75:0a:7a:4d:8a:15: 2f:22:72:23:fe:81:a3:54:d6:5e:52:99:53:8a:23: dd:ba:18:f3:fa:e0:42:73:5b:3b:05:18:68:78:90: 06:c9:c7:a9:75:bc:7a:7e:e0:f9:b8:68:97:3a:b1: fb:89:6f:ad:a0:eb:8a:33:e5:f6:c9:85:bd:93:a7: b2:7b:8c:89:a4:fd:5f:50:1f:de:07:c9:32:54:78: 73:b2:8d:e0:1d:33:f5:b7:bc:05:02:08:4c:23:f3: 8e:70:cb:65:fa:0b:b0:37:4e:0c:d7:b5:60:8a:72: 36:19:44:10:df:30:fc:0b:29:b3:70:ff:78:bc:93: 93:f4:04:eb:b4:b1:9f:cc:28:d2:49:cc:ed:3c:36: d6:b1:5b:46:f3:72:7f:8f:84:da:33:0d:64:0e:0c: 03:b6:77:81:ff:be:5b:c5:a7:48:65:a3:88:d0:ca: 3e:8d:d1:96:1b:ff:1c:17:6d:51:73:46:85:0f:50: 3f:37:9c:b4:51:5b:a2:e8:53:4e:e3:a2:c8:a3:8b: 73:8d:c3:82:79:c6:5f:c5:51:de:64:35:1d:5f:a3: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6E:62:B6:DC:18:77:B0:64:17:C4:C7:A4:F7:61:EB:92:1D:9A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:52:1a:c9:2a:3f:70:9d:40:97:53:08:3c:b6:ec:56:f2:c5: 03:35:f3:7d:f6:da:fd:d2:ac:e8:63:e0:76:10:03:ac:23:a7: 5d:d3:16:e3:1a:1b:6a:63:98:8b:ae:cb:66:4c:87:3c:76:f1: 7d:e9:e0:60:7f:c8:fb:a7:a4:55:fd:0a:50:0a:c2:d1:37:d8: 69:0c:d1:ad:bb:84:d5:f9:7c:25:39:0e:b7:8b:67:c4:85:b7: 10:46:d8:64:7b:3b:d0:d0:94:12:b5:c1:e3:b5:ac:4b:e6:9f: e4:d3:a6:76:e3:5b:52:57:10:e3:a1:07:86:ba:4c:df:5b:2c: 6f:ec:95:79:33:fb:c4:66:04:e9:4b:ac:b6:c2:e3:d7:05:e2: 29:e0:e8:25:ae:4b:58:cc:f6:6a:eb:f9:1d:30:f2:a5:49:ee: c1:c3:a5:7c:ad:ea:35:20:a0:20:e7:c4:25:ac:93:bb:e6:31: b1:f9:36:9d:ae:a3:2a:de:85:a7:c1:31:ae:04:f4:09:18:73: bd:dd:17:c4:c9:91:2e:50:2a:30:03:1e:41:4c:c5:78:63:35: f6:be:e0:cc:2b:d3:f0:71:c4:56:b0:79:63:56:06:f1:df:43: 53:27:16:0e:53:33:0b:cb:43:6a:79:2c:d3:ec:44:71:90:c8: 78:52:a1:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2uTt5FYeGU+iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk ZTM2NzkwMDUtYzVmOC00NTcxLTk5MmYtNDg3ODEzYjFlZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYqkcaAiudJ5xk/7ZwNleQMvvXOAZ9Z3bvJK ajGhLNMztwLQ9+51CnpNihUvInIj/oGjVNZeUplTiiPduhjz+uBCc1s7BRhoeJAG ycepdbx6fuD5uGiXOrH7iW+toOuKM+X2yYW9k6eye4yJpP1fUB/eB8kyVHhzso3g HTP1t7wFAghMI/OOcMtl+guwN04M17VginI2GUQQ3zD8CymzcP94vJOT9ATrtLGf zCjSScztPDbWsVtG83J/j4TaMw1kDgwDtneB/75bxadIZaOI0Mo+jdGWG/8cF21R c0aFD1A/N5y0UVui6FNO46LIo4tzjcOCecZfxVHeZDUdX6OFzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHduYrbcGHewZBfEx6T3YeuSHZrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOGQ5OGM3NGUtZGJmMy0z MmJmLTlhMzEtYjUxOTdhM2I0NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErQDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtSGskqP3CdQJdTCDy27FbyxQM183322v3SrOhj4HYQA6wjp13TFuMa G2pjmIuuy2ZMhzx28X3p4GB/yPunpFX9ClAKwtE32GkM0a27hNX5fCU5DreLZ8SF txBG2GR7O9DQlBK1weO1rEvmn+TTpnbjW1JXEOOhB4a6TN9bLG/slXkz+8RmBOlL rLbC49cF4ing6CWuS1jM9mrr+R0w8qVJ7sHDpXyt6jUgoCDnxCWsk7vmMbH5Np2u oyrehafBMa4E9AkYc73dF8TJkS5QKjADHkFMxXhjNfa+4Mwr0/BxxFaweWNWBvHf Q1MnFg5TMwvLQ2p5LNPsRHGQyHhSoWo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:23:03 2026 by rpki-client