$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9d7d8f03-620c-3633-8740-f6d78f9dff74.roa File: 9d7d8f03-620c-3633-8740-f6d78f9dff74.roa (raw, json) Hash identifier: u5qDVkoBNyymC0m8D1XYgnhzGi7wXEUpz4wPhsgOScY= Subject key identifier: 70:FE:E2:9E:13:32:03:39:A2:34:A9:26:25:53:BA:7F:C0:29:E8:F0 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD13CAD9ED2E4EBDD441F9F80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9d7d8f03-620c-3633-8740-f6d78f9dff74.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 209.15.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:ad:9e:d2:e4:eb:dd:44:1f:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=8f19e1a6-9be2-483c-84a2-acb535066452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:f4:61:7a:70:ca:03:1c:cc:0a:b4:28:0d: cc:5e:b6:51:71:ed:5a:59:35:33:94:cd:07:8e:d0: 0f:03:e4:71:b4:89:9b:b4:ae:33:bd:00:2f:6c:44: 23:31:cb:8c:ce:43:4a:ce:90:b8:10:e6:7a:39:e0: b1:fa:87:86:68:b2:0f:8f:bb:6a:79:3b:3b:37:0c: 1a:e4:e3:ed:c0:6f:97:2a:06:23:1d:32:3b:4f:ab: 1a:30:0c:ee:b4:65:95:72:f1:40:2f:79:e3:10:ee: 46:4c:19:14:44:b3:d3:b6:e9:8d:2b:4c:68:94:27: 1e:4f:14:87:27:4f:05:74:d1:21:ee:fb:eb:0f:92: 17:85:85:37:5a:6d:74:30:f6:36:31:b8:33:ad:1f: 2b:16:4b:71:8d:f4:4c:fb:e6:3e:83:de:35:d0:dd: e1:59:29:b7:42:22:71:af:b9:bb:a2:d6:14:ce:ed: d7:5b:07:7b:68:a1:73:86:5d:98:02:e6:29:10:fe: 59:e3:f3:82:5d:6f:35:ec:33:79:53:02:bc:e2:5e: 73:70:66:e5:33:77:00:12:f2:b0:97:91:d3:08:97: 47:bd:ab:1a:d1:d7:d4:ee:92:1a:b9:c0:24:2b:47: 73:59:27:5d:b9:71:0f:13:c7:d2:15:01:10:69:76: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FE:E2:9E:13:32:03:39:A2:34:A9:26:25:53:BA:7F:C0:29:E8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9d7d8f03-620c-3633-8740-f6d78f9dff74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.15.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f2:6b:e2:fd:97:64:86:22:d6:73:b8:b8:e4:31:c7:3c:3d: fe:36:22:bb:16:32:e2:2e:33:cc:51:31:18:d5:72:b6:a1:7f: 82:32:a3:0c:ea:8e:8a:b7:b3:5f:25:6b:4f:81:b4:df:b6:76: aa:3a:ee:c5:e3:2f:fd:17:e8:7e:53:e3:28:55:3a:45:7b:38: ba:19:40:03:dd:49:a6:be:0d:40:b8:0b:94:69:78:83:2b:d0: b4:5f:7a:17:46:52:1b:70:a8:d3:4a:5b:09:14:50:87:92:96: 26:fc:7c:96:ff:8a:7c:c6:85:c2:ad:a7:b2:ce:74:02:d4:4b: 21:8a:1a:09:97:f5:50:f5:8d:65:76:46:70:1f:45:9f:ed:eb: a6:a2:ab:f1:8b:0c:8c:ed:40:4a:a2:25:e4:25:91:dc:d8:d0: 9e:a7:43:69:0d:6b:5b:f1:8f:1e:79:28:33:81:14:eb:17:60: d3:19:4c:27:31:b0:8f:56:9e:f8:e9:d9:08:e7:a0:f8:5b:ec: d8:31:73:69:58:ef:77:9d:d6:9a:d7:c7:93:07:bb:2f:81:2b: a5:5b:4c:1c:b3:f1:2a:ec:df:97:31:d5:98:85:5a:23:13:00: 2f:49:73:ce:c8:f7:5c:1e:43:f9:d9:48:c3:5d:d5:d6:66:d8: 01:5a:e5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPK2e0uTr3UQfn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk OGYxOWUxYTYtOWJlMi00ODNjLTg0YTItYWNiNTM1MDY2NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8z0YXpwygMczAq0KA3MXrZRce1aWTUzlM0H jtAPA+RxtImbtK4zvQAvbEQjMcuMzkNKzpC4EOZ6OeCx+oeGaLIPj7tqeTs7Nwwa 5OPtwG+XKgYjHTI7T6saMAzutGWVcvFAL3njEO5GTBkURLPTtumNK0xolCceTxSH J08FdNEh7vvrD5IXhYU3Wm10MPY2MbgzrR8rFktxjfRM++Y+g9410N3hWSm3QiJx r7m7otYUzu3XWwd7aKFzhl2YAuYpEP5Z4/OCXW817DN5UwK84l5zcGblM3cAEvKw l5HTCJdHvasa0dfU7pIaucAkK0dzWSdduXEPE8fSFQEQaXYOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD+4p4TMgM5ojSpJiVTun/AKejwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOWQ3ZDhmMDMtNjIwYy0z NjMzLTg3NDAtZjZkNzhmOWRmZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0Q+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7ya+L9l2SGItZzuLjkMcc8Pf42IrsWMuIuM8xRMRjVcrahf4Iyowzq joq3s18la0+BtN+2dqo67sXjL/0X6H5T4yhVOkV7OLoZQAPdSaa+DUC4C5RpeIMr 0LRfehdGUhtwqNNKWwkUUIeSlib8fJb/inzGhcKtp7LOdALUSyGKGgmX9VD1jWV2 RnAfRZ/t66aiq/GLDIztQEqiJeQlkdzY0J6nQ2kNa1vxjx55KDOBFOsXYNMZTCcx sI9Wnvjp2QjnoPhb7Ngxc2lY73ed1prXx5MHuy+BK6VbTByz8Srs35cx1ZiFWiMT AC9Jc87I91weQ/nZSMNd1dZm2AFa5RE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:14 2026 by rpki-client