$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa File: b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa (raw, json) Hash identifier: yLZaq59TL2b8Q+v/rfp2h0cDt65gCAj7sRtm16NK8ZA= Subject key identifier: 90:47:1A:86:27:1A:6E:B7:E6:A2:81:D5:A4:7B:CB:10:93:61:7D:23 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD13CADEDF1DF1818E74F3914 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 216.228.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:ad:ed:f1:df:18:18:e7:4f:39:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=3b7fb670-5882-4aa0-9201-af8c28d3ab7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5e:0f:b4:e9:14:6d:cd:e7:99:c8:5d:99:21: fd:72:77:81:56:27:e1:fb:19:16:ad:ee:11:a9:fb: 66:31:6b:ab:c6:3b:d7:6e:68:90:44:18:44:d9:58: ca:f2:6a:b3:55:17:70:32:8e:8f:b1:b4:47:72:70: bd:1a:be:e7:f3:98:8a:4b:59:b7:1a:ab:81:24:37: 6e:3f:0e:30:d0:b7:de:72:d7:4e:1a:ee:1b:a5:0b: e9:54:cc:4d:4e:3a:b3:ee:d4:4b:7d:84:00:23:66: 32:cb:6f:96:e0:3e:76:84:26:fb:68:3f:43:0d:4a: e6:64:34:a4:0c:e2:b1:24:7d:06:62:79:bd:a3:43: 3f:ea:75:42:46:6b:70:cc:56:91:f0:28:f1:61:95: 80:14:03:e8:4c:ec:42:85:05:ef:57:da:d9:33:e6: 4e:56:58:51:60:f3:be:11:99:b5:03:57:98:42:9b: be:98:89:7e:91:a9:cc:82:1f:f9:0b:e0:9c:ea:b6: 36:97:02:f8:82:9e:12:c1:1d:dc:d1:38:3d:7f:a7: 48:37:b2:17:bc:99:92:ff:54:6f:30:ec:f3:78:bd: de:e3:a2:fb:14:98:14:30:c4:e7:37:4e:4d:50:84: 3b:e9:cb:07:06:96:56:a9:f3:de:29:1b:ab:66:8d: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:1A:86:27:1A:6E:B7:E6:A2:81:D5:A4:7B:CB:10:93:61:7D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 216.228.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b7:9e:8a:fc:ba:af:12:04:6e:8f:63:48:66:a3:c4:05:b2: 98:94:7c:94:13:1b:38:6a:39:59:fb:b7:f2:2b:86:41:ed:9f: 6a:ee:50:94:d5:dd:09:b1:c4:24:3e:c8:2a:83:08:d1:88:79: e3:4d:95:61:b1:c8:67:af:17:63:31:fd:53:aa:72:50:c7:5a: d3:f5:a8:71:f7:71:ae:c4:32:ec:7e:62:0f:02:cf:59:d0:ff: 53:33:e9:b0:9f:96:a1:53:08:f4:56:bd:61:75:e6:07:0a:6d: 1c:c5:09:a6:71:05:f6:06:6e:d9:6b:b8:6a:21:b8:ce:17:77: 80:73:b7:9d:34:8c:fd:42:4b:e1:68:85:f1:88:ee:31:0e:f5: 17:f1:82:27:46:f4:dc:91:66:ff:57:1c:a2:6f:0a:82:0c:20: 4b:db:3c:75:c6:7f:9d:e0:60:31:ba:4b:cc:eb:75:e1:e6:a9: a0:e8:d6:b9:6b:78:8a:32:d1:67:61:bb:18:82:df:ad:df:89: e1:22:f0:64:57:8e:55:63:1c:0c:4a:bb:e2:3d:3a:1a:9b:72: d4:37:24:09:d2:47:80:6b:64:72:ab:36:7e:f8:af:ec:eb:ba: d0:4e:fd:be:e8:bd:65:fd:87:5f:89:e7:f9:3f:94:a7:95:92: bf:73:17:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPK3t8d8YGOdPORQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk M2I3ZmI2NzAtNTg4Mi00YWEwLTkyMDEtYWY4YzI4ZDNhYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV4PtOkUbc3nmchdmSH9cneBVifh+xkWre4R qftmMWurxjvXbmiQRBhE2VjK8mqzVRdwMo6PsbRHcnC9Gr7n85iKS1m3GquBJDdu Pw4w0LfectdOGu4bpQvpVMxNTjqz7tRLfYQAI2Yyy2+W4D52hCb7aD9DDUrmZDSk DOKxJH0GYnm9o0M/6nVCRmtwzFaR8CjxYZWAFAPoTOxChQXvV9rZM+ZOVlhRYPO+ EZm1A1eYQpu+mIl+kanMgh/5C+Cc6rY2lwL4gp4SwR3c0Tg9f6dIN7IXvJmS/1Rv MOzzeL3e46L7FJgUMMTnN05NUIQ76csHBpZWqfPeKRurZo2luwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBHGoYnGm635qKB1aR7yxCTYX0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjJlMmZjOGEtMWYzNi0z MTRlLTkzMDEtZWJmYzlmYmJiNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW3nor8uq8SBG6PY0hmo8QFspiUfJQTGzhqOVn7t/IrhkHtn2ruUJTV 3QmxxCQ+yCqDCNGIeeNNlWGxyGevF2Mx/VOqclDHWtP1qHH3ca7EMux+Yg8Cz1nQ /1Mz6bCflqFTCPRWvWF15gcKbRzFCaZxBfYGbtlruGohuM4Xd4Bzt500jP1CS+Fo hfGI7jEO9RfxgidG9NyRZv9XHKJvCoIMIEvbPHXGf53gYDG6S8zrdeHmqaDo1rlr eIoy0WdhuxiC363fieEi8GRXjlVjHAxKu+I9OhqbctQ3JAnSR4BrZHKrNn74r+zr utBO/b7ovWX9h1+J5/k/lKeVkr9zF2o= -----END CERTIFICATE-----Generated at Mon Mar 2 17:55:01 2026 by rpki-client