$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa File: b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa (raw, json) Hash identifier: 6rMoeJ+uu8gIL1Y+l9idc6Ej4fQM91fcHQBz9UZMxVg= Subject key identifier: C0:0E:4B:C3:AF:F2:C0:AD:E0:99:A8:E3:56:72:3B:17:0B:8D:50:E9 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F3482727A8F101B1F0372BB10 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 216.228.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:72:7a:8f:10:1b:1f:03:72:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=dcfdab82-88c8-4570-a8b8-82becc566aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:fc:27:47:bb:a5:65:a6:38:1a:98:35:0d: 8a:0d:17:dd:64:35:29:10:10:15:c5:25:ff:9f:b8: c9:fd:2f:d9:70:89:5b:e6:25:83:be:2d:ac:ac:49: 17:0a:ee:54:b9:f5:c2:e2:9d:ed:45:df:67:a4:22: 81:de:f3:e9:e8:b5:c2:a0:2e:6d:bf:f4:d6:d4:f6: 74:62:00:0e:2c:fa:8d:e5:3f:aa:23:f3:83:b8:45: 88:55:4c:f8:fa:76:25:bb:be:40:69:1f:55:33:a6: 42:33:75:c8:44:9e:6e:db:e2:9d:5a:61:92:ae:c0: 79:62:04:6e:6c:65:a9:86:a5:c7:a2:2d:2c:7d:a1: 3b:71:36:5b:83:83:91:30:d2:85:b8:49:65:25:3e: 16:a4:44:ab:57:cd:c5:46:76:40:70:77:87:5e:8a: 05:cf:14:e5:bf:73:2c:8f:88:e0:75:95:40:7b:e7: 9a:b5:6f:af:a5:a4:2c:2a:0b:89:d6:a1:a8:af:44: 4a:fd:ae:9d:fe:54:b1:b5:ae:83:9a:6a:0c:da:cf: b2:98:8d:58:0a:2c:9c:23:d7:45:89:1f:bf:0b:ee: 28:55:99:21:dc:ad:33:d8:65:e5:88:ba:96:6f:7b: 64:d5:66:be:2a:35:73:fa:8d:b7:22:3e:33:57:95: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0E:4B:C3:AF:F2:C0:AD:E0:99:A8:E3:56:72:3B:17:0B:8D:50:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 216.228.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:34:50:88:65:cf:08:7e:e2:e7:20:d5:49:aa:b4:4f:0a:89: 96:7a:eb:5e:30:a4:fd:d8:7e:a2:af:fb:a1:ee:2f:33:77:73: 7d:c9:56:5f:a9:13:8c:50:92:92:42:73:b4:3e:b5:bc:1d:58: 15:00:03:1c:6f:4c:94:a4:04:72:b8:80:0c:3b:15:ed:55:64: 06:29:96:8b:19:ac:d2:d6:87:0e:4b:83:9c:75:a8:62:75:f9: cb:f5:97:54:6c:7a:82:20:ae:2f:fd:ab:d8:70:2e:96:60:84: e2:2a:b9:67:af:a0:42:58:66:4c:7d:2b:15:5f:c9:9c:24:b0: e4:ba:92:70:89:62:74:63:44:8d:56:a8:60:3b:d4:f5:21:2f: 8b:99:de:4f:06:f1:d4:7a:16:81:71:8f:b1:e5:22:15:ca:dd: 8c:ff:9f:a8:28:e0:eb:47:fc:9d:f9:13:ef:3f:a4:2f:ca:50: dc:4b:ef:2d:68:64:98:79:3b:bf:53:fb:4e:4c:54:07:cd:c3: 24:dc:85:16:f5:90:a4:10:1e:1f:5f:d0:54:7d:a9:67:bf:14: 6b:ce:b4:58:37:18:dd:c9:95:b9:81:08:3c:6c:b6:c1:57:83: 85:c3:e7:8d:32:4a:4e:12:a3:fe:e2:ad:21:f1:9f:29:56:1e: 5d:96:39:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnJ6jxAbHwNyuxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGNmZGFiODItODhjOC00NTcwLWE4YjgtODJiZWNjNTY2YWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulT8J0e7pWWmOBqYNQ2KDRfdZDUpEBAVxSX/ n7jJ/S/ZcIlb5iWDvi2srEkXCu5UufXC4p3tRd9npCKB3vPp6LXCoC5tv/TW1PZ0 YgAOLPqN5T+qI/ODuEWIVUz4+nYlu75AaR9VM6ZCM3XIRJ5u2+KdWmGSrsB5YgRu bGWphqXHoi0sfaE7cTZbg4ORMNKFuEllJT4WpESrV83FRnZAcHeHXooFzxTlv3Ms j4jgdZVAe+eatW+vpaQsKguJ1qGor0RK/a6d/lSxta6DmmoM2s+ymI1YCiycI9dF iR+/C+4oVZkh3K0z2GXliLqWb3tk1Wa+KjVz+o23Ij4zV5UVAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAOS8Ov8sCt4Jmo41ZyOxcLjVDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjJlMmZjOGEtMWYzNi0z MTRlLTkzMDEtZWJmYzlmYmJiNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw0UIhlzwh+4ucg1UmqtE8KiZZ6614wpP3YfqKv+6HuLzN3c33JVl+p E4xQkpJCc7Q+tbwdWBUAAxxvTJSkBHK4gAw7Fe1VZAYplosZrNLWhw5Lg5x1qGJ1 +cv1l1RseoIgri/9q9hwLpZghOIquWevoEJYZkx9KxVfyZwksOS6knCJYnRjRI1W qGA71PUhL4uZ3k8G8dR6FoFxj7HlIhXK3Yz/n6go4OtH/J35E+8/pC/KUNxL7y1o ZJh5O79T+05MVAfNwyTchRb1kKQQHh9f0FR9qWe/FGvOtFg3GN3JlbmBCDxstsFX g4XD540ySk4So/7irSHxnylWHl2WOXQ= -----END CERTIFICATE-----Generated at Wed Sep 23 14:42:12 2026 by rpki-client