$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa File: b938ef69-2886-35a9-9252-032a68a12f49.roa (raw, json) Hash identifier: IPTYcM3LICjA9HtCRAjK6LZP1teKVhvOpF58daCgYlo= Subject key identifier: 25:53:DD:EE:E6:E8:86:5B:88:AA:03:E3:C0:40:B6:94:B6:44:5B:2D Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F34827233923FE22AB32BDE80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 209.15.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:72:33:92:3f:e2:2a:b3:2b:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=f1497850-0527-47fe-8dae-b8a3b6d72e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:ce:19:e2:48:9c:ad:6f:b8:70:00:10:ab: fa:07:10:4b:df:07:4b:32:20:7c:15:67:1e:ac:c9: d6:95:31:01:bc:06:61:e2:af:04:9c:1f:74:04:2d: 0e:52:24:9b:47:f7:18:a5:29:e1:33:66:75:fc:c7: 23:e5:be:cf:c6:a5:c9:19:fb:19:6f:98:6c:81:d2: 56:c9:5f:1b:be:ca:67:7e:f5:c8:53:a0:5a:26:0c: 2b:04:96:f6:55:b2:43:aa:23:71:7d:73:1a:53:a7: e0:ab:c9:09:9b:d3:91:4a:53:6e:a7:bf:ef:e5:a8: 27:37:d4:e5:7b:f1:e1:60:fd:5d:23:af:6c:94:ee: 84:c1:ab:f4:37:87:89:69:59:1b:b8:1c:6f:2a:d1: 51:9b:31:64:e8:cd:d0:c8:b0:47:0b:8e:8f:70:33: 9a:b9:f8:70:64:49:70:c7:05:02:c6:6c:0d:bc:7b: 81:66:66:4f:5d:7a:e8:33:e4:ec:a8:f2:95:c1:3d: ab:3c:94:f2:49:26:1d:20:10:d1:9e:75:ff:b7:f8: 01:c5:6e:3b:a1:e2:f4:6b:be:52:58:2b:79:5f:f1: f1:dd:2e:fa:23:bc:75:47:65:9a:4f:e8:cd:59:71: 42:f8:29:c3:d4:be:92:57:25:33:cf:23:2c:6c:6e: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:DD:EE:E6:E8:86:5B:88:AA:03:E3:C0:40:B6:94:B6:44:5B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.15.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bb:d2:96:80:70:9e:84:57:07:44:7d:33:f8:08:02:d7:79: e5:93:db:84:d7:ad:8d:63:da:d2:3a:fe:e2:27:7c:78:c5:36: 8c:6c:de:1e:2f:f6:ec:ae:86:95:97:ef:ef:25:40:6d:31:2a: eb:49:1a:b3:e6:3e:1c:90:b9:98:90:2c:cb:75:df:70:e7:a2: ff:97:16:b9:79:4c:91:43:1c:21:40:85:87:f9:04:f5:11:bd: 37:19:81:d7:e5:38:a9:cd:86:92:07:9b:c9:37:61:72:c4:11: e3:b3:e7:3c:52:5e:6a:70:17:30:03:6a:d4:53:e7:51:df:6e: 07:3b:f5:d4:b1:83:69:30:b9:89:d2:70:c5:ef:48:0a:f7:78: 42:67:73:e4:ae:01:f8:d4:c4:5c:4f:6a:e5:00:e4:78:7f:fb: 5b:85:c7:93:79:cd:ea:68:fd:bc:aa:37:20:4b:80:42:82:ba: dd:9f:52:d4:4b:01:04:ec:c7:f1:5a:88:3d:ef:26:5d:14:34: aa:e5:d1:2c:c0:4b:43:f8:86:3d:28:eb:89:2a:f9:45:40:bf: e4:6e:7a:5e:21:d0:b9:a9:73:66:60:14:65:cf:61:eb:bc:56: 23:18:29:44:d0:d6:0e:bc:11:82:d8:64:cd:b1:78:e2:a2:7e: 5d:ad:97:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnIzkj/iKrMr3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjE0OTc4NTAtMDUyNy00N2ZlLThkYWUtYjhhM2I2ZDcyZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBLOGeJInK1vuHAAEKv6BxBL3wdLMiB8FWce rMnWlTEBvAZh4q8EnB90BC0OUiSbR/cYpSnhM2Z1/Mcj5b7PxqXJGfsZb5hsgdJW yV8bvspnfvXIU6BaJgwrBJb2VbJDqiNxfXMaU6fgq8kJm9ORSlNup7/v5agnN9Tl e/HhYP1dI69slO6Ewav0N4eJaVkbuBxvKtFRmzFk6M3QyLBHC46PcDOaufhwZElw xwUCxmwNvHuBZmZPXXroM+TsqPKVwT2rPJTySSYdIBDRnnX/t/gBxW47oeL0a75S WCt5X/Hx3S76I7x1R2WaT+jNWXFC+CnD1L6SVyUzzyMsbG7+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVT3e7m6IZbiKoD48BAtpS2RFstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjkzOGVmNjktMjg4Ni0z NWE5LTkyNTItMDMyYTY4YTEyZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0Q9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu70paAcJ6EVwdEfTP4CALXeeWT24TXrY1j2tI6/uInfHjFNoxs3h4v 9uyuhpWX7+8lQG0xKutJGrPmPhyQuZiQLMt133Dnov+XFrl5TJFDHCFAhYf5BPUR vTcZgdflOKnNhpIHm8k3YXLEEeOz5zxSXmpwFzADatRT51Hfbgc79dSxg2kwuYnS cMXvSAr3eEJnc+SuAfjUxFxPauUA5Hh/+1uFx5N5zepo/byqNyBLgEKCut2fUtRL AQTsx/FaiD3vJl0UNKrl0SzAS0P4hj0o64kq+UVAv+Ruel4h0Lmpc2ZgFGXPYeu8 ViMYKUTQ1g68EYLYZM2xeOKifl2tl/U= -----END CERTIFICATE-----Generated at Wed Sep 23 11:46:51 2026 by rpki-client