$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa File: d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa (raw, json) Hash identifier: tGuWRPHm69A1Y93Sz/+ye+67okhnXrMZ7zoN5mk5Ta8= Subject key identifier: 3F:1B:F4:1D:2B:9A:6F:84:62:97:A9:75:4F:50:6D:E4:17:D8:F7:F2 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2B7A63CA8E187D3C894E Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 162.252.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:7a:63:ca:8e:18:7d:3c:89:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=276087bf-fccc-43ad-a45d-f3fe5f691842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:e8:5e:a6:0d:97:6d:1d:69:96:17:c1:0e: 2e:47:89:0a:41:0c:fc:20:fc:d5:3c:9a:16:ce:8e: 4c:fe:55:77:ad:d6:27:90:7e:bd:c4:59:c8:1a:1d: ec:05:31:b9:0e:92:f9:21:01:f6:8c:86:f7:43:81: 16:82:05:37:dc:0c:c6:cc:df:12:e6:40:1d:18:b5: 56:8f:36:c8:c4:1d:c8:29:da:40:11:b3:c6:41:f5: 6c:dc:8f:d2:61:38:ec:64:9f:9f:50:ba:b1:b1:a6: 11:22:e8:f3:2f:75:ad:24:c2:19:a5:4f:79:34:6e: 2a:51:e2:1e:24:5f:b0:75:3c:32:40:db:07:1a:99: 39:a7:f7:95:ab:04:20:4e:c0:39:a0:74:a2:b8:5a: 23:3b:f3:f4:6d:53:1d:d6:9c:f9:b3:8a:bf:87:49: a2:08:db:7c:b3:d0:b0:82:63:47:d7:1f:94:74:3b: 56:40:db:69:32:26:ff:bf:0a:ac:fd:a5:1a:c8:5e: 19:17:a6:03:87:d2:ef:89:1e:a0:b2:00:fe:46:29: 4f:40:36:d5:ad:bb:a0:ae:e3:75:18:47:4e:19:f6: 73:82:c7:2c:9f:77:12:d4:d7:a1:27:88:ba:c8:82: 83:6b:97:6d:0d:2c:ae:3e:eb:96:bb:ed:57:05:2d: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:F4:1D:2B:9A:6F:84:62:97:A9:75:4F:50:6D:E4:17:D8:F7:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.252.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8a:c3:58:7e:a9:c3:28:b1:f5:35:21:1c:63:49:49:71:a7: c0:f1:a2:fc:0a:69:13:6e:ec:52:e3:7e:1b:d5:7b:53:e9:e3: 3a:35:42:b8:70:95:8a:7e:4a:2a:c5:16:ad:98:c7:2c:72:a8: 57:bd:b2:6d:44:b2:7d:97:4b:bb:58:3b:3d:15:df:29:90:2f: 20:ba:11:91:ab:6d:2d:6b:00:9f:d7:3c:87:ab:40:e4:7f:12: 65:fd:7d:e1:b8:7b:d7:e8:a0:57:5c:63:45:85:41:38:cb:51: 72:e7:91:34:6c:6a:40:6a:b6:34:de:79:37:63:bf:08:42:d9: 5f:f9:86:e0:69:6d:dc:dc:97:c6:9c:4d:2d:3b:24:2f:fa:59: 6e:64:7e:8d:79:9d:e4:a9:ba:40:97:4a:12:a0:f4:df:27:e5: 00:83:b9:da:9d:2b:06:42:30:a9:39:8d:ed:44:23:73:af:b7: 34:be:3b:b1:a4:94:04:b3:bd:6b:0a:3a:29:73:0a:e7:da:80: 37:13:a6:ce:c2:08:2c:31:0d:f1:c1:97:60:48:d9:dd:f5:db: 9e:a1:fc:e4:55:35:45:f3:4e:3d:b4:41:b6:b6:51:e1:11:40: 8b:ce:ec:ac:4b:74:07:35:8d:40:91:e4:aa:ec:be:94:75:f7: 14:ed:71:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSt6Y8qOGH08iU4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk Mjc2MDg3YmYtZmNjYy00M2FkLWE0NWQtZjNmZTVmNjkxODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYzoXqYNl20daZYXwQ4uR4kKQQz8IPzVPJoW zo5M/lV3rdYnkH69xFnIGh3sBTG5DpL5IQH2jIb3Q4EWggU33AzGzN8S5kAdGLVW jzbIxB3IKdpAEbPGQfVs3I/SYTjsZJ+fULqxsaYRIujzL3WtJMIZpU95NG4qUeIe JF+wdTwyQNsHGpk5p/eVqwQgTsA5oHSiuFojO/P0bVMd1pz5s4q/h0miCNt8s9Cw gmNH1x+UdDtWQNtpMib/vwqs/aUayF4ZF6YDh9LviR6gsgD+RilPQDbVrbugruN1 GEdOGfZzgscsn3cS1NehJ4i6yIKDa5dtDSyuPuuWu+1XBS3W2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8b9B0rmm+EYpepdU9QbeQX2PfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZDdiYzMyYTctNGMwMi0z Nzk3LWFlOWMtNmNiNDQ4YjQ2OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyKw1h+qcMosfU1IRxjSUlxp8DxovwKaRNu7FLjfhvVe1Pp4zo1Qrhw lYp+SirFFq2YxyxyqFe9sm1Esn2XS7tYOz0V3ymQLyC6EZGrbS1rAJ/XPIerQOR/ EmX9feG4e9fooFdcY0WFQTjLUXLnkTRsakBqtjTeeTdjvwhC2V/5huBpbdzcl8ac TS07JC/6WW5kfo15neSpukCXShKg9N8n5QCDudqdKwZCMKk5je1EI3OvtzS+O7Gk lASzvWsKOilzCufagDcTps7CCCwxDfHBl2BI2d31256h/ORVNUXzTj20Qba2UeER QIvO7KxLdAc1jUCR5KrsvpR19xTtcWw= -----END CERTIFICATE-----Generated at Wed Sep 23 20:55:56 2026 by rpki-client