$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa File: e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa (raw, json) Hash identifier: nvG/PKUKY+2RfZ+POXy2uCvHQzBxp283k7MYr/Ari88= Subject key identifier: B4:5E:03:F6:D3:E3:E1:2B:94:AF:32:45:58:95:41:25:CA:96:DD:D3 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F3CE29FA4AEFC26EA7E97F980 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 24.231.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9f:a4:ae:fc:26:ea:7e:97:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=20b429e8-c457-4c34-b7d1-fc6ffdfe0989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:fb:bf:57:f1:66:98:1c:03:17:1a:b9:3e: 9e:6b:93:29:6b:91:e9:ba:38:ca:dc:68:3a:0b:a4: ec:b7:65:4b:f0:f1:88:1b:d6:df:1c:a6:f2:32:f8: ba:7f:52:3e:33:b1:88:67:8d:56:32:1d:39:a0:78: de:50:70:64:7a:b0:ed:46:16:c4:99:f5:7b:af:a0: a5:c1:7d:b7:bd:d5:74:4d:ff:6c:52:66:f3:f0:3d: 9b:a0:e6:a7:55:ac:c1:44:64:68:b0:59:6e:fd:9c: 02:a0:a0:39:a3:eb:34:27:0f:e0:2b:eb:e3:68:e4: cf:7b:f7:26:fa:7c:2f:bf:c1:97:e5:61:f8:fa:24: e5:32:b2:70:c2:bf:64:56:0c:c7:55:dd:da:2b:07: 96:e1:ec:a1:c4:f8:0e:7c:23:f3:d1:4d:74:6c:ea: 30:29:33:70:9f:5c:b3:9f:dc:e6:a2:aa:0a:91:82: c7:88:4f:56:05:e4:0f:b6:c9:32:ef:34:8e:05:2d: cd:a8:62:59:36:11:cc:dc:5c:0b:8b:ec:0a:c2:de: f1:d4:e7:8a:7b:f5:eb:17:f7:2b:bd:8c:27:67:c8: fc:0a:d2:0c:ce:15:17:96:38:27:da:a0:2c:ea:c9: de:de:26:cc:94:93:1b:f5:13:fe:43:48:ff:d7:06: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5E:03:F6:D3:E3:E1:2B:94:AF:32:45:58:95:41:25:CA:96:DD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.231.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:23:0e:7a:32:a1:52:af:2d:12:98:88:a3:44:e3:ca:10:c1: 03:dc:82:a1:8c:e8:d4:bb:8e:93:d9:4a:1c:10:c7:4f:17:01: 37:cc:23:09:56:f4:98:96:68:ce:4a:e8:0e:62:9e:ea:e4:74: ec:e9:fc:40:f7:a4:db:f1:4a:cf:ec:e4:fc:24:32:48:c4:e0: 5c:9c:32:5e:5c:c0:c1:74:5d:fc:f6:4d:b0:48:d1:ca:3d:d7: 8c:b3:b1:44:de:bf:1a:28:22:98:4c:45:fd:68:48:0f:6f:63: 2c:f4:60:b5:93:4d:15:8a:a7:d4:d9:3b:91:97:f5:80:71:77: 1e:d1:7f:0e:3e:2c:5b:1b:b4:90:77:46:ce:68:cd:f0:e9:03: 30:1a:6a:7c:1a:c0:c8:be:5a:17:bc:b9:21:55:26:95:ed:d9: 70:99:92:1e:36:e4:e5:ac:fe:54:2b:6a:6a:ed:f2:dd:a6:71: c8:14:01:44:27:43:2c:1c:9a:f3:8f:18:76:b4:c3:0b:66:1b: 8f:78:a5:66:ef:bd:1f:16:66:5b:f8:d8:31:db:fb:a9:a3:f7: 91:11:5e:ef:8f:e7:16:a8:2d:44:07:6d:00:87:8b:82:89:ba: 81:a4:ee:3e:25:5b:2c:58:eb:83:1c:2d:4d:47:22:b3:93:90: 5a:09:44:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884p+krvwm6n6X+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MjBiNDI5ZTgtYzQ1Ny00YzM0LWI3ZDEtZmM2ZmZkZmUwOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiED7v1fxZpgcAxcauT6ea5Mpa5HpujjK3Gg6 C6Tst2VL8PGIG9bfHKbyMvi6f1I+M7GIZ41WMh05oHjeUHBkerDtRhbEmfV7r6Cl wX23vdV0Tf9sUmbz8D2boOanVazBRGRosFlu/ZwCoKA5o+s0Jw/gK+vjaOTPe/cm +nwvv8GX5WH4+iTlMrJwwr9kVgzHVd3aKweW4eyhxPgOfCPz0U10bOowKTNwn1yz n9zmoqoKkYLHiE9WBeQPtsky7zSOBS3NqGJZNhHM3FwLi+wKwt7x1OeKe/XrF/cr vYwnZ8j8CtIMzhUXljgn2qAs6sne3ibMlJMb9RP+Q0j/1wbs9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLReA/bT4+ErlK8yRViVQSXKlt3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZTA4NjViYTEtNzIxNy0z YmRjLWJkZmMtODhjMzdjMmYzYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAjDnoyoVKvLRKYiKNE48oQwQPcgqGM6NS7jpPZShwQx08XATfMIwlW 9JiWaM5K6A5inurkdOzp/ED3pNvxSs/s5PwkMkjE4FycMl5cwMF0Xfz2TbBI0co9 14yzsUTevxooIphMRf1oSA9vYyz0YLWTTRWKp9TZO5GX9YBxdx7Rfw4+LFsbtJB3 Rs5ozfDpAzAaanwawMi+Whe8uSFVJpXt2XCZkh425OWs/lQramrt8t2mccgUAUQn QywcmvOPGHa0wwtmG494pWbvvR8WZlv42DHb+6mj95ERXu+P5xaoLUQHbQCHi4KJ uoGk7j4lWyxY64McLU1HIrOTkFoJROg= -----END CERTIFICATE-----Generated at Wed Sep 23 07:34:10 2026 by rpki-client