$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa File: fa1681d0-8765-3498-93bb-ed37569fe8e6.roa (raw, json) Hash identifier: 4DPN05fjekvnQE0cf4TekfXSWuz/KxY52XmRhwCnlJM= Subject key identifier: 39:80:06:73:5B:99:40:E7:78:B9:6D:99:0C:22:65:89:65:75:FE:03 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CC612018E8D5947ED31B0B180 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 11290 IP address blocks: 24.122.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:01:8e:8d:59:47:ed:31:b0:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=b409d156-6784-45d2-b96d-fd79b81f7353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:d2:a7:d6:58:b5:5a:ac:2d:61:60:68:f3: 39:e4:95:8f:c0:a2:27:94:52:67:42:25:60:55:4d: 05:38:d6:7d:f3:aa:8f:df:be:97:ac:d7:a1:d9:51: 52:c7:1e:42:e3:3c:8b:6d:09:94:f9:00:37:92:71: 36:c4:69:ab:3d:1d:72:66:b8:a9:00:86:00:48:86: 27:07:cc:4f:02:29:6c:17:4e:c5:69:61:75:a8:6b: 50:41:0a:b2:92:92:8a:aa:b5:44:ea:59:f0:37:b3: db:a9:0e:63:71:5b:6a:2f:e1:ad:8a:36:ca:88:50: 88:bb:c3:9f:9f:eb:34:72:52:68:ba:2d:a8:78:a1: 04:ef:ee:75:61:11:b3:19:77:6f:b9:44:47:63:00: 36:ec:d9:e8:4d:a7:1c:64:4a:98:f4:d3:c8:0f:90: 4b:f1:ba:5f:07:85:78:a3:f5:47:e5:47:13:b5:b2: 83:dd:16:67:ae:3d:0b:ac:72:f6:8d:f9:02:bf:f5: c2:be:d5:23:1e:47:b7:b9:2b:6c:2c:ec:e9:08:17: bb:f5:6a:0d:66:5e:2b:6e:23:b0:55:08:a7:15:16: e3:98:3c:0c:46:06:77:8f:93:c0:c8:d7:39:16:1f: 5b:85:cd:c4:55:b8:60:00:9e:3f:90:e6:81:fb:b9: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:80:06:73:5B:99:40:E7:78:B9:6D:99:0C:22:65:89:65:75:FE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:06:16:1c:24:65:15:69:22:d6:d8:9e:70:de:a9:38:e4:b7: 07:af:17:8c:bf:95:9a:31:60:d0:be:eb:a8:a3:de:a1:3e:12: 55:93:c9:fc:74:85:82:d2:cc:91:cd:8e:2c:f8:60:22:f0:e6: 8b:c1:68:60:c5:6d:38:1e:cd:06:51:9a:39:fc:28:e2:ee:0d: 47:36:4f:0d:ec:96:59:f8:d0:91:5e:4a:28:ec:f0:91:08:9c: b1:5d:81:ad:21:97:84:75:96:83:23:5d:ea:62:dd:0f:70:45: 5e:1b:60:e4:53:7c:31:9e:d5:56:5c:b8:84:56:89:28:41:a5: 08:d6:b3:28:69:af:7e:0b:ce:67:31:f6:a9:6a:c7:95:33:05: c4:39:74:b6:6b:5f:33:3b:c7:0d:d2:e3:36:28:28:97:64:e3: 3b:64:7a:fc:9e:c7:7c:cd:e2:de:de:6c:f4:00:2c:96:7e:6c: c5:18:e4:a1:91:9a:77:20:25:f9:b0:df:4b:7d:98:75:02:78: 84:ee:9f:7b:04:f5:ea:78:b8:12:65:e4:0a:6a:2a:0d:aa:79: a1:b4:20:3c:f0:e4:58:5a:d3:c4:ab:fe:e2:1d:fd:f9:75:54: 47:6e:0c:95:bd:a5:bd:e0:00:38:f1:9b:2f:83:06:06:aa:6a: 60:e7:7e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEgGOjVlH7TGwsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk YjQwOWQxNTYtNjc4NC00NWQyLWI5NmQtZmQ3OWI4MWY3MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou3Sp9ZYtVqsLWFgaPM55JWPwKInlFJnQiVg VU0FONZ986qP376XrNeh2VFSxx5C4zyLbQmU+QA3knE2xGmrPR1yZripAIYASIYn B8xPAilsF07FaWF1qGtQQQqykpKKqrVE6lnwN7PbqQ5jcVtqL+GtijbKiFCIu8Of n+s0clJoui2oeKEE7+51YRGzGXdvuURHYwA27NnoTaccZEqY9NPID5BL8bpfB4V4 o/VH5UcTtbKD3RZnrj0LrHL2jfkCv/XCvtUjHke3uStsLOzpCBe79WoNZl4rbiOw VQinFRbjmDwMRgZ3j5PAyNc5Fh9bhc3EVbhgAJ4/kOaB+7kfZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmABnNbmUDneLltmQwiZYlldf4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmExNjgxZDAtODc2NS0z NDk4LTkzYmItZWQzNzU2OWZlOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsGFhwkZRVpItbYnnDeqTjktwevF4y/lZoxYNC+66ij3qE+ElWTyfx0 hYLSzJHNjiz4YCLw5ovBaGDFbTgezQZRmjn8KOLuDUc2Tw3slln40JFeSijs8JEI nLFdga0hl4R1loMjXepi3Q9wRV4bYORTfDGe1VZcuIRWiShBpQjWsyhpr34Lzmcx 9qlqx5UzBcQ5dLZrXzM7xw3S4zYoKJdk4ztkevyex3zN4t7ebPQALJZ+bMUY5KGR mncgJfmw30t9mHUCeITun3sE9ep4uBJl5ApqKg2qeaG0IDzw5Fha08Sr/uId/fl1 VEduDJW9pb3gADjxmy+DBgaqamDnfgI= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:11 2026 by rpki-client