$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa File: fbb7b44b-75a0-304d-8878-021d4d576a6e.roa (raw, json) Hash identifier: eZumrh4YnTI9d4nYNLl6DWPDbCy86WSfpUUd0EaGl94= Subject key identifier: 6A:E3:92:11:DC:99:B2:A1:26:5D:56:49:41:34:B1:50:1A:7F:4B:25 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F3CE29FBADF7F816FAB55ED00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 24.153.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9f:ba:df:7f:81:6f:ab:55:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=f097b12c-a2ce-4aa4-af6a-9c924a447c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:1d:5c:85:b2:ba:c0:51:4f:c2:b0:c9:4b: 4f:82:60:05:f1:7e:b2:4f:54:b7:23:17:44:fd:f6: dc:57:cd:15:ba:93:1c:ff:dc:36:96:74:1b:d2:d2: 1d:b7:10:8c:b4:a0:80:6d:a9:55:50:f2:fa:fa:bb: 04:0d:0b:98:8f:40:c6:ea:29:79:bf:db:31:dd:0b: f1:35:f3:d9:17:a8:34:31:17:20:69:5d:52:d2:35: 80:fe:34:1c:e7:21:a6:0d:43:a2:e3:5f:9a:b6:03: 7c:0c:a7:01:98:41:9f:86:b7:53:fa:ac:da:37:f7: b4:40:09:02:c0:08:2c:4a:fd:43:49:e6:6f:18:a9: 4f:68:8d:8c:23:9d:8b:f1:91:01:87:06:93:1f:23: 24:e2:cf:2e:49:8a:7f:1c:f7:c9:f1:1b:06:e7:e9: 57:60:4e:5e:31:60:20:4f:5b:c6:bb:ac:91:0a:dc: 5b:d6:97:f1:76:b9:fc:2d:67:d1:75:ff:df:8a:a5: 5f:f4:05:a5:40:9f:99:cf:58:82:6a:26:27:ad:7c: ac:53:ea:2c:65:52:f6:08:b0:65:17:7a:5a:ee:d1: 3b:18:77:c5:3e:37:25:59:e7:fb:7d:71:ed:94:3a: bb:65:c6:a3:a7:85:6c:65:1f:9f:ba:68:c7:32:40: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E3:92:11:DC:99:B2:A1:26:5D:56:49:41:34:B1:50:1A:7F:4B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.153.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cf:73:44:ac:28:44:e7:0f:49:99:a4:4d:2f:22:c1:61:3e: db:76:31:12:a6:5e:9c:25:41:a1:f8:a3:eb:b3:36:5a:3f:bf: 11:e8:ce:98:81:65:0d:b4:93:1a:78:66:15:c4:ed:f4:5a:4d: b3:54:17:fc:19:8f:88:7a:d6:84:80:a4:0a:d4:3c:be:fe:c5: a3:3a:02:86:b5:27:8c:d5:b3:a6:33:f3:5c:0c:26:30:38:93: 04:84:0b:db:f9:d0:fe:7b:c8:2a:cf:3d:51:03:19:64:e4:8d: f5:7f:dd:ed:6a:df:10:db:4b:1f:22:f0:7b:06:93:10:7c:45: 46:de:2f:00:d2:45:99:73:7f:d4:d4:cb:05:b2:4e:e5:76:79: 1f:88:8e:58:de:70:dc:2e:14:f2:be:b5:66:59:f9:d8:a5:c7: 20:84:cd:2e:d7:21:d3:79:f6:13:e1:99:b1:13:3c:b9:f4:96: 66:48:bb:d7:ea:49:0c:3d:6d:fe:48:b7:15:cc:fe:cd:2f:15: e5:89:e7:0f:87:a7:bf:d4:e4:7c:5c:e6:4b:d0:22:5d:f9:b4: d6:5e:fa:43:44:fd:e6:06:44:ab:d5:ba:72:29:ac:86:cc:88: 21:d2:f4:88:06:35:d5:7e:43:1f:5f:db:6a:11:d8:a8:b9:fc: d7:b4:a6:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884p+633+Bb6tV7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjA5N2IxMmMtYTJjZS00YWE0LWFmNmEtOWM5MjRhNDQ3Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN8dXIWyusBRT8KwyUtPgmAF8X6yT1S3IxdE /fbcV80VupMc/9w2lnQb0tIdtxCMtKCAbalVUPL6+rsEDQuYj0DG6il5v9sx3Qvx NfPZF6g0MRcgaV1S0jWA/jQc5yGmDUOi41+atgN8DKcBmEGfhrdT+qzaN/e0QAkC wAgsSv1DSeZvGKlPaI2MI52L8ZEBhwaTHyMk4s8uSYp/HPfJ8RsG5+lXYE5eMWAg T1vGu6yRCtxb1pfxdrn8LWfRdf/fiqVf9AWlQJ+Zz1iCaiYnrXysU+osZVL2CLBl F3pa7tE7GHfFPjclWef7fXHtlDq7Zcajp4VsZR+fumjHMkBeEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrjkhHcmbKhJl1WSUE0sVAaf0slMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmJiN2I0NGItNzVhMC0z MDRkLTg4NzgtMDIxZDRkNTc2YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbPc0SsKETnD0mZpE0vIsFhPtt2MRKmXpwlQaH4o+uzNlo/vxHozpiB ZQ20kxp4ZhXE7fRaTbNUF/wZj4h61oSApArUPL7+xaM6Aoa1J4zVs6Yz81wMJjA4 kwSEC9v50P57yCrPPVEDGWTkjfV/3e1q3xDbSx8i8HsGkxB8RUbeLwDSRZlzf9TU ywWyTuV2eR+IjljecNwuFPK+tWZZ+dilxyCEzS7XIdN59hPhmbETPLn0lmZIu9fq SQw9bf5ItxXM/s0vFeWJ5w+Hp7/U5Hxc5kvQIl35tNZe+kNE/eYGRKvVunIprIbM iCHS9IgGNdV+Qx9f22oR2Ki5/Ne0plw= -----END CERTIFICATE-----Generated at Thu Sep 24 02:04:32 2026 by rpki-client