$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/3ee1d3a2-e278-3730-aa50-dbf08f369148.roa File: 3ee1d3a2-e278-3730-aa50-dbf08f369148.roa (raw, json) Hash identifier: vSqkgRZx+Y9AJwkXOapf7J7ErVSbQuOqmBAjPCVG+Cg= Subject key identifier: 04:2C:50:BF:EF:18:9A:6F:67:37:D7:DF:8C:99:42:E2:D5:5C:D3:D6 Certificate issuer: /CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8 Certificate serial: 010D0C9F4328584F5E6A06C4733CE3F62F180040 Authority key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/3ee1d3a2-e278-3730-aa50-dbf08f369148.roa Signing time: Fri 02 Oct 2026 13:15:04 +0000 ROA not before: Fri 02 Oct 2026 13:15:04 +0000 ROA not after: Thu 31 Dec 2026 14:15:04 +0000 asID: 394457 IP address blocks: 199.193.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:6a:06:c4:73:3c:e3:f6:2f:18:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8 Validity Not Before: Oct 2 13:15:04 2026 GMT Not After : Dec 31 14:15:04 2026 GMT Subject: CN=d0e58617-a9c2-4888-b2e4-03b8112ac673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2a:4c:fe:58:8a:1d:f3:94:67:54:d2:7a:f3: 5c:82:ef:68:df:27:e2:1a:82:38:87:c6:d9:5e:2b: 29:8e:b2:4d:66:fd:ae:b4:6a:cc:26:88:0a:4f:0d: 68:2c:ac:25:eb:6c:fc:58:dd:18:7c:bd:c6:ad:90: 1c:22:78:6b:40:09:ce:b1:d4:9d:be:00:9f:c8:27: 23:66:e2:72:06:4d:46:ae:f9:68:5a:88:92:3e:d8: 50:61:6e:ee:e8:e8:ad:56:b3:12:c1:18:5b:92:49: 33:17:c8:ed:05:a0:1a:86:ed:17:f8:f8:62:f5:70: 87:3b:65:f5:8a:b8:ca:74:30:43:a0:ea:e1:6e:e5: c5:84:78:a3:a0:d8:24:f0:6d:a3:10:b3:02:ae:c7: 62:52:2f:14:84:10:52:d1:ce:87:ba:fd:02:fd:0a: e5:e4:d8:12:90:c7:72:4f:95:56:a8:91:d6:23:8f: b2:78:26:a1:79:6b:3a:3d:08:5a:a6:0b:e5:21:89: c2:a1:f7:23:f7:a4:fb:77:cd:38:58:8e:35:cb:de: 0a:82:50:7c:eb:5a:4e:27:aa:3c:86:48:fc:54:b5: b7:40:da:20:68:aa:0d:60:fc:ef:f0:d9:6d:e3:9e: 91:92:8a:6b:c9:89:97:6c:a4:6d:9c:32:b8:bf:e9: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2C:50:BF:EF:18:9A:6F:67:37:D7:DF:8C:99:42:E2:D5:5C:D3:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/3ee1d3a2-e278-3730-aa50-dbf08f369148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl X509v3 Authority Key Identifier: keyid:B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer sbgp-ipAddrBlock: critical IPv4: 199.193.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:17:8f:b2:cd:b6:bc:db:55:0d:80:5a:7a:d9:a1:1c:cb:b6: 7d:8e:81:3f:cf:15:6c:1a:1b:68:56:f8:cc:c9:ee:c7:f6:f2: c4:d4:9c:7a:26:91:a8:04:23:1b:94:08:61:de:bf:30:2d:26: e9:50:80:1b:66:bb:e1:ca:65:99:81:e2:6a:f0:02:cd:a4:4e: dd:a2:8a:53:42:d9:75:17:48:2a:03:a9:af:14:37:37:57:17: d5:9e:64:f5:fd:36:3c:aa:ac:01:cf:f8:01:3e:5e:f2:94:bd: db:cb:db:0c:a2:60:43:f3:25:55:92:8e:de:69:b0:95:3f:4a: 17:c0:cc:92:cd:60:d5:7e:fe:6e:13:02:db:59:d8:6d:e8:f3: 69:1f:a6:f0:71:d3:b9:83:2f:17:e5:fb:46:fd:9f:2e:45:b0: 1a:49:21:a9:15:fa:1f:c1:09:01:7e:39:8a:5b:61:ea:c3:4e: b8:1b:7f:de:b0:b0:d3:69:2f:d1:1f:5f:bc:ca:60:8b:6b:17: 52:16:14:cd:d5:a5:8e:c0:d1:c4:6c:db:e9:23:a3:f1:10:be: f4:83:6e:db:ad:a5:56:f1:68:b5:eb:aa:0b:52:97:e7:32:c5: 0d:e0:ec:f1:32:a1:6a:4a:f5:eb:74:87:33:26:42:98:39:a4: 4e:9e:f3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eagbEczzj9i8YAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE0MGU5ZTYtMzU3Zi00NTNkLWIzODYtZDcxZmQ5ZDI0 Y2Y4MB4XDTI2MTAwMjEzMTUwNFoXDTI2MTIzMTE0MTUwNFowLzEtMCsGA1UEAxMk ZDBlNTg2MTctYTljMi00ODg4LWIyZTQtMDNiODExMmFjNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSpM/liKHfOUZ1TSevNcgu9o3yfiGoI4h8bZ XispjrJNZv2utGrMJogKTw1oLKwl62z8WN0YfL3GrZAcInhrQAnOsdSdvgCfyCcj ZuJyBk1GrvloWoiSPthQYW7u6OitVrMSwRhbkkkzF8jtBaAahu0X+Phi9XCHO2X1 irjKdDBDoOrhbuXFhHijoNgk8G2jELMCrsdiUi8UhBBS0c6Huv0C/Qrl5NgSkMdy T5VWqJHWI4+yeCaheWs6PQhapgvlIYnCofcj96T7d804WI41y94KglB861pOJ6o8 hkj8VLW3QNogaKoNYPzv8Nlt456RkopryYmXbKRtnDK4v+n4iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQsUL/vGJpvZzfX34yZQuLVXNPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTQw ZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFmZDlkMjRjZjgvM2VlMWQzYTItZTI3OC0z NzMwLWFhNTAtZGJmMDhmMzY5MTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE0MGU5ZTYtMzU3Zi00NTNkLWIz ODYtZDcxZmQ5ZDI0Y2Y4LzRhNDBlOWU2LTM1N2YtNDUzZC1iMzg2LWQ3MWZkOWQy NGNmOC5jcmwwHwYDVR0jBBgwFoAUsk8C9KxcvUCCSc6cMNBzJoyUf8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTQwZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFm ZDlkMjRjZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwXj7LNtrzbVQ2AWnrZoRzLtn2OgT/PFWwaG2hW+MzJ7sf28sTUnHom kagEIxuUCGHevzAtJulQgBtmu+HKZZmB4mrwAs2kTt2iilNC2XUXSCoDqa8UNzdX F9WeZPX9NjyqrAHP+AE+XvKUvdvL2wyiYEPzJVWSjt5psJU/ShfAzJLNYNV+/m4T AttZ2G3o82kfpvBx07mDLxfl+0b9ny5FsBpJIakV+h/BCQF+OYpbYerDTrgbf96w sNNpL9EfX7zKYItrF1IWFM3VpY7A0cRs2+kjo/EQvvSDbtutpVbxaLXrqgtSl+cy xQ3g7PEyoWpK9et0hzMmQpg5pE6e85g= -----END CERTIFICATE-----Generated at Mon Oct 26 00:52:44 2026 by rpki-client