$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/0a45f5b2-727f-3fdf-8d28-138da28384d3.roa File: 0a45f5b2-727f-3fdf-8d28-138da28384d3.roa (raw, json) Hash identifier: F/5xwVlf1WbxghAdw7lqPqDsR1MCbBCsmyIyvXvAO9k= Subject key identifier: C3:E2:86:4E:2C:15:94:5B:8B:32:D2:62:6A:84:B2:11:2A:6E:BF:8F Certificate issuer: /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Certificate serial: 010D0C9F4328584F1B451F9FCC71E8D1FCD36F00 Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/0a45f5b2-727f-3fdf-8d28-138da28384d3.roa Signing time: Tue 08 Sep 2026 12:01:33 +0000 ROA not before: Tue 08 Sep 2026 12:01:33 +0000 ROA not after: Mon 07 Dec 2026 13:01:33 +0000 asID: 53292 IP address blocks: 199.16.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:45:1f:9f:cc:71:e8:d1:fc:d3:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Validity Not Before: Sep 8 12:01:33 2026 GMT Not After : Dec 7 13:01:33 2026 GMT Subject: CN=94457eb4-f834-4244-85a0-12c6c7021683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:69:b7:bf:43:ea:7a:90:0b:12:a7:4b:9b: 86:f0:93:34:27:5c:b9:5d:8d:92:ab:50:71:7c:c4: 60:03:2d:8a:60:3d:ed:e8:6b:7a:2f:17:2b:35:77: 28:10:58:cd:52:ec:0e:0e:cb:d2:a0:4e:9a:ec:c5: 20:67:f3:6d:c3:c5:c6:8d:35:3c:cb:08:75:60:dc: 93:ea:a7:45:31:c4:db:59:44:e3:5e:8d:99:d9:78: a4:f4:f6:73:06:49:00:69:f5:47:8f:33:66:6f:bf: ef:ad:ab:b8:a3:c1:75:36:c6:07:18:23:4b:96:72: 4b:0a:df:45:18:32:d5:2d:bf:01:4e:86:97:db:87: d1:21:59:f6:de:25:97:e0:5e:7d:21:2a:f2:0e:92: b7:5d:37:d8:46:99:12:d8:5f:f4:41:ac:49:0b:a1: 12:c8:d8:39:d5:3d:34:4d:79:28:5c:27:24:83:ae: 76:7a:06:2b:b0:ee:ce:a1:d2:85:ff:b0:a4:3c:b7: f8:f3:f6:83:14:29:57:88:dc:88:c4:33:c5:1c:87: 47:62:f5:e3:54:9d:c9:cb:07:4d:22:ad:fa:8e:0b: 3b:1a:a8:f1:e4:77:42:a5:03:04:9b:6e:21:c3:92: 7f:f7:f8:e8:d9:20:85:97:0f:1a:b0:4c:a9:5b:5a: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E2:86:4E:2C:15:94:5B:8B:32:D2:62:6A:84:B2:11:2A:6E:BF:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/0a45f5b2-727f-3fdf-8d28-138da28384d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl X509v3 Authority Key Identifier: keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer sbgp-ipAddrBlock: critical IPv4: 199.16.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c3:33:82:19:e4:39:9b:dc:f0:61:01:6d:99:47:29:0c:4d: 58:16:49:0f:38:05:06:5c:87:03:34:da:56:89:8d:fd:ca:a9: b5:55:33:ca:0a:69:4f:b4:64:7b:78:f3:ef:61:04:8a:84:7f: 3c:73:81:dc:11:a5:a0:44:49:0b:b7:28:24:00:f4:45:2c:d7: 52:a5:44:36:9e:8e:06:25:ee:ac:e7:0d:07:ed:0e:92:c6:81: b8:23:d7:04:8e:ac:8b:35:f9:57:93:0b:56:6b:8e:0b:78:70: c0:f9:91:0a:24:3e:21:b0:e0:93:29:7a:d9:74:8a:55:13:d8: ad:ea:85:5e:9f:e3:ba:97:e6:a5:08:0a:54:dd:16:b2:68:2b: 31:08:f3:9c:18:4e:88:c4:fd:2e:37:90:4f:a5:5a:cc:66:0d: 08:c2:64:c6:83:db:55:ab:a7:68:1e:6b:2c:f3:57:e4:50:40: 7e:69:7b:d8:30:34:f1:0a:f7:48:5a:dc:f5:18:96:e9:b2:a7: c6:e9:f4:fc:82:a1:96:ff:8c:ea:76:8f:36:ae:f0:ef:b0:e1: eb:b9:a9:c8:c0:86:60:1f:39:fa:e2:56:dc:89:ed:ab:d3:d6: 4a:56:ee:75:54:57:8b:f9:5c:6e:e5:82:34:4b:ff:0e:17:33: 94:5f:26:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bRR+fzHHo0fzTbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0 YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk OTQ0NTdlYjQtZjgzNC00MjQ0LTg1YTAtMTJjNmM3MDIxNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07hpt79D6nqQCxKnS5uG8JM0J1y5XY2Sq1Bx fMRgAy2KYD3t6Gt6LxcrNXcoEFjNUuwODsvSoE6a7MUgZ/Ntw8XGjTU8ywh1YNyT 6qdFMcTbWUTjXo2Z2Xik9PZzBkkAafVHjzNmb7/vrau4o8F1NsYHGCNLlnJLCt9F GDLVLb8BToaX24fRIVn23iWX4F59ISryDpK3XTfYRpkS2F/0QaxJC6ESyNg51T00 TXkoXCckg652egYrsO7OodKF/7CkPLf48/aDFClXiNyIxDPFHIdHYvXjVJ3JywdN Iq36jgs7Gqjx5HdCpQMEm24hw5J/9/jo2SCFlw8asEypW1rF6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPihk4sFZRbizLSYmqEshEqbr+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1 OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvMGE0NWY1YjItNzI3Zi0z ZmRmLThkMjgtMTM4ZGEyODM4NGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2 NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj ZjA4NjRiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxxC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3DM4IZ5Dmb3PBhAW2ZRykMTVgWSQ84BQZchwM02laJjf3KqbVVM8oK aU+0ZHt48+9hBIqEfzxzgdwRpaBESQu3KCQA9EUs11KlRDaejgYl7qznDQftDpLG gbgj1wSOrIs1+VeTC1Zrjgt4cMD5kQokPiGw4JMpetl0ilUT2K3qhV6f47qX5qUI ClTdFrJoKzEI85wYTojE/S43kE+lWsxmDQjCZMaD21Wrp2geayzzV+RQQH5pe9gw NPEK90ha3PUYlumyp8bp9PyCoZb/jOp2jzau8O+w4eu5qcjAhmAfOfriVtyJ7avT 1kpW7nVUV4v5XG7lgjRL/w4XM5RfJsM= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:09 2026 by rpki-client