$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/a6f3f402-ebe4-3ab9-a2e7-83e4b3331920.roa File: a6f3f402-ebe4-3ab9-a2e7-83e4b3331920.roa (raw, json) Hash identifier: ZX/rayvAG9J5QiR2Vq+pcSzMLhGDU1oF+0A7LrHVDBg= Subject key identifier: FE:B6:6B:B5:49:35:1C:04:5A:30:BD:8A:5D:60:E5:E6:C0:C1:47:F5 Certificate issuer: /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Certificate serial: 010D0C9F4328584F1B451FAD5B57A14A83FF4300 Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/a6f3f402-ebe4-3ab9-a2e7-83e4b3331920.roa Signing time: Tue 08 Sep 2026 12:01:33 +0000 ROA not before: Tue 08 Sep 2026 12:01:33 +0000 ROA not after: Mon 07 Dec 2026 13:01:33 +0000 asID: 53292 IP address blocks: 199.102.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:45:1f:ad:5b:57:a1:4a:83:ff:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Validity Not Before: Sep 8 12:01:33 2026 GMT Not After : Dec 7 13:01:33 2026 GMT Subject: CN=e182a5f3-1b44-4d3d-9b29-659c4d6c6bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:56:96:2b:80:96:48:4d:25:e5:65:23:16: 98:48:82:2b:03:3a:da:57:9a:70:3b:69:00:ea:35: c9:64:32:b6:72:0f:5c:63:12:52:ad:a2:75:da:8c: 84:75:6a:73:6d:67:94:9b:72:5a:f7:3a:95:7f:d2: 96:74:c9:dc:b3:c2:aa:96:ab:0b:5e:8c:72:e0:8e: 19:9b:fc:a5:44:4c:4a:3a:ff:e3:d3:8e:d1:71:aa: a1:6e:4e:69:a9:61:73:10:81:07:6b:3b:f5:46:e3: 25:92:35:ff:eb:45:fa:32:40:fa:b6:e2:6b:dd:c0: 55:15:88:cd:1f:8b:60:cc:ab:a3:fe:15:2d:17:a0: bf:9d:59:72:64:8d:47:0a:50:29:71:6d:81:19:9e: 56:99:11:22:d8:2d:f7:1e:4b:4f:c6:2d:d3:8c:41: 69:91:40:20:8b:4e:c8:3e:a2:05:f2:9f:ca:d8:8f: d4:2a:12:69:82:0d:b6:af:91:7e:a7:84:11:53:37: 04:5d:0a:aa:77:18:aa:ad:b9:8b:8c:1c:e1:16:44: d2:6b:0f:6a:76:99:f3:12:44:89:4d:20:4c:eb:82: bd:27:74:50:e7:93:92:67:7b:9e:0c:31:77:aa:cc: 8e:de:1d:9b:2d:1f:b6:27:e4:89:34:3e:2e:66:06: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B6:6B:B5:49:35:1C:04:5A:30:BD:8A:5D:60:E5:E6:C0:C1:47:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/a6f3f402-ebe4-3ab9-a2e7-83e4b3331920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl X509v3 Authority Key Identifier: keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer sbgp-ipAddrBlock: critical IPv4: 199.102.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3e:15:a7:43:22:fe:1c:11:bc:f0:9a:8e:de:fe:42:fb:9e: ec:19:72:b4:f9:d4:8c:8c:a8:f6:d4:cf:98:bc:32:f1:ad:cd: bf:a6:54:ce:96:59:8a:43:a8:93:54:1c:09:3b:8a:49:1a:f8: b0:61:3b:9c:90:a2:01:7d:51:0c:cc:6f:2a:f9:dd:2a:f9:9c: 33:49:12:c6:24:c8:00:56:38:95:95:d3:61:e6:42:7c:d5:5c: 36:2e:68:3e:52:a5:94:57:e2:ff:21:6e:f0:11:71:8a:36:94: 04:48:3b:38:0c:8b:21:13:13:1a:87:93:c5:eb:c9:5e:14:7b: b6:86:b7:07:a0:81:e8:0c:e7:36:9f:5d:f3:ca:b1:c0:3a:84: d0:e2:68:8c:40:ed:6e:a3:b9:4a:8d:5f:9d:7f:23:ba:66:9c: 83:23:b4:73:9d:b3:40:49:b6:bf:ed:82:8d:e6:a4:cf:1f:49: 3d:0d:99:0c:31:89:ed:07:64:30:1f:1d:b8:13:ce:4d:3d:51: 64:e6:cd:38:bf:a9:54:d4:9e:84:28:0d:1e:18:03:84:6d:52: 05:c5:ac:fe:29:8f:a4:a5:44:4c:b6:ca:c7:b8:75:33:43:97: ee:29:66:eb:f1:18:8e:b9:fc:4c:51:97:e9:b6:ba:49:45:c0: 54:75:59:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bRR+tW1ehSoP/QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0 YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk ZTE4MmE1ZjMtMWI0NC00ZDNkLTliMjktNjU5YzRkNmM2YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR5WliuAlkhNJeVlIxaYSIIrAzraV5pwO2kA 6jXJZDK2cg9cYxJSraJ12oyEdWpzbWeUm3Ja9zqVf9KWdMncs8KqlqsLXoxy4I4Z m/ylRExKOv/j047Rcaqhbk5pqWFzEIEHazv1RuMlkjX/60X6MkD6tuJr3cBVFYjN H4tgzKuj/hUtF6C/nVlyZI1HClApcW2BGZ5WmREi2C33HktPxi3TjEFpkUAgi07I PqIF8p/K2I/UKhJpgg22r5F+p4QRUzcEXQqqdxiqrbmLjBzhFkTSaw9qdpnzEkSJ TSBM64K9J3RQ55OSZ3ueDDF3qsyO3h2bLR+2J+SJND4uZga/+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP62a7VJNRwEWjC9il1g5ebAwUf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1 OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvYTZmM2Y0MDItZWJlNC0z YWI5LWEyZTctODNlNGIzMzMxOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2 NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj ZjA4NjRiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2ZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo+FadDIv4cEbzwmo7e/kL7nuwZcrT51IyMqPbUz5i8MvGtzb+mVM6W WYpDqJNUHAk7ikka+LBhO5yQogF9UQzMbyr53Sr5nDNJEsYkyABWOJWV02HmQnzV XDYuaD5SpZRX4v8hbvARcYo2lARIOzgMiyETExqHk8XryV4Ue7aGtweggegM5zaf XfPKscA6hNDiaIxA7W6juUqNX51/I7pmnIMjtHOds0BJtr/tgo3mpM8fST0NmQwx ie0HZDAfHbgTzk09UWTmzTi/qVTUnoQoDR4YA4RtUgXFrP4pj6SlREy2yse4dTND l+4pZuvxGI65/ExRl+m2uklFwFR1Was= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:02 2026 by rpki-client