$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ac6472fb-787a-3aa1-85a4-85b84c0f612b.roa File: ac6472fb-787a-3aa1-85a4-85b84c0f612b.roa (raw, json) Hash identifier: y5SF3iDdVx/A1leuaRzZCydTpvi1OndH2fMCE6EQ4W8= Subject key identifier: DA:AB:56:DE:B0:77:FA:FF:8B:35:63:7F:FF:78:4C:58:A1:5A:F5:79 Certificate issuer: /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Certificate serial: 010D0C9F4328584F1B451F8A1DC7250DC622CC80 Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ac6472fb-787a-3aa1-85a4-85b84c0f612b.roa Signing time: Tue 08 Sep 2026 12:01:33 +0000 ROA not before: Tue 08 Sep 2026 12:01:33 +0000 ROA not after: Mon 07 Dec 2026 13:01:33 +0000 asID: 53292 IP address blocks: 192.111.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:45:1f:8a:1d:c7:25:0d:c6:22:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Validity Not Before: Sep 8 12:01:33 2026 GMT Not After : Dec 7 13:01:33 2026 GMT Subject: CN=b90da3b2-9a72-4f60-96a9-cee524a08636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:0a:4d:f3:e4:67:a3:e3:ec:bf:1f:84:da: d1:d0:32:76:ec:ad:c0:ac:bd:76:27:9d:ec:3f:35: bc:dd:c8:0f:f2:62:1d:66:9f:8d:9c:8e:d8:05:58: 24:01:f8:a6:56:6c:90:7c:3f:b5:57:06:b6:ba:f4: 5d:4a:87:d0:d6:99:b5:87:37:68:8c:19:7b:d2:3d: 45:a4:ca:d5:b0:00:d4:94:a3:df:64:8b:e5:38:57: 1f:da:0e:94:d7:67:15:7c:f2:a7:d8:24:8e:4e:79: e2:1b:c9:bd:2f:60:e0:0f:5e:36:db:4d:36:69:e1: db:8a:59:11:95:48:e5:58:5f:46:e1:72:1c:ac:18: d3:a3:02:59:64:e2:40:a5:ed:cb:53:4a:2b:fd:68: 02:97:96:f6:22:11:37:c5:69:a9:5e:fd:ee:0d:3d: 6a:d9:0b:a7:43:a3:50:4f:61:1a:09:3f:b5:a6:71: 62:b5:79:84:55:86:08:22:3b:24:ab:06:d0:d5:9b: 75:37:00:97:24:26:f1:d0:66:06:8b:34:fc:69:0d: 51:f8:1b:db:b7:f9:4e:0d:3e:ec:8f:38:1c:93:f5: ba:e3:5b:3f:98:b4:d7:07:a1:da:06:41:11:ea:08: 6c:82:02:bd:17:d2:76:70:2c:8b:db:33:af:ce:61: 5b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:56:DE:B0:77:FA:FF:8B:35:63:7F:FF:78:4C:58:A1:5A:F5:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ac6472fb-787a-3aa1-85a4-85b84c0f612b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl X509v3 Authority Key Identifier: keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer sbgp-ipAddrBlock: critical IPv4: 192.111.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c0:88:24:00:a1:6b:49:bd:50:f0:e8:e0:82:65:76:f9:fa: fa:bb:39:a4:ef:19:67:80:59:02:02:92:ad:de:5f:bf:fe:0d: 22:09:a5:22:be:17:cc:95:b4:72:44:16:37:4d:84:03:4d:aa: da:38:0c:04:50:36:ba:a2:e3:f8:f3:f7:27:d5:68:a8:75:61: 96:6c:5a:5b:fb:8f:96:d1:c4:24:83:7c:28:06:11:1f:4e:c3: 2b:5b:76:f2:b5:d4:91:bd:81:41:c1:d2:d2:0d:89:64:bd:26: 80:44:a2:b9:2a:99:42:48:29:92:d8:39:93:6e:fc:97:af:11: 74:35:8f:1a:53:b4:59:fb:b5:45:52:ef:a5:4c:14:08:16:48: 60:5b:eb:9c:d2:12:4e:d8:96:ee:cc:e0:23:b8:21:4d:73:36: 18:d7:e3:14:58:ba:e2:c8:bd:55:13:4f:ae:bf:f1:93:ae:4b: f8:49:24:1a:d3:39:14:75:e1:26:66:95:d5:64:5e:39:7b:eb: 3c:90:fc:83:44:27:98:2e:54:dd:db:98:74:9d:1e:3a:44:8e: 73:a4:48:59:14:14:95:a7:af:ec:1a:90:f7:ca:ae:01:c2:d5: 63:85:9b:36:15:d9:5a:19:3d:2e:e3:5c:d6:39:15:73:41:ad: ae:9b:15:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bRR+KHcclDcYizIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0 YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk YjkwZGEzYjItOWE3Mi00ZjYwLTk2YTktY2VlNTI0YTA4NjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9MKTfPkZ6Pj7L8fhNrR0DJ27K3ArL12J53s PzW83cgP8mIdZp+NnI7YBVgkAfimVmyQfD+1Vwa2uvRdSofQ1pm1hzdojBl70j1F pMrVsADUlKPfZIvlOFcf2g6U12cVfPKn2CSOTnniG8m9L2DgD1422002aeHbilkR lUjlWF9G4XIcrBjTowJZZOJApe3LU0or/WgCl5b2IhE3xWmpXv3uDT1q2QunQ6NQ T2EaCT+1pnFitXmEVYYIIjskqwbQ1Zt1NwCXJCbx0GYGizT8aQ1R+Bvbt/lODT7s jzgck/W641s/mLTXB6HaBkER6ghsggK9F9J2cCyL2zOvzmFb6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqrVt6wd/r/izVjf/94TFihWvV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1 OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvYWM2NDcyZmItNzg3YS0z YWExLTg1YTQtODViODRjMGY2MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2 NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj ZjA4NjRiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwG82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnAiCQAoWtJvVDw6OCCZXb5+vq7OaTvGWeAWQICkq3eX7/+DSIJpSK+ F8yVtHJEFjdNhANNqto4DARQNrqi4/jz9yfVaKh1YZZsWlv7j5bRxCSDfCgGER9O wytbdvK11JG9gUHB0tINiWS9JoBEorkqmUJIKZLYOZNu/JevEXQ1jxpTtFn7tUVS 76VMFAgWSGBb65zSEk7Ylu7M4CO4IU1zNhjX4xRYuuLIvVUTT66/8ZOuS/hJJBrT ORR14SZmldVkXjl76zyQ/INEJ5guVN3bmHSdHjpEjnOkSFkUFJWnr+wakPfKrgHC 1WOFmzYV2VoZPS7jXNY5FXNBra6bFfk= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:19 2026 by rpki-client