$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ad52ed07-8213-3747-aa96-6ce8c9b82fb2.roa File: ad52ed07-8213-3747-aa96-6ce8c9b82fb2.roa (raw, json) Hash identifier: ZsaVjxibVv8ifVq6N/AwAni6duGlQDXUWs0Jc6XE61o= Subject key identifier: 75:A6:45:33:66:99:EA:1F:A9:DF:C6:E6:FA:31:6A:CE:B3:EE:92:5C Certificate issuer: /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Certificate serial: 010D0C9F4328584F1B451FBBFFB5976CD699E480 Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ad52ed07-8213-3747-aa96-6ce8c9b82fb2.roa Signing time: Tue 08 Sep 2026 12:01:33 +0000 ROA not before: Tue 08 Sep 2026 12:01:33 +0000 ROA not after: Mon 07 Dec 2026 13:01:33 +0000 asID: 53292 IP address blocks: 204.11.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:45:1f:bb:ff:b5:97:6c:d6:99:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Validity Not Before: Sep 8 12:01:33 2026 GMT Not After : Dec 7 13:01:33 2026 GMT Subject: CN=def3446d-3735-48ee-a29d-00ae03687dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:45:0c:89:e1:68:96:72:fb:4e:53:e8:0a: 28:d2:cd:c0:fb:02:2a:c8:2e:39:8f:89:8d:83:9b: 60:8d:3e:b8:de:d5:b0:63:1e:75:3c:10:fd:13:e4: 96:b2:5b:fe:cd:27:37:04:bd:7e:a6:58:bc:74:9b: 9b:61:87:ee:2e:9a:be:a5:fe:66:70:93:6f:0a:0c: 35:63:ed:be:35:dd:6e:ab:ae:47:b1:25:9c:5d:aa: 3c:00:74:ee:cc:f4:c5:4c:f1:fd:71:4a:0d:e3:52: c1:c6:39:53:86:25:0e:96:6e:c8:05:7e:d1:ea:1e: bc:25:18:f9:20:fa:de:39:65:97:77:03:5c:b4:c4: d4:31:fa:4b:7d:a2:04:74:b9:1d:63:d1:ae:17:35: 3d:fd:71:1e:27:8f:b8:fc:68:58:1a:5f:41:e3:3c: ce:0c:fe:56:69:b5:b1:b9:c7:54:2b:6c:a9:d3:c7: 1b:b0:58:20:aa:cd:c3:26:e1:3e:c4:90:f9:fe:1c: 00:05:f1:0b:9a:5c:49:ce:e6:b1:95:27:c2:1e:85: 91:6e:07:a8:21:99:f3:b6:45:87:83:a3:0c:d9:32: 30:51:26:c1:45:20:de:03:80:95:57:2e:94:97:92: b6:ff:bc:e1:40:9c:20:c9:29:d4:ea:08:88:45:b3: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A6:45:33:66:99:EA:1F:A9:DF:C6:E6:FA:31:6A:CE:B3:EE:92:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ad52ed07-8213-3747-aa96-6ce8c9b82fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl X509v3 Authority Key Identifier: keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer sbgp-ipAddrBlock: critical IPv4: 204.11.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c5:46:f1:87:8f:3d:a1:51:47:47:dd:52:16:d0:86:9d:00: 78:50:cf:7f:01:06:4c:8f:0b:d7:4d:20:c1:62:9c:6f:e0:6d: 60:19:a2:34:d4:d0:78:aa:64:49:5f:33:5c:9f:c3:16:a5:bc: a9:aa:22:32:ac:8e:fd:ff:9c:8d:fe:68:5d:00:40:ff:2c:58: f6:52:a5:cb:07:c6:5a:09:05:88:f5:e9:95:1d:9c:cd:9d:59: af:0a:a3:98:94:b4:4c:ab:5e:aa:7c:29:eb:98:1b:81:92:91: b4:62:4f:15:f8:23:56:6f:bc:b4:80:be:3d:8a:ff:2c:e8:d8: a3:c7:dd:42:97:f4:d9:6f:3c:20:75:87:03:0d:0d:12:4f:3e: a4:93:1d:82:32:2f:21:f3:49:18:b7:0a:bb:17:f7:1b:46:e4: 30:65:1a:d5:be:24:02:67:c4:90:18:d1:2d:c1:eb:e9:3b:57: 47:ab:39:87:0c:62:3b:f3:de:e3:ee:f6:c3:12:02:15:28:d2: 31:f1:6b:c1:e9:c4:03:2a:0d:1d:f2:cf:ed:5f:6e:91:bc:f9: c3:67:c4:d9:0f:13:00:42:ec:87:3b:8b:1b:10:82:23:23:5b: e0:ae:eb:f6:e4:42:46:b8:e8:f8:4f:f7:96:76:71:07:b4:4e: 13:85:90:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bRR+7/7WXbNaZ5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0 YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk ZGVmMzQ0NmQtMzczNS00OGVlLWEyOWQtMDBhZTAzNjg3ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6NFDInhaJZy+05T6Aoo0s3A+wIqyC45j4mN g5tgjT643tWwYx51PBD9E+SWslv+zSc3BL1+pli8dJubYYfuLpq+pf5mcJNvCgw1 Y+2+Nd1uq65HsSWcXao8AHTuzPTFTPH9cUoN41LBxjlThiUOlm7IBX7R6h68JRj5 IPreOWWXdwNctMTUMfpLfaIEdLkdY9GuFzU9/XEeJ4+4/GhYGl9B4zzODP5WabWx ucdUK2yp08cbsFggqs3DJuE+xJD5/hwABfELmlxJzuaxlSfCHoWRbgeoIZnztkWH g6MM2TIwUSbBRSDeA4CVVy6Ul5K2/7zhQJwgySnU6giIRbNuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWmRTNmmeofqd/G5voxas6z7pJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1 OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvYWQ1MmVkMDctODIxMy0z NzQ3LWFhOTYtNmNlOGM5YjgyZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2 NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj ZjA4NjRiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXFRvGHjz2hUUdH3VIW0IadAHhQz38BBkyPC9dNIMFinG/gbWAZojTU 0HiqZElfM1yfwxalvKmqIjKsjv3/nI3+aF0AQP8sWPZSpcsHxloJBYj16ZUdnM2d Wa8Ko5iUtEyrXqp8KeuYG4GSkbRiTxX4I1ZvvLSAvj2K/yzo2KPH3UKX9NlvPCB1 hwMNDRJPPqSTHYIyLyHzSRi3CrsX9xtG5DBlGtW+JAJnxJAY0S3B6+k7V0erOYcM Yjvz3uPu9sMSAhUo0jHxa8HpxAMqDR3yz+1fbpG8+cNnxNkPEwBC7Ic7ixsQgiMj W+Cu6/bkQka46PhP95Z2cQe0ThOFkIE= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:24 2026 by rpki-client