$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/dfc75bb8-285d-3fb5-a78e-b580cd58196c.roa File: dfc75bb8-285d-3fb5-a78e-b580cd58196c.roa (raw, json) Hash identifier: MxV3GGRYc9UcundTAjYtUh7vQ96z4sfsbK3d9IXyllk= Subject key identifier: A5:E1:21:E0:1C:FE:CF:13:B4:DB:62:02:2F:83:77:78:13:9B:B9:31 Certificate issuer: /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Certificate serial: 010D0C9F4328584F1B451FE4A745D74347E95000 Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/dfc75bb8-285d-3fb5-a78e-b580cd58196c.roa Signing time: Tue 08 Sep 2026 12:01:33 +0000 ROA not before: Tue 08 Sep 2026 12:01:33 +0000 ROA not after: Mon 07 Dec 2026 13:01:33 +0000 asID: 53292 IP address blocks: 208.92.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:45:1f:e4:a7:45:d7:43:47:e9:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Validity Not Before: Sep 8 12:01:33 2026 GMT Not After : Dec 7 13:01:33 2026 GMT Subject: CN=4c216378-6cf1-4379-959d-2b324550db6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:a8:26:1e:1e:1c:cc:8e:b2:07:99:7d:d3: f9:4d:2f:2f:aa:e8:36:f6:e2:f1:a2:9c:39:25:f1: 4c:d6:9e:13:2b:d8:ac:c5:59:c1:63:17:84:f5:c3: ef:1b:8b:34:08:34:3d:65:c7:2a:2c:72:af:b6:76: 1b:2a:fa:7a:1a:da:13:0d:cb:e9:fd:ab:18:f7:61: 45:33:83:83:0b:db:af:4a:7b:a7:98:ba:31:a9:fc: 2b:4d:78:28:2e:21:90:8a:09:08:92:37:e5:37:61: 16:9a:e5:3b:48:19:83:78:40:1e:0b:e5:54:a9:56: 09:ac:e5:41:b1:60:25:7a:11:c2:82:88:c2:3f:47: 40:99:d2:0e:38:1e:d9:c4:01:b9:d7:e6:93:d2:64: e2:32:ce:fc:f3:74:86:a0:7c:5f:01:23:8a:8d:cb: ab:fe:4d:19:7c:b8:05:c3:5b:31:33:c3:16:8b:4e: eb:b9:7f:2b:91:85:20:84:bd:38:f8:f4:cf:4d:8f: 39:65:1d:88:90:f4:95:8d:0a:ba:f3:2c:ce:05:b8: 0e:71:6c:c1:10:db:55:a0:ae:52:29:6f:bd:43:39: 55:68:63:3c:50:e8:18:bd:f1:7d:33:0b:e8:79:a6: bc:86:f0:89:38:fa:00:6f:2b:68:4d:07:26:11:f5: 37:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E1:21:E0:1C:FE:CF:13:B4:DB:62:02:2F:83:77:78:13:9B:B9:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/dfc75bb8-285d-3fb5-a78e-b580cd58196c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl X509v3 Authority Key Identifier: keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer sbgp-ipAddrBlock: critical IPv4: 208.92.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d9:10:2e:1d:54:23:ec:71:47:ad:1a:8a:c8:88:d3:c2:97: 72:ec:ae:af:a0:ad:89:6b:c1:36:49:7a:0b:9b:a9:e0:fa:2c: d3:59:83:7b:48:0f:e5:b8:79:74:96:6d:a4:c3:70:ce:a0:ad: db:72:d0:0b:4e:6c:88:3c:75:eb:66:cd:cd:86:32:df:69:a1: b1:65:f8:6e:10:57:f0:08:66:2f:27:30:0a:26:ed:88:05:7e: fe:48:78:b2:91:a6:d8:6d:6a:90:5d:a2:f6:09:b3:39:67:f6: 2e:38:c2:e6:fc:1e:6c:6e:7e:cf:90:63:72:92:fe:02:49:dd: 7f:04:f4:af:ac:7e:b5:a9:56:d8:99:1e:9b:75:08:57:d7:93: c5:0c:45:93:4b:bf:ba:95:62:65:6f:0f:25:5f:fd:47:f6:99: e8:7c:ac:23:b9:92:23:a8:d6:d4:89:76:8d:22:00:b7:2b:45: 06:f0:84:34:d8:b6:64:65:2c:49:65:a6:00:1e:bc:10:c6:89: e4:bb:f6:70:d3:81:bd:79:1c:ed:8d:c0:fd:38:d0:cc:54:2c: 41:04:ed:24:e1:27:3e:8c:db:56:29:a1:e9:5a:62:47:4f:16: 6b:55:0b:ad:f3:15:da:5d:9d:dd:e2:f9:60:ff:2a:0d:ba:7f: 17:0e:95:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bRR/kp0XXQ0fpUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0 YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk NGMyMTYzNzgtNmNmMS00Mzc5LTk1OWQtMmIzMjQ1NTBkYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHuoJh4eHMyOsgeZfdP5TS8vqug29uLxopw5 JfFM1p4TK9isxVnBYxeE9cPvG4s0CDQ9ZccqLHKvtnYbKvp6GtoTDcvp/asY92FF M4ODC9uvSnunmLoxqfwrTXgoLiGQigkIkjflN2EWmuU7SBmDeEAeC+VUqVYJrOVB sWAlehHCgojCP0dAmdIOOB7ZxAG51+aT0mTiMs7883SGoHxfASOKjcur/k0ZfLgF w1sxM8MWi07ruX8rkYUghL04+PTPTY85ZR2IkPSVjQq68yzOBbgOcWzBENtVoK5S KW+9QzlVaGM8UOgYvfF9Mwvoeaa8hvCJOPoAbytoTQcmEfU3XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXhIeAc/s8TtNtiAi+Dd3gTm7kxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1 OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvZGZjNzViYjgtMjg1ZC0z ZmI1LWE3OGUtYjU4MGNkNTgxOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2 NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj ZjA4NjRiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHZEC4dVCPscUetGorIiNPCl3Lsrq+grYlrwTZJegubqeD6LNNZg3tI D+W4eXSWbaTDcM6grdty0AtObIg8detmzc2GMt9pobFl+G4QV/AIZi8nMAom7YgF fv5IeLKRpthtapBdovYJszln9i44wub8Hmxufs+QY3KS/gJJ3X8E9K+sfrWpVtiZ Hpt1CFfXk8UMRZNLv7qVYmVvDyVf/Uf2meh8rCO5kiOo1tSJdo0iALcrRQbwhDTY tmRlLEllpgAevBDGieS79nDTgb15HO2NwP040MxULEEE7SThJz6M21YpoelaYkdP FmtVC63zFdpdnd3i+WD/Kg26fxcOlcI= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:09 2026 by rpki-client