$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: Hdeco/oQtBTBgnLyY/iV/XUrpcWk9UBpj/mr8cH9JQE= Subject key identifier: 40:DE:39:2E:C2:96:5A:E2:DB:D6:74:02:33:F4:2B:C0:FD:7D:C7:D9 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584FB3A6905CE15475F3ACF05380 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 53281 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:90:5c:e1:54:75:f3:ac:f0:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=e50a444a-19ca-405a-80f6-4a590457e4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ac:e4:22:36:1a:ef:0e:61:fb:10:7f:1a:03: e3:e9:6c:98:a2:50:37:52:bb:a2:bb:5e:ff:35:6c: 38:fe:22:9d:db:d9:a5:1e:f0:a3:d6:8d:70:32:dd: 30:23:37:5d:48:aa:8b:d0:d5:90:8f:62:91:8b:fb: 4d:f4:26:2d:47:bb:a0:43:24:5a:2e:0c:89:b4:b7: be:10:d7:bc:81:0e:b4:01:65:6a:24:b7:bc:85:25: 91:cd:89:cf:b0:94:42:ad:9c:7c:8e:d2:01:a9:ab: de:3c:8e:f1:83:01:b9:5f:a3:6d:08:2d:8b:f9:36: b8:5d:9d:eb:a5:01:95:05:8b:0d:2d:5a:61:1d:9e: 34:fc:bf:ad:db:ce:83:5f:3a:fc:6a:ba:42:a6:c6: 7b:c0:d7:ed:8b:7a:9a:bb:93:f8:48:bd:08:bc:25: 58:18:ab:d0:3a:22:9a:06:f5:c8:fd:cf:2c:6b:9e: 87:8c:9e:11:55:ef:d9:2e:3d:fe:6d:5c:1e:fd:f8: de:1f:e9:bc:e6:c5:7f:aa:6c:d8:e8:63:31:b0:db: c1:93:f3:a8:2a:4f:21:28:53:cc:a6:10:42:a0:32: 13:c1:4a:6c:2b:bd:2e:3a:23:d8:21:31:35:82:b9: bb:18:34:72:01:65:41:b4:69:8f:04:a9:c4:48:b2: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:39:2E:C2:96:5A:E2:DB:D6:74:02:33:F4:2B:C0:FD:7D:C7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:28:ed:6a:0f:ae:28:44:0d:fd:14:99:c7:6f:7e:4f:68:b2: 94:78:c9:89:56:ea:6f:81:c1:36:b5:28:8f:61:a1:2e:a9:2d: ce:1e:5c:2b:36:86:3f:55:d5:5e:73:bb:ce:da:19:73:b1:38: 70:d3:2c:4e:35:20:29:cf:60:f5:8c:44:c0:8f:28:1d:57:07: 7a:7a:71:49:1a:26:4c:e5:b2:d4:56:34:53:42:c4:4a:47:ed: 97:c3:19:19:69:6a:aa:67:24:81:c0:b5:b5:c9:67:0f:49:7c: 2d:95:b3:ec:5d:03:c1:44:c7:f2:00:eb:20:8b:a0:dd:d7:46: 86:69:78:f1:8b:71:24:90:25:1b:18:38:d9:64:d9:90:0a:88: 67:1e:a3:20:31:06:b0:dc:e1:bb:f3:7c:3d:b9:f7:6e:93:2f: 1f:be:56:40:07:81:6d:98:f5:b2:45:87:18:e6:08:f5:fd:60: 28:43:d4:12:47:c2:79:fb:6c:87:da:7f:27:a9:ad:af:8a:d6: 7d:d0:a1:56:be:ef:0a:da:44:1e:38:c2:57:b2:95:1c:2f:e5: 49:47:12:83:03:dc:9e:ee:ee:05:9a:3a:5d:a0:f3:38:26:01: 90:4d:b2:94:1a:07:92:e5:b3:ad:cb:0a:3b:22:e7:ea:dc:00: 2a:b1:69:7b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+zppBc4VR186zwU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZTUwYTQ0NGEtMTljYS00MDVhLTgwZjYtNGE1OTA0NTdlNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6zkIjYa7w5h+xB/GgPj6WyYolA3Uruiu17/ NWw4/iKd29mlHvCj1o1wMt0wIzddSKqL0NWQj2KRi/tN9CYtR7ugQyRaLgyJtLe+ ENe8gQ60AWVqJLe8hSWRzYnPsJRCrZx8jtIBqavePI7xgwG5X6NtCC2L+Ta4XZ3r pQGVBYsNLVphHZ40/L+t286DXzr8arpCpsZ7wNfti3qau5P4SL0IvCVYGKvQOiKa BvXI/c8sa56HjJ4RVe/ZLj3+bVwe/fjeH+m85sV/qmzY6GMxsNvBk/OoKk8hKFPM phBCoDITwUpsK70uOiPYITE1grm7GDRyAWVBtGmPBKnESLIMIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEDeOS7Cllri29Z0AjP0K8D9fcfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC0o7WoPrihEDf0Umcdvfk9ospR4yYlW6m+BwTa1KI9hoS6p Lc4eXCs2hj9V1V5zu87aGXOxOHDTLE41ICnPYPWMRMCPKB1XB3p6cUkaJkzlstRW NFNCxEpH7ZfDGRlpaqpnJIHAtbXJZw9JfC2Vs+xdA8FEx/IA6yCLoN3XRoZpePGL cSSQJRsYONlk2ZAKiGceoyAxBrDc4bvzfD25926TLx++VkAHgW2Y9bJFhxjmCPX9 YChD1BJHwnn7bIfafyepra+K1n3QoVa+7wraRB44wleylRwv5UlHEoMD3J7u7gWa Ol2g8zgmAZBNspQaB5Lls63LCjsi5+rcACqxaXs= -----END CERTIFICATE-----Generated at Mon Nov 2 12:42:41 2026 by rpki-client