$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: jlT6MWlJrtWbwS60SS1vCS9Dy4OprOUgnfI2+N62m0I= Subject key identifier: 67:69:45:8E:F4:FD:A7:0C:3F:D6:5C:82:98:74:0B:E9:80:D2:9B:3A Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584D8EF583CDC72DDDC9158430F0 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 53281 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:83:cd:c7:2d:dd:c9:15:84:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=bf01bbe6-e163-4edc-a846-457d7028961e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:08:18:d6:fb:07:bd:56:7a:4a:17:31:e2: 26:df:cc:10:ef:ee:e0:c0:79:a0:0e:19:7c:58:16: de:ef:81:49:f5:91:61:2b:28:94:96:5f:f5:d7:63: 79:c3:d0:18:74:32:89:c7:fd:2e:ad:57:44:40:a7: 0a:ec:07:4c:27:08:08:31:ab:b2:87:15:22:fe:07: cf:53:c9:15:45:2a:dc:8a:34:f4:6d:91:a5:d6:b1: bd:3d:4f:7f:43:50:4f:90:02:cb:65:62:9f:30:0a: d7:27:15:73:f3:3f:9a:33:4b:50:11:b9:dd:f7:1e: b6:bb:e5:d0:07:91:36:fe:91:fb:15:a5:6a:11:b6: ff:63:d7:a7:b5:87:60:80:29:7b:eb:24:39:48:9d: 66:4a:c8:fa:5a:0f:66:b7:7a:8d:0c:95:1a:9c:a8: 7c:08:82:d5:4d:92:fa:f4:67:f5:4f:b7:ad:89:83: f2:20:a1:f7:97:7d:34:d9:63:f0:5d:82:8f:e0:d1: bb:ce:35:99:3a:44:23:c7:3d:ed:51:7d:58:de:8d: 1f:11:60:32:3a:9c:2a:c7:08:d1:11:04:15:1a:5c: 74:0d:3e:19:f4:b6:d7:1b:f5:83:05:24:cd:f9:b3: 40:5d:6b:d5:8e:bb:34:db:79:5d:64:fb:af:6e:71: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:69:45:8E:F4:FD:A7:0C:3F:D6:5C:82:98:74:0B:E9:80:D2:9B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:5d:2a:25:39:83:da:53:b1:86:a4:8c:07:77:3b:77:97:c5: 0f:c6:68:75:75:55:ba:3e:c3:f1:8b:76:a6:19:2b:d1:c4:12: 0f:41:90:ed:9c:e5:ee:13:1c:9b:e6:ad:75:be:c1:a4:9a:92: f7:b6:5c:c3:a7:ec:14:17:86:75:2a:08:a1:5b:e9:c3:16:31: 7a:90:b7:71:b5:f3:b7:ba:b3:d5:5e:b5:ac:d6:1e:9e:f2:9a: 13:c6:2d:1b:11:04:84:9f:ca:a7:75:89:c9:4f:80:a1:c7:86: f5:84:67:42:02:5c:5f:1d:54:4f:82:0a:15:76:44:6a:99:c5: 09:d7:f4:71:8b:28:8a:86:5a:e6:e3:81:aa:7b:97:6b:8c:fa: ca:9b:b6:83:ed:2e:ac:88:9b:a7:f1:c3:09:be:f0:f3:f5:5f: c5:2f:0e:b0:87:6c:e1:c3:d2:90:2d:39:56:a4:4e:5e:fc:57: 2d:fb:cf:9d:9c:7c:dc:88:92:68:a1:8e:a7:0a:ee:74:0f:75: c3:c1:d4:42:8d:c4:38:04:bc:0d:4a:04:86:6a:58:06:67:ef: e5:ac:41:d2:49:52:7d:5d:0b:37:eb:74:26:ad:cc:cf:bd:5e: f2:04:cd:25:01:7f:5b:1b:c0:8a:d0:fd:c3:36:c0:53:50:8a: dd:74:46:37 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2O9YPNxy3dyRWEMPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmYwMWJiZTYtZTE2My00ZWRjLWE4NDYtNDU3ZDcwMjg5NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbYIGNb7B71WekoXMeIm38wQ7+7gwHmgDhl8 WBbe74FJ9ZFhKyiUll/112N5w9AYdDKJx/0urVdEQKcK7AdMJwgIMauyhxUi/gfP U8kVRSrcijT0bZGl1rG9PU9/Q1BPkALLZWKfMArXJxVz8z+aM0tQEbnd9x62u+XQ B5E2/pH7FaVqEbb/Y9entYdggCl76yQ5SJ1mSsj6Wg9mt3qNDJUanKh8CILVTZL6 9Gf1T7etiYPyIKH3l3002WPwXYKP4NG7zjWZOkQjxz3tUX1Y3o0fEWAyOpwqxwjR EQQVGlx0DT4Z9LbXG/WDBSTN+bNAXWvVjrs023ldZPuvbnFnwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGdpRY70/acMP9Zcgph0C+mA0ps6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANhdKiU5g9pTsYakjAd3O3eXxQ/GaHV1Vbo+w/GLdqYZK9HE Eg9BkO2c5e4THJvmrXW+waSakve2XMOn7BQXhnUqCKFb6cMWMXqQt3G187e6s9Ve tazWHp7ymhPGLRsRBISfyqd1iclPgKHHhvWEZ0ICXF8dVE+CChV2RGqZxQnX9HGL KIqGWubjgap7l2uM+sqbtoPtLqyIm6fxwwm+8PP1X8UvDrCHbOHD0pAtOVakTl78 Vy37z52cfNyIkmihjqcK7nQPdcPB1EKNxDgEvA1KBIZqWAZn7+WsQdJJUn1dCzfr dCatzM+9XvIEzSUBf1sbwIrQ/cM2wFNQit10Rjc= -----END CERTIFICATE-----Generated at Mon Apr 20 03:28:15 2026 by rpki-client