$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: LmkSE0MLgPVEhz0eWkA28aS3Pqbv9t2CLLcqrRR2b0k= Subject key identifier: EF:37:DE:E8:11:6C:87:E3:2A:FE:6D:FA:CE:E3:EE:15:0A:BF:A9:16 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584F119D15D9C8E2E26FEDECBBCC Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 53281 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:15:d9:c8:e2:e2:6f:ed:ec:bb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=06aeaf94-6b36-498d-b22d-bc42ee826664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a5:1b:07:f3:cb:0a:55:8a:72:a0:31:82:68: bf:fa:07:64:73:64:1f:2e:5b:bf:85:31:ab:3a:78: 37:dc:b4:53:d1:03:7e:82:26:2b:00:82:ee:97:c5: 81:a4:48:39:94:0a:dc:70:37:8b:42:94:54:ab:ba: c9:a6:3b:17:9a:61:d4:0d:3b:a6:1a:40:3b:0d:ba: 5b:96:1f:8d:2e:a6:56:b2:af:00:4d:3d:30:07:0b: 7d:f3:02:2c:7c:6c:c3:c0:96:9e:fa:48:62:ff:46: 88:ff:a7:86:b5:cd:88:06:a4:c7:39:96:2f:20:5e: c1:78:14:48:06:77:38:0f:27:7b:0d:7d:a5:48:57: ea:4a:f1:b0:97:da:42:7b:a6:b4:ec:52:b3:31:db: 34:3a:df:c6:01:0e:18:a4:bd:aa:77:4b:10:05:07: 45:91:d2:1c:d1:34:bb:a9:e3:f6:bc:2b:28:40:14: 48:5b:7e:40:5e:6c:fb:1c:0f:8e:7b:c8:51:7c:12: f0:e1:de:f2:15:87:00:5a:a7:23:fe:11:40:b0:95: 35:65:1c:c1:17:00:4c:94:dc:7e:2b:77:a4:9d:67: 0b:87:44:90:1a:61:57:59:88:34:7d:41:cf:54:69: a6:c4:f0:f7:30:28:b4:2d:68:63:e0:02:3e:78:cb: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:37:DE:E8:11:6C:87:E3:2A:FE:6D:FA:CE:E3:EE:15:0A:BF:A9:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:55:b1:fb:7b:2b:84:79:d6:95:2e:fe:8b:cb:a6:f5:30:f7: f3:54:5b:18:38:7b:16:8d:9e:a9:83:cf:51:83:1a:ea:1b:1f: 47:20:07:cb:da:91:e5:b7:73:8a:f3:89:b3:bb:19:a2:c4:e6: 6c:94:4d:15:73:8d:cb:e5:53:22:2c:01:ce:42:c8:64:62:34: 30:4a:13:50:75:a6:65:61:0e:71:30:88:68:96:b7:5a:fc:43: 81:fa:83:55:f8:91:1a:a0:2e:5d:29:ad:e0:fb:0b:d7:c6:70: 01:3a:58:66:e3:04:d9:99:2d:d2:f5:34:83:ad:6f:6c:7d:28: 9b:48:31:7a:5d:47:c4:a0:1b:96:44:29:09:38:ce:76:5b:de: cf:a4:96:52:2f:06:86:ac:9b:e1:d6:da:da:fc:02:00:5b:bb: 57:1f:c2:f8:a0:c9:d6:99:e2:23:32:34:5d:72:23:a6:5e:9e: ad:1a:8b:e8:c9:0c:e1:ed:bd:ba:f9:ad:27:d0:57:eb:88:6e: 45:bf:1d:f2:be:af:fe:e2:42:3a:82:cf:e0:9e:b9:40:63:8e: 30:f7:b6:ad:5c:90:21:71:82:87:1e:59:60:93:c4:1d:82:50: 0f:95:ed:73:f1:ec:2c:e3:3b:38:5e:79:46:c9:46:0f:02:7f: c3:a4:2f:3d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8RnRXZyOLib+3su8wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDZhZWFmOTQtNmIzNi00OThkLWIyMmQtYmM0MmVlODI2NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66UbB/PLClWKcqAxgmi/+gdkc2QfLlu/hTGr Ong33LRT0QN+giYrAILul8WBpEg5lArccDeLQpRUq7rJpjsXmmHUDTumGkA7Dbpb lh+NLqZWsq8ATT0wBwt98wIsfGzDwJae+khi/0aI/6eGtc2IBqTHOZYvIF7BeBRI Bnc4Dyd7DX2lSFfqSvGwl9pCe6a07FKzMds0Ot/GAQ4YpL2qd0sQBQdFkdIc0TS7 qeP2vCsoQBRIW35AXmz7HA+Oe8hRfBLw4d7yFYcAWqcj/hFAsJU1ZRzBFwBMlNx+ K3eknWcLh0SQGmFXWYg0fUHPVGmmxPD3MCi0LWhj4AI+eMu+XQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO833ugRbIfjKv5t+s7j7hUKv6kWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL1Vsft7K4R51pUu/ovLpvUw9/NUWxg4exaNnqmDz1GDGuob H0cgB8vakeW3c4rzibO7GaLE5myUTRVzjcvlUyIsAc5CyGRiNDBKE1B1pmVhDnEw iGiWt1r8Q4H6g1X4kRqgLl0preD7C9fGcAE6WGbjBNmZLdL1NIOtb2x9KJtIMXpd R8SgG5ZEKQk4znZb3s+kllIvBoasm+HW2tr8AgBbu1cfwvigydaZ4iMyNF1yI6Ze nq0ai+jJDOHtvbr5rSfQV+uIbkW/HfK+r/7iQjqCz+CeuUBjjjD3tq1ckCFxgoce WWCTxB2CUA+V7XPx7CzjOzheeUbJRg8Cf8OkLz0= -----END CERTIFICATE-----Generated at Sun Sep 13 13:20:46 2026 by rpki-client