$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa File: 83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa (raw, json) Hash identifier: KrJsK5EsBph9mulgaBnUJYinHe6u0isSf5ZZ1SR/t1Y= Subject key identifier: 35:5C:97:D9:A4:F3:4C:31:1D:1A:01:92:8D:89:88:3C:8D:E3:6B:1D Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584F8F3DC33F40E66F0740F63BD8 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 63456 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c3:3f:40:e6:6f:07:40:f6:3b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=6212d5f0-9e6d-49fe-a345-86e49ceb61ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:3b:6f:2b:06:d5:0c:6b:bc:67:35:35:71: cf:ec:ce:ab:88:01:be:b6:96:20:0f:e9:55:de:e3: 2b:4a:ee:02:e0:aa:e5:2c:7b:a0:7e:27:df:af:fd: 35:90:0c:77:07:44:d8:37:43:d7:4f:c1:d0:ce:fd: 79:f9:dc:9f:c7:ed:6b:fc:6a:cb:6c:f8:3f:db:b8: 8e:a1:d3:d6:f2:86:ae:d9:ce:81:c5:63:ca:d7:bf: 11:ec:97:29:23:7d:9d:32:f5:7c:77:92:48:3c:e2: 6b:8c:9a:33:1a:de:2d:b6:eb:31:71:27:b2:11:5d: f4:ca:1f:77:a7:b9:68:c3:f9:f0:4a:f2:de:49:5a: 3c:be:a7:1e:a7:eb:18:eb:2f:c1:41:8a:99:9b:d8: 23:fa:58:0c:d1:86:a6:7a:34:ad:67:b3:ef:ee:ab: 66:13:2d:7e:dc:64:7e:84:df:ec:d1:47:70:38:17: d3:9b:fa:c3:ac:16:28:57:ef:71:90:a2:d5:bf:9c: 70:ef:8f:e0:b2:cf:d1:0c:e0:71:47:06:6d:72:28: 8f:c7:05:de:ce:8a:f1:e6:c2:fb:d5:67:fe:cb:11: 87:b3:ce:ab:d9:4f:38:76:7b:a4:0d:f6:93:d1:e4: 5f:c7:33:88:ee:2c:02:51:22:78:cf:b9:70:37:30: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:97:D9:A4:F3:4C:31:1D:1A:01:92:8D:89:88:3C:8D:E3:6B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/83d5df07-0cc4-3b16-a5e7-a8cb9d01490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ef:a6:82:16:63:14:4e:5e:77:c4:d6:b6:d5:04:f2:d3:d0:9b: 71:d8:16:53:ad:18:51:38:f7:73:3e:f3:7d:b2:3b:cb:a6:85: bb:0e:1a:6d:a9:fb:ef:97:da:6b:4c:f2:d5:d1:77:42:5d:39: 9b:87:6c:ca:3e:f4:41:04:fd:8a:44:de:20:d3:14:19:ce:ac: 7e:07:38:fb:c6:56:b1:64:66:cc:34:41:96:62:ae:04:24:6d: 15:05:8c:5d:bb:69:99:9b:64:49:fd:a2:cf:2b:31:f7:f0:6e: 27:37:5f:cd:f6:4c:81:b1:81:4f:41:26:a8:73:3d:4b:e2:69: 03:f3:06:d4:aa:54:c3:00:99:e8:65:f1:8c:97:d9:23:a6:f2: a7:2f:82:e6:f0:6d:96:78:b3:94:dd:e6:54:2a:52:2e:d6:4f: ed:da:22:5e:92:7a:ea:b9:30:b0:5b:fe:10:1a:39:12:3d:6c: 71:5d:f3:6f:00:6d:4c:0f:10:6f:51:51:40:22:71:4f:79:5d: f2:68:48:05:77:0b:32:0c:2c:78:26:c0:6b:b8:86:ae:be:fa: 88:ca:b0:1a:e6:60:75:7f:d2:6b:89:5a:f6:c0:6f:a2:06:5b: 72:9a:76:04:31:5d:4f:ef:5f:ad:a9:a7:90:eb:50:7a:4a:0c: f8:d6:3c:6b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+PPcM/QOZvB0D2O9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NjIxMmQ1ZjAtOWU2ZC00OWZlLWEzNDUtODZlNDljZWI2MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhs7bysG1QxrvGc1NXHP7M6riAG+tpYgD+lV 3uMrSu4C4KrlLHugfiffr/01kAx3B0TYN0PXT8HQzv15+dyfx+1r/GrLbPg/27iO odPW8oau2c6BxWPK178R7JcpI32dMvV8d5JIPOJrjJozGt4ttusxcSeyEV30yh93 p7low/nwSvLeSVo8vqcep+sY6y/BQYqZm9gj+lgM0YamejStZ7Pv7qtmEy1+3GR+ hN/s0UdwOBfTm/rDrBYoV+9xkKLVv5xw74/gss/RDOBxRwZtciiPxwXezorx5sL7 1Wf+yxGHs86r2U84dnukDfaT0eRfxzOI7iwCUSJ4z7lwNzBuHQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDVcl9mk80wxHRoBko2JiDyN42sdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvODNkNWRmMDctMGNjNC0z YjE2LWE1ZTctYThjYjlkMDE0OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAO+mghZjFE5ed8TWttUE8tPQm3HYFlOtGFE493M+832yO8um hbsOGm2p+++X2mtM8tXRd0JdOZuHbMo+9EEE/YpE3iDTFBnOrH4HOPvGVrFkZsw0 QZZirgQkbRUFjF27aZmbZEn9os8rMffwbic3X832TIGxgU9BJqhzPUviaQPzBtSq VMMAmehl8YyX2SOm8qcvgubwbZZ4s5Td5lQqUi7WT+3aIl6Seuq5MLBb/hAaORI9 bHFd828AbUwPEG9RUUAicU95XfJoSAV3CzIMLHgmwGu4hq6++ojKsBrmYHV/0muJ WvbAb6IGW3KadgQxXU/vX62pp5DrUHpKDPjWPGs= -----END CERTIFICATE-----Generated at Sun Nov 1 14:47:14 2026 by rpki-client