$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: QR0eOcLadCYTqK6I5t7BJZr6bPLDX+8SYRqucLUD9rw= Subject key identifier: 50:BE:6D:6D:AE:1C:2E:21:8B:52:1D:4B:1B:36:60:DF:89:CF:39:FB Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584D8EF583D9B47EB25D3BEE79C0 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:83:d9:b4:7e:b2:5d:3b:ee:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=988177f3-91e5-45bf-ba84-03c2e842d5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:3f:41:4c:64:05:6d:4f:ed:ac:42:1d:10: 4f:f2:bd:5c:24:3e:d1:32:f1:bf:6c:82:85:63:cc: d4:b5:09:1b:a7:f9:b0:33:81:d5:e1:98:e8:d8:f0: 47:28:3e:3a:c3:7a:f3:b9:80:f9:98:31:24:cf:97: e8:37:3a:bd:5c:a4:ea:af:48:6e:4d:1b:1f:b1:10: 73:cc:b7:9d:72:a1:29:6c:b3:59:6d:e5:fc:08:55: da:d4:32:1f:df:25:6b:94:5d:cf:e6:2f:ba:0a:52: d3:dd:13:e0:fa:a3:fb:fc:a0:2c:fd:bb:d9:f6:75: 94:40:82:b7:91:62:fe:3a:6d:1c:4c:f3:1b:90:96: 89:13:7b:a4:72:00:55:26:bf:00:e2:a1:46:96:56: af:d9:6d:3a:50:9f:de:27:76:64:aa:0e:bb:67:3b: 9e:90:de:c7:08:63:d6:71:fe:ba:1f:13:7a:b8:eb: 1b:57:8c:fc:7a:c2:3b:66:94:db:fb:6d:c7:4f:b3: 61:21:c8:a0:ad:54:2d:6b:4c:79:ce:67:65:25:fa: 1f:e5:18:21:a8:94:ba:1a:2d:e9:f1:27:cf:f7:24: 1e:69:3c:a3:71:11:f5:09:85:6e:0f:2f:40:d9:66: 48:d2:83:0a:32:50:fb:98:b2:5c:50:5e:b8:2b:be: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BE:6D:6D:AE:1C:2E:21:8B:52:1D:4B:1B:36:60:DF:89:CF:39:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:41:88:53:c4:fc:c0:5d:6c:02:83:ad:2b:2d:6a:78:f7:f2: 04:3a:dc:68:0c:9b:ec:04:8f:62:93:e1:47:1c:4c:66:a5:16: 5a:85:e1:d2:0a:a4:fd:0b:29:01:e9:bc:34:0d:b5:da:d7:88: 49:94:45:84:eb:6f:76:bb:0f:2f:03:56:77:b8:f0:5b:d0:0c: 29:93:10:f4:70:b4:2b:8e:32:1a:7f:85:b8:a4:db:2e:4d:53: 1b:2d:f2:cb:3b:f1:66:c5:98:98:3e:78:45:b4:75:f3:70:26: 25:cc:b5:b3:8b:84:06:86:52:e9:0c:49:fc:3c:6d:18:0e:bd: 4e:46:28:b2:41:05:fc:cd:6d:1c:6f:62:72:9e:10:0b:d0:fb: c9:8d:83:7a:3e:a5:d5:ac:4e:03:81:6d:87:cd:56:75:1d:43: f9:85:8c:8c:c5:fc:80:b1:ae:e8:67:d0:5b:33:29:9d:f1:c7: 8e:65:5e:60:e0:9e:13:3f:55:84:43:f4:1a:9f:28:a5:9f:a1: 83:5b:a0:b4:ac:ff:4b:63:12:00:58:c5:a4:82:05:36:11:5f: 45:b7:74:aa:7b:2d:c0:bf:5c:58:de:c4:38:06:03:29:eb:2f: 08:8a:df:5d:d9:4b:37:0b:44:73:05:4a:8b:d9:93:5c:4a:be: 5b:f1:a1:5c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2O9YPZtH6yXTvuecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTg4MTc3ZjMtOTFlNS00NWJmLWJhODQtMDNjMmU4NDJkNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfU/QUxkBW1P7axCHRBP8r1cJD7RMvG/bIKF Y8zUtQkbp/mwM4HV4Zjo2PBHKD46w3rzuYD5mDEkz5foNzq9XKTqr0huTRsfsRBz zLedcqEpbLNZbeX8CFXa1DIf3yVrlF3P5i+6ClLT3RPg+qP7/KAs/bvZ9nWUQIK3 kWL+Om0cTPMbkJaJE3ukcgBVJr8A4qFGllav2W06UJ/eJ3Zkqg67ZzuekN7HCGPW cf66HxN6uOsbV4z8esI7ZpTb+23HT7NhIcigrVQta0x5zmdlJfof5RghqJS6Gi3p 8SfP9yQeaTyjcRH1CYVuDy9A2WZI0oMKMlD7mLJcUF64K74+ywIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFC+bW2uHC4hi1IdSxs2YN+Jzzn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAtBiFPE/MBdbAKDrSstanj38gQ63GgMm+wEj2KT4UccTGal FlqF4dIKpP0LKQHpvDQNtdrXiEmURYTrb3a7Dy8DVne48FvQDCmTEPRwtCuOMhp/ hbik2y5NUxst8ss78WbFmJg+eEW0dfNwJiXMtbOLhAaGUukMSfw8bRgOvU5GKLJB BfzNbRxvYnKeEAvQ+8mNg3o+pdWsTgOBbYfNVnUdQ/mFjIzF/ICxruhn0FszKZ3x x45lXmDgnhM/VYRD9BqfKKWfoYNboLSs/0tjEgBYxaSCBTYRX0W3dKp7LcC/XFje xDgGAynrLwiK313ZSzcLRHMFSovZk1xKvlvxoVw= -----END CERTIFICATE-----Generated at Mon Apr 20 03:28:17 2026 by rpki-client