$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: oG9DBeiKEVpgUMmcH5FVC9R+eB+Rcm/Jf5T3LGs6R8A= Subject key identifier: 1F:F1:B5:2F:08:E3:38:7F:56:08:99:6D:41:3F:3D:9B:44:98:B0:DC Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584F119D15E5340A7615F02AB300 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:15:e5:34:0a:76:15:f0:2a:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7da4bd35-4e7f-42ff-9009-87e5744f0c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:a4:bd:50:5a:da:e6:00:0e:32:30:10:b8: d3:96:21:59:e3:a8:79:28:29:f6:c1:4b:2e:4a:bf: 4d:8a:a5:40:69:d0:f7:2e:40:7b:66:a1:d7:1c:90: 66:55:c8:c2:82:cf:e1:d2:a3:5d:d3:a0:dd:58:7a: 8d:ee:11:11:9a:ba:3e:0f:8a:cd:b7:01:ce:ef:5d: 5b:5d:ee:28:0b:67:9a:3a:4a:3f:0a:e9:54:ef:e8: fe:d6:69:e0:a8:83:c1:cd:40:95:6c:f0:73:5a:22: cf:aa:ae:00:bf:ea:37:c9:07:2f:5a:85:3f:6e:cd: fe:5b:bb:24:b4:0a:66:41:a8:cb:70:f2:04:ad:73: 1a:67:19:29:72:7f:cf:e4:a0:9c:bf:de:26:8f:49: 7f:3b:17:5a:48:88:73:51:04:01:72:0a:71:46:12: 51:d8:9e:43:dc:8a:74:c8:d7:65:d8:17:37:8f:ea: 21:93:c5:7f:a2:fe:11:e8:1e:a9:02:2c:9b:43:61: fa:14:ba:02:b5:00:9e:ee:97:81:75:19:ee:8a:15: 7c:d4:ef:6e:99:f2:75:c1:b4:0c:b1:f4:1c:5f:00: ba:17:9a:85:b6:4e:d4:7c:af:8b:76:73:f5:9d:fc: f6:24:5c:dd:c6:5d:27:68:c4:67:46:de:57:e9:3c: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F1:B5:2F:08:E3:38:7F:56:08:99:6D:41:3F:3D:9B:44:98:B0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:d4:f2:c5:99:99:db:f7:13:3d:52:ae:f7:3e:cf:b2:12:c3: 9a:e8:ea:fc:1e:db:4a:eb:5c:1f:f7:b1:33:f0:5a:0a:33:4f: 4a:fc:8e:63:f4:6c:b4:20:f8:0f:72:3d:9b:ca:cf:df:30:82: be:56:8f:cc:6f:3e:26:b0:d1:9a:16:c9:43:2e:87:93:93:ef: 70:60:14:2e:2b:7e:24:31:93:be:7c:e3:d6:8f:2d:e5:67:2f: c3:07:f5:37:b5:1c:9e:f9:58:8f:0b:23:40:ff:7b:96:e6:43: 0e:36:5f:22:fb:84:83:36:44:93:c3:dc:3e:25:ee:a6:95:a0: 90:f7:04:8a:11:85:35:77:5a:97:c2:ca:a2:68:40:84:54:5e: 0d:4c:d4:53:40:60:75:57:40:f9:13:3d:ec:48:68:31:4d:ed: 52:22:a8:ed:02:15:15:e0:bd:6f:0e:e6:79:01:b3:0f:c2:56: 5f:3e:f4:7e:83:c4:e8:88:56:f2:7e:a0:5d:58:07:f7:3e:63: 07:64:f4:23:af:ce:54:f5:87:8e:c2:3a:e9:e3:bd:71:34:fb: aa:17:19:32:5b:e7:25:20:56:03:c1:92:8b:af:f4:f9:75:12: 16:5a:e0:c4:92:80:96:5b:89:53:a6:b5:d0:b9:f7:fe:3f:37: 50:e7:fd:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8RnRXlNAp2FfAqswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RhNGJkMzUtNGU3Zi00MmZmLTkwMDktODdlNTc0NGYwYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZykvVBa2uYADjIwELjTliFZ46h5KCn2wUsu Sr9NiqVAadD3LkB7ZqHXHJBmVcjCgs/h0qNd06DdWHqN7hERmro+D4rNtwHO711b Xe4oC2eaOko/CulU7+j+1mngqIPBzUCVbPBzWiLPqq4Av+o3yQcvWoU/bs3+W7sk tApmQajLcPIErXMaZxkpcn/P5KCcv94mj0l/OxdaSIhzUQQBcgpxRhJR2J5D3Ip0 yNdl2Bc3j+ohk8V/ov4R6B6pAiybQ2H6FLoCtQCe7peBdRnuihV81O9umfJ1wbQM sfQcXwC6F5qFtk7UfK+LdnP1nfz2JFzdxl0naMRnRt5X6TyPUQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB/xtS8I4zh/VgiZbUE/PZtEmLDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAOPU8sWZmdv3Ez1Srvc+z7ISw5ro6vwe20rrXB/3sTPwWgoz T0r8jmP0bLQg+A9yPZvKz98wgr5Wj8xvPiaw0ZoWyUMuh5OT73BgFC4rfiQxk758 49aPLeVnL8MH9Te1HJ75WI8LI0D/e5bmQw42XyL7hIM2RJPD3D4l7qaVoJD3BIoR hTV3WpfCyqJoQIRUXg1M1FNAYHVXQPkTPexIaDFN7VIiqO0CFRXgvW8O5nkBsw/C Vl8+9H6DxOiIVvJ+oF1YB/c+Ywdk9COvzlT1h47COunjvXE0+6oXGTJb5yUgVgPB kouv9Pl1EhZa4MSSgJZbiVOmtdC59/4/N1Dn/WM= -----END CERTIFICATE-----Generated at Sun Sep 13 14:47:47 2026 by rpki-client