$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989/40f7618c-7cf9-3d4e-b97c-678e23b1cb41.roa File: 40f7618c-7cf9-3d4e-b97c-678e23b1cb41.roa (raw, json) Hash identifier: dcPLCthAgGZleukAdLn1G6moMFnIZQnYDYOHxFaXNEQ= Subject key identifier: C6:ED:E9:89:11:A9:3E:31:76:09:31:81:FD:10:D6:7E:6E:68:79:C8 Certificate issuer: /CN=ff9f6835-e352-4619-a6a4-bb6e0da30989 Certificate serial: 010D0C9F4328584F761D7D02FABB049FE86A3C00 Authority key identifier: 37:02:5A:BA:F3:42:27:79:88:0C:2C:F1:26:17:54:23:96:FE:02:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989/40f7618c-7cf9-3d4e-b97c-678e23b1cb41.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 11453 IP address blocks: 192.139.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989/ff9f6835-e352-4619-a6a4-bb6e0da30989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989/ff9f6835-e352-4619-a6a4-bb6e0da30989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7d:02:fa:bb:04:9f:e8:6a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff9f6835-e352-4619-a6a4-bb6e0da30989 Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=f352f2d9-47f9-460f-b76a-0c54b31622af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:44:8e:06:e0:21:45:e1:58:f3:99:58:03:e2: 5d:5b:e6:55:3f:a5:4f:34:05:a7:07:9b:36:e9:2c: 09:7a:47:0f:df:0d:1a:7e:f9:d9:07:22:aa:f3:8e: ec:b1:63:60:d8:05:a9:88:b2:e5:12:bd:cf:a1:4f: 2c:5f:2d:83:36:09:66:d6:8d:68:7f:c4:7e:6d:81: 13:7e:21:a9:f1:e4:6a:55:13:83:43:ba:d9:55:cd: 03:7b:28:8b:ed:90:1a:12:21:63:1c:28:8f:90:9d: 6b:5a:c7:d4:ea:21:67:49:f9:ae:25:7e:06:19:16: 0c:44:d4:37:07:ee:98:37:63:37:b2:9f:ff:a6:b3: 90:86:35:10:10:b2:38:20:c4:cb:95:19:ae:cd:f9: cc:8d:7d:b3:cc:83:23:00:6a:63:df:20:19:41:a0: 64:10:de:2b:7f:93:3c:25:f0:c1:22:45:f2:60:da: e4:e8:7f:fb:87:9e:c9:9a:cf:8c:ed:35:76:cf:6c: 36:b6:10:e9:f2:e5:62:ec:78:73:a8:45:3d:82:7a: f3:dc:25:d5:33:54:fa:54:7b:67:db:88:fe:a6:78: bc:34:42:6b:55:1f:bc:b8:04:bc:de:9d:e0:05:e6: 7c:35:ff:0b:5b:69:81:9f:83:38:ac:4f:53:46:7f: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:ED:E9:89:11:A9:3E:31:76:09:31:81:FD:10:D6:7E:6E:68:79:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989/40f7618c-7cf9-3d4e-b97c-678e23b1cb41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989/ff9f6835-e352-4619-a6a4-bb6e0da30989.crl X509v3 Authority Key Identifier: keyid:37:02:5A:BA:F3:42:27:79:88:0C:2C:F1:26:17:54:23:96:FE:02:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff9f6835-e352-4619-a6a4-bb6e0da30989.cer sbgp-ipAddrBlock: critical IPv4: 192.139.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:29:17:76:1e:63:5f:1a:b3:ac:7e:0f:89:11:24:ca:a7:1b: 5e:fa:af:ea:9e:86:53:12:0c:57:ea:38:5d:f7:95:77:b4:74: 43:9b:02:5d:2f:24:54:38:f6:45:b0:5c:10:ee:3e:f7:0f:a5: e7:16:7a:a2:a2:ff:54:f1:13:2b:cb:9b:51:9a:51:bf:7d:c5: f4:a9:e7:71:eb:31:18:50:80:eb:dc:f0:fd:27:f0:c8:4d:04: 40:02:0d:68:35:d9:ff:39:a3:df:a4:f3:eb:38:b1:da:8e:3f: c8:fe:60:04:1e:e6:68:31:77:11:c4:a5:3c:f7:52:44:eb:5c: 8a:43:93:09:a9:ae:6f:b1:dd:4b:ba:e1:c6:e4:3a:cf:26:55: 36:bf:0a:f8:80:23:0e:f3:83:9c:6f:22:6f:ce:ef:88:8f:0c: 82:60:86:b2:8a:6f:17:4a:25:e9:f4:d8:8d:90:b4:89:da:9e: b4:9f:f1:d7:d0:62:f4:ec:1e:4e:b5:5e:bf:47:43:1e:64:b6: 6d:48:54:29:5f:1a:5f:26:89:f7:b4:59:a9:0d:bc:32:e9:28: 48:58:93:9f:a9:de:4c:24:7d:37:74:6d:ee:37:86:cd:2c:ff: e7:15:e9:93:d3:aa:29:45:11:fa:53:19:89:7d:39:94:eb:77: eb:12:fb:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE92HX0C+rsEn+hqPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY5ZjY4MzUtZTM1Mi00NjE5LWE2YTQtYmI2ZTBkYTMw OTg5MB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk ZjM1MmYyZDktNDdmOS00NjBmLWI3NmEtMGM1NGIzMTYyMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiESOBuAhReFY85lYA+JdW+ZVP6VPNAWnB5s2 6SwJekcP3w0afvnZByKq847ssWNg2AWpiLLlEr3PoU8sXy2DNglm1o1of8R+bYET fiGp8eRqVRODQ7rZVc0DeyiL7ZAaEiFjHCiPkJ1rWsfU6iFnSfmuJX4GGRYMRNQ3 B+6YN2M3sp//prOQhjUQELI4IMTLlRmuzfnMjX2zzIMjAGpj3yAZQaBkEN4rf5M8 JfDBIkXyYNrk6H/7h57Jms+M7TV2z2w2thDp8uVi7HhzqEU9gnrz3CXVM1T6VHtn 24j+pni8NEJrVR+8uAS83p3gBeZ8Nf8LW2mBn4M4rE9TRn8tewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbt6YkRqT4xdgkxgf0Q1n5uaHnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mZjlm NjgzNS1lMzUyLTQ2MTktYTZhNC1iYjZlMGRhMzA5ODkvNDBmNzYxOGMtN2NmOS0z ZDRlLWI5N2MtNjc4ZTIzYjFjYjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZmY5ZjY4MzUtZTM1Mi00NjE5LWE2 YTQtYmI2ZTBkYTMwOTg5L2ZmOWY2ODM1LWUzNTItNDYxOS1hNmE0LWJiNmUwZGEz MDk4OS5jcmwwHwYDVR0jBBgwFoAUNwJauvNCJ3mIDCzxJhdUI5b+AjkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9mZjlmNjgzNS1lMzUyLTQ2MTktYTZhNC1iYjZl MGRhMzA5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACspF3YeY18as6x+D4kRJMqnG176r+qehlMSDFfqOF33lXe0dEObAl0v JFQ49kWwXBDuPvcPpecWeqKi/1TxEyvLm1GaUb99xfSp53HrMRhQgOvc8P0n8MhN BEACDWg12f85o9+k8+s4sdqOP8j+YAQe5mgxdxHEpTz3UkTrXIpDkwmprm+x3Uu6 4cbkOs8mVTa/CviAIw7zg5xvIm/O74iPDIJghrKKbxdKJen02I2QtInanrSf8dfQ YvTsHk61Xr9HQx5ktm1IVClfGl8mife0WakNvDLpKEhYk5+p3kwkfTd0be43hs0s /+cV6ZPTqilFEfpTGYl9OZTrd+sS+1s= -----END CERTIFICATE-----Generated at Mon Oct 12 04:22:58 2026 by rpki-client