$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/40f84e56-bfb9-39e5-bfe5-310752c5dca5.roa File: 40f84e56-bfb9-39e5-bfe5-310752c5dca5.roa (raw, json) Hash identifier: FN9N9usleL8v0vpq4gnrexxD5ffkZwoyLpxQRa0MZhM= Subject key identifier: B0:37:F7:BE:E1:9A:FC:14:DA:5B:F3:66:DA:59:D4:D5:78:AF:77:19 Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552 Certificate serial: 010D0C9F4328584F7E7DD27BF2F1923BF9F99680 Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/40f84e56-bfb9-39e5-bfe5-310752c5dca5.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 26806 IP address blocks: 198.169.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d2:7b:f2:f1:92:3b:f9:f9:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=f4ecf839-7e55-4611-8f3d-526abb8976a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6b:b5:b8:fc:99:58:8e:cd:40:dc:2f:0d:f3: a9:03:b5:cb:30:d4:a4:e8:87:5c:c7:a0:e4:1a:5f: b6:bf:bd:b7:e5:ff:71:ee:ff:39:c8:59:f3:fa:85: 37:f1:9e:c3:cd:49:99:3d:e4:dd:42:d9:d3:cd:76: ce:99:44:0b:2b:08:fa:07:3a:11:58:dc:05:a2:74: 15:d3:71:02:39:b2:99:8a:a5:a1:41:db:93:d4:e9: 7e:0f:0c:ca:b9:6b:76:4c:5f:fb:94:55:64:d8:ac: e9:f1:6f:a4:ec:a7:a7:7e:e1:64:ad:80:e3:46:f8: 4f:b1:fe:bd:e5:f9:62:c2:c9:50:24:2e:4b:e3:44: b6:5d:3c:de:d8:31:eb:5e:7f:f7:85:a5:c3:f2:84: d4:c9:0a:4f:82:ef:42:fa:be:43:99:63:40:d7:44: 63:40:c0:35:3e:99:a3:64:a9:a8:16:d1:35:e4:ee: fd:4e:ad:e3:d9:56:4b:3e:b8:2d:f0:fe:83:ab:73: 90:dd:5f:a4:60:98:a8:35:5e:df:fb:5c:fe:61:b1: 2d:b2:00:e7:92:eb:a7:b8:bb:22:c5:60:c0:27:d6: 44:74:d1:e2:f2:31:ac:8c:19:a0:f8:72:ac:50:ac: f3:6d:7e:75:84:2e:5b:86:1e:fc:86:72:c1:69:0c: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:F7:BE:E1:9A:FC:14:DA:5B:F3:66:DA:59:D4:D5:78:AF:77:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/40f84e56-bfb9-39e5-bfe5-310752c5dca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl X509v3 Authority Key Identifier: keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer sbgp-ipAddrBlock: critical IPv4: 198.169.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8c:3a:b5:22:27:84:0b:91:2f:4b:be:18:1d:25:08:52:f2: 89:fb:a2:85:7c:7f:8e:c2:46:6f:52:80:27:a9:58:be:07:de: c1:10:57:ac:28:ad:ce:b7:7a:fb:1b:dc:17:88:fd:07:97:42: 41:6e:fb:04:b5:6e:51:9b:ac:3f:31:66:c1:5d:a5:85:19:f7: 87:5c:78:27:94:47:6f:48:cc:9c:26:40:13:27:1c:b2:80:08: f2:83:67:d3:e2:56:fa:0c:f8:95:d3:0a:5f:ed:a6:0c:2c:20: 08:10:7c:33:d2:ca:c7:03:fc:d4:18:d3:d6:de:0d:79:3a:03: 25:aa:f2:14:07:ce:70:d8:c5:79:e4:40:fc:1d:80:74:94:ba: 35:03:c3:bf:60:45:10:ee:6e:71:04:6f:91:63:e1:22:bf:e4: d8:0e:aa:8d:48:74:97:a6:a2:57:fb:8a:7c:9a:d5:91:ed:08: 25:c9:75:67:30:4e:9e:73:87:b3:73:39:b3:f0:e0:c6:c3:2c: 9b:c2:ec:2e:4b:f1:e1:17:14:64:c6:2a:26:9c:e1:03:91:f0: 02:df:c7:05:8f:d2:c9:2a:37:09:3c:03:f8:f6:ab:df:3f:7f: c4:e6:fe:9d:12:fc:cf:55:b0:c1:9c:9d:c7:6b:b3:96:e3:4d: a7:a0:07:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdJ78vGSO/n5loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl NTUyMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjRlY2Y4MzktN2U1NS00NjExLThmM2QtNTI2YWJiODk3NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWu1uPyZWI7NQNwvDfOpA7XLMNSk6Idcx6Dk Gl+2v7235f9x7v85yFnz+oU38Z7DzUmZPeTdQtnTzXbOmUQLKwj6BzoRWNwFonQV 03ECObKZiqWhQduT1Ol+DwzKuWt2TF/7lFVk2Kzp8W+k7KenfuFkrYDjRvhPsf69 5fliwslQJC5L40S2XTze2DHrXn/3haXD8oTUyQpPgu9C+r5DmWNA10RjQMA1Ppmj ZKmoFtE15O79Tq3j2VZLPrgt8P6Dq3OQ3V+kYJioNV7f+1z+YbEtsgDnkuunuLsi xWDAJ9ZEdNHi8jGsjBmg+HKsUKzzbX51hC5bhh78hnLBaQx9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA3977hmvwU2lvzZtpZ1NV4r3cZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0 NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvNDBmODRlNTYtYmZiOS0z OWU1LWJmZTUtMzEwNzUyYzVkY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0 MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh NTk5Y2U1NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWMOrUiJ4QLkS9LvhgdJQhS8on7ooV8f47CRm9SgCepWL4H3sEQV6wo rc63evsb3BeI/QeXQkFu+wS1blGbrD8xZsFdpYUZ94dceCeUR29IzJwmQBMnHLKA CPKDZ9PiVvoM+JXTCl/tpgwsIAgQfDPSyscD/NQY09beDXk6AyWq8hQHznDYxXnk QPwdgHSUujUDw79gRRDubnEEb5Fj4SK/5NgOqo1IdJemolf7inya1ZHtCCXJdWcw Tp5zh7NzObPw4MbDLJvC7C5L8eEXFGTGKiac4QOR8ALfxwWP0skqNwk8A/j2q98/ f8Tm/p0S/M9VsMGcncdrs5bjTaegBwY= -----END CERTIFICATE-----Generated at Mon Nov 2 07:01:01 2026 by rpki-client