$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/40ac8436-f459-391b-9d5e-dd3da1ce48cc.roa File: 40ac8436-f459-391b-9d5e-dd3da1ce48cc.roa (raw, json) Hash identifier: xA4MBZqUwqlIYznJqoH2ZtzpQDln1WuacpKhLoLDb30= Subject key identifier: 54:0A:07:B9:70:80:B8:D2:EC:B6:C0:18:7D:70:3D:58:04:19:C5:50 Certificate issuer: /CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Certificate serial: 010D0C9F4328584F71ED9463B33D19F2512BB780 Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/40ac8436-f459-391b-9d5e-dd3da1ce48cc.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 14907 IP address blocks: 198.35.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:94:63:b3:3d:19:f2:51:2b:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=8c487f2e-b187-4e6b-bec1-5ab6598d2133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:90:99:55:b7:bc:29:f7:00:3e:a4:0f:ef: 72:9b:8b:88:22:90:a8:c9:2f:e3:76:d9:e5:f7:ac: 43:cd:ae:31:2f:4c:4e:ae:ba:55:32:c8:15:c5:65: be:c7:d6:86:67:60:3b:b4:bf:ba:ee:d0:05:90:18: a6:be:59:e6:cd:a1:2e:16:65:c6:48:fb:71:e4:a6: 95:b4:79:86:67:42:e9:0a:c1:a1:36:ea:1c:62:1a: 72:8c:39:85:20:dc:92:c3:cf:ca:83:8f:98:ae:60: 64:86:e4:86:54:d4:e0:f3:a2:5d:39:f4:fd:bf:44: 80:07:57:ea:ff:fd:60:35:cf:75:9c:29:1b:6d:11: b9:af:5f:6d:4d:16:5f:07:62:e2:af:0d:f7:6e:78: e2:27:12:30:24:62:b6:ad:3d:7f:0b:a1:19:e9:fe: 50:7e:25:f4:ef:0a:7a:12:4a:ed:d6:7f:19:1c:82: 33:f6:22:96:d2:08:0a:a2:44:72:37:82:30:72:5d: e5:70:6b:a3:35:af:93:61:51:5a:2e:76:27:d0:ff: 2f:c2:bb:d0:5a:57:1d:8e:36:3c:32:e2:19:af:b9: 3c:3b:40:7d:b5:d5:4b:d2:ec:e5:0f:8f:9c:10:c4: 4f:4f:75:2e:47:bf:35:b6:ea:74:c1:4c:e4:1f:d8: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0A:07:B9:70:80:B8:D2:EC:B6:C0:18:7D:70:3D:58:04:19:C5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/40ac8436-f459-391b-9d5e-dd3da1ce48cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl X509v3 Authority Key Identifier: keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer sbgp-ipAddrBlock: critical IPv4: 198.35.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9d:8f:ea:81:d2:0c:3d:0f:f2:8a:ed:65:b0:77:a7:11:d5: a9:3f:e5:47:44:77:40:df:d7:c4:0d:95:1c:47:6a:ec:5d:8b: 64:e6:84:fd:b3:26:77:f1:08:9f:28:6f:9e:0a:4f:b9:c0:fa: 6a:97:06:e2:b0:42:f1:47:66:7a:2d:f9:37:1e:2b:ad:da:46: 13:2f:d1:ea:24:7f:94:d5:06:36:96:02:31:a1:ee:82:0e:9f: 10:8c:a1:ff:61:84:02:5c:33:a3:24:3a:a5:c4:da:83:e5:24: 61:98:d2:78:68:56:14:0e:9c:03:51:a3:b9:68:62:e7:6a:08: 19:ec:74:54:c8:fa:49:e4:a7:97:f2:bc:67:e7:10:26:fd:81: 00:29:bf:c0:80:1e:6f:ec:18:ef:b0:d4:f0:f6:38:5a:5d:90: 8b:83:6d:64:06:96:02:82:7f:f0:04:21:32:9f:ba:3e:6d:d6: 65:bd:c6:2f:8c:37:36:78:76:de:4b:2d:ef:de:c8:8e:96:b3: 06:a4:16:7e:bd:96:6e:1c:2f:57:17:12:51:7c:4a:bf:5d:9f: f1:06:b1:46:f5:9c:cc:af:f7:2b:a5:50:f5:00:5e:70:d1:ae: 86:87:27:53:8a:c7:20:90:2f:11:bf:50:2c:ad:b3:0c:b3:d9: c6:a9:25:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZRjsz0Z8lErt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBhZTFjZmYtMzA5Yy00MGQxLTk3NjAtM2E4OWE0ODFl OTk4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OGM0ODdmMmUtYjE4Ny00ZTZiLWJlYzEtNWFiNjU5OGQyMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMyQmVW3vCn3AD6kD+9ym4uIIpCoyS/jdtnl 96xDza4xL0xOrrpVMsgVxWW+x9aGZ2A7tL+67tAFkBimvlnmzaEuFmXGSPtx5KaV tHmGZ0LpCsGhNuocYhpyjDmFINySw8/Kg4+YrmBkhuSGVNTg86JdOfT9v0SAB1fq //1gNc91nCkbbRG5r19tTRZfB2Lirw33bnjiJxIwJGK2rT1/C6EZ6f5QfiX07wp6 Ekrt1n8ZHIIz9iKW0ggKokRyN4Iwcl3lcGujNa+TYVFaLnYn0P8vwrvQWlcdjjY8 MuIZr7k8O0B9tdVL0uzlD4+cEMRPT3UuR781tup0wUzkH9jb3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQKB7lwgLjS7LbAGH1wPVgEGcVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFl MWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5YTQ4MWU5OTgvNDBhYzg0MzYtZjQ1OS0z OTFiLTlkNWUtZGQzZGExY2U0OGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzBhZTFjZmYtMzA5Yy00MGQxLTk3 NjAtM2E4OWE0ODFlOTk4L2MwYWUxY2ZmLTMwOWMtNDBkMS05NzYwLTNhODlhNDgx ZTk5OC5jcmwwHwYDVR0jBBgwFoAUPVzJ0t/g8RJOCVm/vnWnyTm7EwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFlMWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5 YTQ4MWU5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiMbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOdj+qB0gw9D/KK7WWwd6cR1ak/5UdEd0Df18QNlRxHauxdi2TmhP2z JnfxCJ8ob54KT7nA+mqXBuKwQvFHZnot+TceK63aRhMv0eokf5TVBjaWAjGh7oIO nxCMof9hhAJcM6MkOqXE2oPlJGGY0nhoVhQOnANRo7loYudqCBnsdFTI+knkp5fy vGfnECb9gQApv8CAHm/sGO+w1PD2OFpdkIuDbWQGlgKCf/AEITKfuj5t1mW9xi+M NzZ4dt5LLe/eyI6WswakFn69lm4cL1cXElF8Sr9dn/EGsUb1nMyv9yulUPUAXnDR roaHJ1OKxyCQLxG/UCytswyz2capJXk= -----END CERTIFICATE-----Generated at Sun Oct 11 10:31:10 2026 by rpki-client