$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json) Hash identifier: lLtv3YjTn9AiQYyRX19zujqVw3UPdh1ksVjbWUjkEQk= Subject key identifier: 87:48:F1:0A:1A:CD:79:73:91:DA:F9:0C:EF:90:89:3D:F6:26:5C:CD Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584F3E47D561B23EEF3B7044EB80 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 15177 IP address blocks: 199.102.60.0/22 maxlen: 24 199.191.120.0/21 maxlen: 24 208.74.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d5:61:b2:3e:ef:3b:70:44:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=1f29b1fa-d063-4737-9f72-089a07d257ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:2e:c9:b4:42:8e:e1:33:cf:8d:55:6f:ee: ce:b9:75:b8:c4:76:77:52:6f:8c:cf:d6:6f:39:13: 2d:77:18:76:42:54:d8:be:dd:9e:64:bd:81:fe:77: d4:f3:89:88:07:c4:80:22:8d:a2:42:52:22:8b:c2: 72:e1:f7:73:00:20:30:3e:0a:23:84:b5:ab:a2:e3: b0:c2:0f:9d:7b:74:de:3c:e3:3e:02:4e:dd:9d:a7: 2a:55:ca:f0:5b:4a:6b:9f:d7:d5:95:31:4e:6d:91: c5:6d:ac:32:93:f8:f4:2a:ff:3f:c4:d7:d6:39:45: e6:c0:ad:cd:f8:92:f9:9e:1a:80:34:17:20:5a:3a: 27:3f:eb:b6:7b:59:48:5d:5e:8d:4c:7b:87:be:42: 8e:fb:43:9e:37:23:6f:07:39:3c:30:24:07:ca:b8: 28:bb:53:73:71:69:f9:0e:f2:78:14:26:d3:f7:0c: 23:8a:f5:40:c9:91:3f:b2:ed:5d:ba:7e:30:6e:63: f1:fc:cb:1f:66:f8:ec:0f:0e:4a:5a:69:cc:93:17: 50:91:6a:3f:d9:91:36:67:8a:07:22:cf:54:1f:12: c4:22:cc:1f:af:20:19:b8:cd:f2:56:37:48:80:bd: 45:f8:f4:de:4a:f8:11:51:55:be:4b:f1:2c:79:4e: 6d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:F1:0A:1A:CD:79:73:91:DA:F9:0C:EF:90:89:3D:F6:26:5C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: 199.102.60.0/22 199.191.120.0/21 208.74.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c1:9d:d7:18:ad:df:4e:f7:d0:61:a8:56:6b:56:1e:81:16: 3e:d3:96:3c:28:02:0d:24:11:58:d4:aa:8f:3b:7c:1a:bb:fe: 5c:60:e5:7a:a3:03:80:12:0a:41:31:65:09:68:90:58:8d:02: 5d:aa:6c:99:27:99:f2:a0:f7:f7:cc:c5:a6:12:53:3c:c7:b5: 9d:3d:49:fc:c8:4e:50:7b:c4:88:c1:56:8a:88:01:71:bf:4b: 4c:15:57:0d:6d:31:4f:24:f8:10:aa:d4:c9:bb:80:07:ac:92: b6:3b:48:32:49:74:d1:be:31:9e:d8:4a:cd:b5:2f:44:3c:ea: f3:a5:a5:be:8a:c6:43:d5:64:d8:77:fb:cf:36:da:76:3e:12: 3e:69:74:7c:d7:13:5f:39:5f:de:90:d0:e0:0e:7f:a1:7d:82: fe:90:b4:66:7c:4c:1d:b4:b1:0c:05:89:8e:d8:a2:af:39:ed: 67:bc:54:db:fb:d7:c8:c2:fa:25:61:b2:a1:e1:b2:5c:f6:25: c4:f2:9c:8b:fa:93:7f:67:fd:1a:7f:a3:11:65:1f:65:23:a8: 9f:b2:0e:c2:1e:b9:58:c2:eb:6e:32:e1:2d:86:aa:80:76:35: ac:3d:f7:48:38:55:9a:e3:51:89:c0:8f:ec:ee:83:98:15:4e: e2:e2:41:08 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8+R9Vhsj7vO3BE64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MWYyOWIxZmEtZDA2My00NzM3LTlmNzItMDg5YTA3ZDI1N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijwuybRCjuEzz41Vb+7OuXW4xHZ3Um+Mz9Zv ORMtdxh2QlTYvt2eZL2B/nfU84mIB8SAIo2iQlIii8Jy4fdzACAwPgojhLWrouOw wg+de3TePOM+Ak7dnacqVcrwW0prn9fVlTFObZHFbawyk/j0Kv8/xNfWOUXmwK3N +JL5nhqANBcgWjonP+u2e1lIXV6NTHuHvkKO+0OeNyNvBzk8MCQHyrgou1NzcWn5 DvJ4FCbT9wwjivVAyZE/su1dun4wbmPx/MsfZvjsDw5KWmnMkxdQkWo/2ZE2Z4oH Is9UHxLEIswfryAZuM3yVjdIgL1F+PTeSvgRUVW+S/EseU5txQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIdI8QoazXlzkdr5DO+QiT32JlzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvMzI5Njc5NmMtYTgxMi0z ZmQ5LThiNzktYzYxN2Y4NTNiZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCx2Y8AwQD x794AwQD0EqYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACHBndcYrd9O99BhqFZrVh6BFj7TljwoAg0kEVjU qo87fBq7/lxg5XqjA4ASCkExZQlokFiNAl2qbJknmfKg9/fMxaYSUzzHtZ09SfzI TlB7xIjBVoqIAXG/S0wVVw1tMU8k+BCq1Mm7gAeskrY7SDJJdNG+MZ7YSs21L0Q8 6vOlpb6KxkPVZNh3+8822nY+Ej5pdHzXE185X96Q0OAOf6F9gv6QtGZ8TB20sQwF iY7Yoq857We8VNv718jC+iVhsqHhslz2JcTynIv6k39n/Rp/oxFlH2UjqJ+yDsIe uVjC624y4S2GqoB2Naw990g4VZrjUYnAj+zug5gVTuLiQQg= -----END CERTIFICATE-----Generated at Tue Oct 13 10:07:13 2026 by rpki-client