$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa File: 40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa (raw, json) Hash identifier: 5ZkarV9rz0m40GgkksCeLtygk3jeOb8BJzvOxPvjSEY= Subject key identifier: D9:0B:DD:DA:F3:65:5C:DE:45:0B:B8:A5:3B:FA:FB:40:30:58:44:20 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D0D4268CF8953321E1DECB534 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 5738 IP address blocks: 216.114.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:68:cf:89:53:32:1e:1d:ec:b5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=3573f71f-3fdc-42ea-871c-26a0a1b69e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:1c:16:82:37:fc:61:80:ec:8b:26:92:f2: 62:2d:c0:02:a1:42:ff:d4:4f:2e:83:a9:0e:e4:56: 49:d6:4d:b0:c7:3f:51:5e:af:e0:bd:bf:89:50:17: a5:3a:92:f2:f2:b4:77:f5:8a:32:68:c1:7a:46:68: ad:a1:39:bd:5f:b4:24:be:18:47:8d:72:2f:b7:79: b4:e6:47:15:cb:6e:0c:21:f8:0a:df:40:3c:12:f8: f7:07:1b:99:16:0e:76:ff:3a:53:76:1d:e1:8e:cb: 49:fb:97:cc:ab:80:ac:e5:e0:ce:2b:f4:87:e6:fb: 5c:26:fd:60:7a:7c:2f:69:3f:9f:f4:3b:42:19:e1: 9e:96:03:61:a9:49:2b:bc:99:c7:09:91:e0:18:48: 5c:a5:c4:c3:4c:bb:d1:4a:68:69:06:0f:80:9b:e4: 18:fd:37:b5:94:aa:4c:08:74:d3:93:73:0e:7a:13: da:20:df:7c:a8:ff:05:cb:da:15:23:8b:01:46:d1: 36:6c:4b:b4:da:c9:75:54:07:e2:cf:e1:90:4f:1f: 19:20:cc:29:7b:54:d4:3f:6d:9f:80:f5:6f:10:92: 9a:e0:5c:59:d4:02:96:13:86:eb:b3:00:91:88:4e: 5a:c2:e2:56:ff:23:8d:ca:bd:de:92:10:4d:52:17: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0B:DD:DA:F3:65:5C:DE:45:0B:B8:A5:3B:FA:FB:40:30:58:44:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:40:9c:fa:25:29:49:b9:01:8a:d0:dc:aa:30:e7:f7:af:79: b3:a4:37:ca:77:b1:31:7b:2c:30:8d:1e:ce:d9:90:56:ad:2a: 5f:8b:40:a2:9b:9d:d0:c6:27:84:44:c5:31:00:db:6d:3c:5f: 0c:7d:c7:ea:ef:4c:ae:70:b1:92:28:92:66:5f:f2:c6:6f:c9: 02:49:b0:24:03:6f:d0:74:3f:86:ef:9f:bf:ad:31:9b:e9:6f: 0d:30:42:e7:ff:93:f5:a7:f3:6c:25:da:0b:d5:43:19:a9:d7: 42:79:9e:c0:f3:5f:3a:0c:f6:aa:45:9e:18:83:5a:09:e6:a6: 21:0e:24:d2:30:b7:bd:02:e2:32:0a:1e:f8:76:08:94:61:8c: 02:2e:bc:19:29:fe:b4:99:b8:c8:f2:09:0d:db:92:ea:34:b6: b3:a0:46:d5:32:7a:c6:0d:c4:32:f5:93:53:08:15:a8:cf:1d: b7:e1:df:50:65:9c:00:6d:f4:50:a4:d1:e4:b2:cc:9b:de:ec: 9a:fb:f9:23:80:49:85:97:75:84:df:03:16:66:11:36:1d:00: 7e:30:bd:54:ad:28:42:ab:95:ae:5f:6d:13:f6:76:70:41:80: 39:61:0b:66:05:a1:89:b0:8e:d0:23:6c:9a:cc:02:c6:cb:55: d0:05:b5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmjPiVMyHh3stTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzU3M2Y3MWYtM2ZkYy00MmVhLTg3MWMtMjZhMGExYjY5ZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg4cFoI3/GGA7IsmkvJiLcACoUL/1E8ug6kO 5FZJ1k2wxz9RXq/gvb+JUBelOpLy8rR39YoyaMF6RmitoTm9X7QkvhhHjXIvt3m0 5kcVy24MIfgK30A8Evj3BxuZFg52/zpTdh3hjstJ+5fMq4Cs5eDOK/SH5vtcJv1g enwvaT+f9DtCGeGelgNhqUkrvJnHCZHgGEhcpcTDTLvRSmhpBg+Am+QY/Te1lKpM CHTTk3MOehPaIN98qP8Fy9oVI4sBRtE2bEu02sl1VAfiz+GQTx8ZIMwpe1TUP22f gPVvEJKa4FxZ1AKWE4brswCRiE5awuJW/yONyr3ekhBNUhfzdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkL3drzZVzeRQu4pTv6+0AwWEQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDBmM2NiZWUtOTdlYS0z Y2ZmLTlhYTEtOWIzYzFlM2NjM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2HKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExAnPolKUm5AYrQ3Kow5/evebOkN8p3sTF7LDCNHs7ZkFatKl+LQKKb ndDGJ4RExTEA2208Xwx9x+rvTK5wsZIokmZf8sZvyQJJsCQDb9B0P4bvn7+tMZvp bw0wQuf/k/Wn82wl2gvVQxmp10J5nsDzXzoM9qpFnhiDWgnmpiEOJNIwt70C4jIK Hvh2CJRhjAIuvBkp/rSZuMjyCQ3bkuo0trOgRtUyesYNxDL1k1MIFajPHbfh31Bl nABt9FCk0eSyzJve7Jr7+SOASYWXdYTfAxZmETYdAH4wvVStKEKrla5fbRP2dnBB gDlhC2YFoYmwjtAjbJrMAsbLVdAFtZA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:58:19 2026 by rpki-client