$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa File: b36d5e8f-bac8-378b-8482-3e6f208fa162.roa (raw, json) Hash identifier: JSJsHZmc2SXuvwS0UyICMZlxX4jrQgDBJd+RzbiSaWo= Subject key identifier: 49:A0:A9:B9:38:4C:69:DB:59:7F:3A:E0:CE:B4:F9:8A:A0:53:5B:26 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D44FA4BFE9D3A478232F45A00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 22065 IP address blocks: 40.143.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4b:fe:9d:3a:47:82:32:f4:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=0b635d73-b1b8-4c91-9265-4ad91fa89eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0e:8c:e5:52:e3:9f:20:20:e2:06:31:43:ec: 73:b5:da:d4:70:bd:a1:1c:5c:8d:30:c2:14:a5:41: e0:ab:50:35:57:19:15:0a:00:1a:f8:ce:37:e1:fb: d2:58:bf:8f:3e:5e:aa:6a:e0:f4:c9:24:b6:9f:be: 4f:0c:61:f4:33:1d:27:ab:cd:2f:a4:fc:76:be:1a: b1:8e:a5:25:38:ff:0b:6a:c4:46:61:8f:f5:a8:03: 5e:77:9b:f2:7d:71:78:8b:71:c4:07:a8:f3:ef:e7: f9:34:f2:71:a2:0a:0f:0e:f0:10:5a:e4:54:00:98: ae:32:d4:8e:89:65:f4:6e:e9:66:53:3f:88:f4:c9: 9b:05:10:9c:76:53:dd:83:d7:f2:90:eb:5a:c5:d0: cf:91:9e:98:33:d4:cb:c2:40:ce:55:69:d1:12:70: 4f:cf:4b:78:a1:01:61:05:df:b6:c5:cb:d7:b2:64: 5b:dd:8c:cd:52:54:84:61:b3:b2:97:2a:f9:92:50: fa:10:ba:b1:6a:66:ca:5c:51:8e:5e:44:d2:57:a0: 4b:82:eb:d1:c2:a5:c1:3a:63:7b:84:09:9b:f5:38: cc:f7:7f:39:40:5e:c5:69:a5:3e:7d:34:82:c5:c4: cd:06:df:3a:c0:d0:6b:46:5d:89:a2:bc:a5:18:67: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A0:A9:B9:38:4C:69:DB:59:7F:3A:E0:CE:B4:F9:8A:A0:53:5B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8f:e8:a0:13:06:37:22:6b:50:51:f9:bd:05:81:08:89:e4: 69:b4:05:20:b1:e4:14:4a:39:85:e3:51:4a:ad:a5:27:78:7a: 49:0e:55:5b:b1:f5:6f:98:d1:66:8d:45:a3:97:8a:ee:cd:9a: 71:c6:e1:d4:7e:c7:00:dc:9b:bd:cb:57:99:04:18:b2:6f:42: ac:47:67:c6:73:d3:52:5b:55:ac:64:9b:44:8a:df:3e:65:7e: 6e:ae:c8:a5:5c:f8:37:52:51:9a:ac:8a:0e:71:d3:27:d1:a4: 9e:af:cd:52:93:28:5e:9a:41:f3:31:db:fb:d0:62:0f:20:28: 68:28:af:63:b5:b0:48:0c:45:80:4c:5e:3d:d9:54:48:26:23: 46:9e:97:ec:ba:41:2d:fd:a9:20:4d:b3:4a:51:bb:0e:65:11: b6:0e:d4:65:8f:06:cd:4e:4b:7e:8c:37:e7:f3:7e:62:13:60: b5:6e:e2:df:e4:d7:62:0a:63:e4:e8:7b:70:40:6d:10:37:7e: e4:39:b4:74:3c:eb:66:00:1e:6a:5d:bf:f4:ef:31:d5:ed:8f: 88:28:f2:90:bb:a2:94:d3:0b:e0:50:b5:ff:be:55:3e:0e:b9: 6c:4b:37:6c:bb:98:fc:1c:a6:86:db:1f:06:36:b6:f7:58:5c: 35:24:cf:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kv+nTpHgjL0WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGI2MzVkNzMtYjFiOC00YzkxLTkyNjUtNGFkOTFmYTg5ZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw6M5VLjnyAg4gYxQ+xztdrUcL2hHFyNMMIU pUHgq1A1VxkVCgAa+M434fvSWL+PPl6qauD0ySS2n75PDGH0Mx0nq80vpPx2vhqx jqUlOP8LasRGYY/1qANed5vyfXF4i3HEB6jz7+f5NPJxogoPDvAQWuRUAJiuMtSO iWX0bulmUz+I9MmbBRCcdlPdg9fykOtaxdDPkZ6YM9TLwkDOVWnREnBPz0t4oQFh Bd+2xcvXsmRb3YzNUlSEYbOylyr5klD6ELqxambKXFGOXkTSV6BLguvRwqXBOmN7 hAmb9TjM9385QF7FaaU+fTSCxcTNBt86wNBrRl2JorylGGfAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmgqbk4TGnbWX864M60+YqgU1smMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYjM2ZDVlOGYtYmFjOC0z NzhiLTg0ODItM2U2ZjIwOGZhMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI8dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyP6KATBjcia1BR+b0FgQiJ5Gm0BSCx5BRKOYXjUUqtpSd4ekkOVVux 9W+Y0WaNRaOXiu7NmnHG4dR+xwDcm73LV5kEGLJvQqxHZ8Zz01JbVaxkm0SK3z5l fm6uyKVc+DdSUZqsig5x0yfRpJ6vzVKTKF6aQfMx2/vQYg8gKGgor2O1sEgMRYBM Xj3ZVEgmI0ael+y6QS39qSBNs0pRuw5lEbYO1GWPBs1OS36MN+fzfmITYLVu4t/k 12IKY+Toe3BAbRA3fuQ5tHQ862YAHmpdv/TvMdXtj4go8pC7opTTC+BQtf++VT4O uWxLN2y7mPwcpobbHwY2tvdYXDUkz0M= -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:30 2026 by rpki-client