$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa File: 00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa (raw, json) Hash identifier: 3jSg25lScnQRNaaDVgF7Y7VeZgMqid/h2HXzsUp6VFg= Subject key identifier: CC:9B:9A:34:30:09:62:2A:02:76:2A:18:FD:3D:02:13:E7:A1:15:DB Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E9A7FD3BBA5F269FBF1284A40 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 11290 IP address blocks: 45.42.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d3:bb:a5:f2:69:fb:f1:28:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=cee088d4-7ca2-48eb-a723-705a58b0f500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2e:68:f1:fc:36:a7:cb:c7:39:2d:b5:be:20: 89:a1:e6:1d:9b:ed:3f:2c:1a:4b:66:a1:b0:9b:60: 3e:de:12:b6:b4:fc:72:28:0e:7b:17:aa:b3:65:eb: 79:ea:94:cf:56:50:f7:6d:68:ee:7b:ed:26:28:05: 88:7b:09:5f:15:e6:0f:74:bc:0b:cf:86:4b:f0:57: 9e:b5:d3:e3:a4:7d:24:fd:d5:c7:6d:d8:2d:21:03: 21:46:d8:1c:a7:c0:9b:9e:6a:bb:74:4c:d3:72:af: f3:2a:1f:25:ec:40:9f:6d:53:c0:b8:17:f6:cb:ee: a3:31:e4:ed:bd:5d:6a:33:c2:d6:8c:29:69:ae:66: 8a:ae:1f:e3:24:75:f6:83:87:e4:00:20:84:e5:1c: 8b:73:09:3b:37:2c:2b:e0:a0:5b:0b:ff:57:ad:21: 50:4d:6a:88:cf:1a:bc:3c:84:7b:65:4c:c5:4e:bb: 8f:01:68:d2:9b:de:f1:dd:7b:7e:c7:ad:b7:f0:42: 02:04:19:d4:b4:d3:62:a6:7b:c6:dd:97:7d:37:28: 31:19:30:c8:f3:58:26:0e:07:e5:a2:23:af:b7:80: 32:f4:70:06:3d:20:9d:7b:6d:4d:16:f4:8c:bf:4a: c4:7f:89:59:28:ab:f8:36:28:4d:b8:29:7c:cb:ff: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9B:9A:34:30:09:62:2A:02:76:2A:18:FD:3D:02:13:E7:A1:15:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5e:26:d1:bc:65:31:65:d4:5b:02:9a:ae:44:53:5c:d4:1b: 42:3f:76:bb:8b:37:4e:3a:cd:c4:c6:aa:fa:d3:3c:df:fa:0f: 1c:c7:4b:63:25:80:27:8d:b5:92:ba:9c:f4:06:29:ac:e0:2c: 18:9e:61:06:78:36:7e:7b:32:dd:32:9b:0a:16:2c:10:b0:85: 94:5f:0a:7d:69:d8:92:c4:68:47:dd:b8:07:3f:bb:b7:ee:70: 6a:16:fd:25:36:4e:3d:cf:c7:4b:e3:ea:c4:2c:4d:16:19:20: d6:da:41:18:22:a2:ba:ea:96:57:f6:4c:a7:02:8e:f2:5e:5c: 63:76:07:3a:29:0d:ee:c3:68:df:fd:4b:72:88:91:be:c5:64: 8f:9f:cb:c8:a4:8e:ee:38:f7:0b:36:6e:56:47:b7:85:9d:1b: ee:da:24:2f:ab:5c:77:15:1a:b4:8a:ef:fe:85:bd:54:5e:8f: 73:25:17:4e:fe:71:56:85:29:0d:0c:98:72:0b:fa:cc:1c:61: 31:d4:05:98:87:f3:f7:ca:6b:46:47:54:1d:d8:44:c4:2c:2d: 27:73:cc:17:75:5f:57:a9:ac:1f:d1:09:45:ae:d8:86:65:b4: b4:3d:80:13:32:1b:e0:9f:74:dd:d5:2f:64:09:65:93:bb:4c: fb:9d:e6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9O7pfJp+/EoSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk Y2VlMDg4ZDQtN2NhMi00OGViLWE3MjMtNzA1YTU4YjBmNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i5o8fw2p8vHOS21viCJoeYdm+0/LBpLZqGw m2A+3hK2tPxyKA57F6qzZet56pTPVlD3bWjue+0mKAWIewlfFeYPdLwLz4ZL8Fee tdPjpH0k/dXHbdgtIQMhRtgcp8Cbnmq7dEzTcq/zKh8l7ECfbVPAuBf2y+6jMeTt vV1qM8LWjClprmaKrh/jJHX2g4fkACCE5RyLcwk7Nywr4KBbC/9XrSFQTWqIzxq8 PIR7ZUzFTruPAWjSm97x3Xt+x6238EICBBnUtNNipnvG3Zd9NygxGTDI81gmDgfl oiOvt4Ay9HAGPSCde21NFvSMv0rEf4lZKKv4NihNuCl8y/8nVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMybmjQwCWIqAnYqGP09AhPnoRXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDBmN2E0ZjctYmZlNC0z MGYzLWFmOTktYjRlM2M5ZjkzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5eJtG8ZTFl1FsCmq5EU1zUG0I/druLN046zcTGqvrTPN/6DxzHS2Ml gCeNtZK6nPQGKazgLBieYQZ4Nn57Mt0ymwoWLBCwhZRfCn1p2JLEaEfduAc/u7fu cGoW/SU2Tj3Px0vj6sQsTRYZINbaQRgiorrqllf2TKcCjvJeXGN2BzopDe7DaN/9 S3KIkb7FZI+fy8ikju449ws2blZHt4WdG+7aJC+rXHcVGrSK7/6FvVRej3MlF07+ cVaFKQ0MmHIL+swcYTHUBZiH8/fKa0ZHVB3YRMQsLSdzzBd1X1eprB/RCUWu2IZl tLQ9gBMyG+CfdN3VL2QJZZO7TPud5s0= -----END CERTIFICATE-----Generated at Fri Jul 24 15:05:35 2026 by rpki-client