$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa File: 18e83aa2-2384-3c89-b95f-7230e577205d.roa (raw, json) Hash identifier: 8Js1BMu+8ETfDEibdKX3eYulYtfhMDfGA7QxCCaPj84= Subject key identifier: 71:14:3F:B3:8B:54:0D:93:88:B7:67:3E:15:33:DB:60:81:A3:02:B4 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584DB4A585D313966D2510ADEA60 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 11290 IP address blocks: 170.249.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:85:d3:13:96:6d:25:10:ad:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=9a05c0b4-c2d0-476c-938e-9037b7f7e411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:cd:22:48:6d:f4:7e:0b:c7:88:14:cc:7d: ae:6a:ac:bf:d5:72:ed:e1:32:7c:9f:4c:e8:84:04: 49:e6:75:4f:31:2b:db:f7:d9:70:ad:79:73:e7:f4: 0f:60:39:49:29:99:4e:e4:22:a6:f0:ed:82:d4:4c: 47:52:fc:f6:90:c9:36:81:aa:e4:4c:7c:28:cc:69: c3:3a:60:e8:7f:63:9d:fd:5d:42:cc:7f:b0:ab:5c: 01:fa:99:4e:bc:86:6c:04:be:e0:da:cb:ad:66:d2: d7:f6:d4:3f:11:02:fc:ee:23:4b:ae:87:1b:2f:cc: 8d:eb:dd:e2:c0:ca:dc:9c:de:f9:22:33:0a:5f:92: 7e:c2:64:09:92:a6:9d:b9:30:32:b5:7f:1e:47:39: 44:55:9a:21:13:6f:8b:8e:13:b2:dc:fc:81:0e:29: 79:4e:bf:2f:59:0e:90:cf:c1:04:0b:27:27:70:ef: 48:d9:7a:ba:b2:85:c9:ba:be:54:07:20:06:0b:cd: 13:f0:44:a2:5e:be:40:cc:52:b8:97:92:9f:a4:64: 3c:06:0b:bb:9e:6f:43:0b:69:3d:8a:3f:66:3b:99: 2a:0c:ce:08:90:20:65:75:7e:59:9d:6b:9a:8f:8a: f2:42:3e:29:d4:0a:5f:a4:36:1a:a6:d7:19:17:39: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:14:3F:B3:8B:54:0D:93:88:B7:67:3E:15:33:DB:60:81:A3:02:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 170.249.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:77:e7:43:76:1b:19:e7:ff:95:d6:65:44:a0:b3:47:57:7c: 68:48:a1:c5:b1:c5:23:cc:aa:5e:86:d8:82:82:a7:cd:e4:0e: 48:5c:a1:fc:e9:41:fa:7a:77:13:72:bb:99:36:2d:e2:9f:29: 70:d2:a2:21:98:72:db:0c:b4:d2:b8:67:7d:e7:c1:c8:c6:ad: 36:68:bb:74:13:d9:42:77:a7:3d:26:75:81:4d:76:56:27:7e: 1b:f6:c1:e4:af:d4:7b:38:fe:f5:71:25:aa:83:10:e3:97:02: 83:7d:20:03:63:f1:80:83:8c:85:62:9a:4b:e5:66:62:e5:80: 9f:3f:7b:ed:35:9e:c8:45:1b:45:aa:55:6e:03:47:ad:8a:b2: d9:aa:20:aa:24:66:6d:57:f0:8c:5c:ea:0d:fb:59:cc:13:34: 61:24:a6:5a:ae:ea:17:ca:63:ed:8d:27:ef:9d:ca:9a:37:83: 37:df:7c:2f:74:ea:37:27:72:07:5d:f0:06:f4:28:97:bb:1f: e5:c4:f0:67:6a:9b:48:9c:20:77:e5:21:bb:f7:47:2f:43:7a: 21:46:0c:4b:bb:bf:16:3f:82:a3:c6:fd:e9:48:11:44:b8:a7: 24:34:c3:36:c7:7f:3b:37:49:ee:63:c7:f2:c3:c8:49:dc:44: 48:22:1c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYXTE5ZtJRCt6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk OWEwNWMwYjQtYzJkMC00NzZjLTkzOGUtOTAzN2I3ZjdlNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qXNIkht9H4Lx4gUzH2uaqy/1XLt4TJ8n0zo hARJ5nVPMSvb99lwrXlz5/QPYDlJKZlO5CKm8O2C1ExHUvz2kMk2garkTHwozGnD OmDof2Od/V1CzH+wq1wB+plOvIZsBL7g2sutZtLX9tQ/EQL87iNLrocbL8yN693i wMrcnN75IjMKX5J+wmQJkqaduTAytX8eRzlEVZohE2+LjhOy3PyBDil5Tr8vWQ6Q z8EECycncO9I2Xq6soXJur5UByAGC80T8ESiXr5AzFK4l5KfpGQ8Bgu7nm9DC2k9 ij9mO5kqDM4IkCBldX5ZnWuaj4ryQj4p1ApfpDYaptcZFznVtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEUP7OLVA2TiLdnPhUz22CBowK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMThlODNhYTItMjM4NC0z Yzg5LWI5NWYtNzIzMGU1NzcyMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqvkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB350N2Gxnn/5XWZUSgs0dXfGhIocWxxSPMql6G2IKCp83kDkhcofzp Qfp6dxNyu5k2LeKfKXDSoiGYctsMtNK4Z33nwcjGrTZou3QT2UJ3pz0mdYFNdlYn fhv2weSv1Hs4/vVxJaqDEOOXAoN9IANj8YCDjIVimkvlZmLlgJ8/e+01nshFG0Wq VW4DR62KstmqIKokZm1X8Ixc6g37WcwTNGEkplqu6hfKY+2NJ++dypo3gzfffC90 6jcncgdd8Ab0KJe7H+XE8Gdqm0icIHflIbv3Ry9DeiFGDEu7vxY/gqPG/elIEUS4 pyQ0wzbHfzs3Se5jx/LDyEncREgiHL0= -----END CERTIFICATE-----Generated at Wed May 13 04:15:28 2026 by rpki-client