$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa File: 3924f1b7-789b-3758-bb3e-78e15e71890c.roa (raw, json) Hash identifier: kdg+gtLLJBhthXCQZl+zDfLwnNr6sntbXwt157KQlkY= Subject key identifier: 10:C6:FE:F3:3D:31:9E:89:11:58:6C:79:55:50:02:21:F9:48:3C:C9 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E9A7FD39870DF5BA4E4562C00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 11290 IP address blocks: 72.11.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d3:98:70:df:5b:a4:e4:56:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=5bcc4ecd-48cf-4218-9a43-ac84ceae1b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:d3:7c:f9:f3:9a:4f:82:2e:e3:38:80:08: f9:a7:b7:60:55:f0:c6:48:f9:3f:de:9e:eb:60:f4: 30:f3:a4:f9:c6:00:b4:37:0e:dd:83:99:88:be:26: d0:a1:89:aa:4a:6f:56:f5:ca:ba:9a:dc:66:19:c5: 19:35:64:89:47:ef:1a:a5:df:bb:27:7e:d7:d8:3a: e4:e9:77:a6:1c:0e:aa:2f:a1:b2:56:b4:2f:89:c7: 1d:82:0e:58:36:03:fd:11:7a:ea:bc:fd:b9:02:d9: af:e5:6e:31:18:79:1f:7d:ce:3a:a9:46:51:92:e1: c6:b8:a9:33:b9:5b:14:ae:82:fe:7c:7e:8e:cc:d9: c8:5e:1f:db:74:ee:bf:bb:45:0a:51:60:f2:ea:b9: 57:d0:02:26:4d:16:33:3e:24:02:80:1f:22:ff:e8: 56:c8:dd:df:16:45:90:ca:74:fb:f3:4c:30:7e:cf: 7b:b2:6e:c9:54:11:7e:9a:f4:99:85:13:70:da:78: 46:b0:d1:60:6d:e9:55:fb:bb:5f:60:86:2a:68:12: 00:1b:20:b2:a3:63:ff:91:31:52:97:a8:b7:5b:23: cf:3f:b3:68:c9:47:0d:d7:05:db:db:0f:5d:86:c5: 93:47:00:b1:34:9b:3c:44:00:e5:7d:9f:29:05:e0: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C6:FE:F3:3D:31:9E:89:11:58:6C:79:55:50:02:21:F9:48:3C:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 72.11.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:98:24:02:3f:f0:67:98:ed:18:4d:20:db:a5:21:a2:a7:93: ba:18:92:05:36:a1:5f:3e:f0:d1:78:8a:14:07:1a:92:64:67: ba:11:7c:ff:13:ea:51:85:21:65:50:42:5b:d6:f4:1f:cf:d3: a8:95:73:db:2e:13:59:90:bf:48:71:48:fd:2d:16:53:58:d9: 8e:91:8a:76:d1:c9:34:5c:ae:c0:07:c4:cc:34:72:3f:da:e3: e2:29:e4:37:4c:c6:28:cd:89:5e:2a:1d:46:a2:1a:c7:4f:64: e8:1f:09:77:26:34:33:6d:f6:de:0b:d7:c5:8d:51:95:1e:ea: f1:f7:45:bb:00:d6:95:ce:70:70:f8:65:03:c2:76:42:28:bb: e0:30:e9:74:34:bb:f9:6e:b2:c3:df:26:90:4c:df:13:10:d0: a4:20:7d:40:d6:8e:8f:a9:17:c8:07:1d:71:53:d0:a3:80:dc: a4:02:4a:a2:3e:32:9e:34:7e:1a:44:62:92:90:5e:29:2a:bb: 50:59:72:c2:7e:3a:91:cf:1e:38:29:89:b8:a2:dc:e3:be:f4: 65:42:48:c3:00:cd:e9:f6:3c:db:1e:3a:f7:fd:2f:56:b8:cd: cd:66:6b:e2:ff:d5:93:16:ac:51:bd:4d:ca:7d:7e:23:0a:54: 46:db:41:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9OYcN9bpORWLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk NWJjYzRlY2QtNDhjZi00MjE4LTlhNDMtYWM4NGNlYWUxYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaTTfPnzmk+CLuM4gAj5p7dgVfDGSPk/3p7r YPQw86T5xgC0Nw7dg5mIvibQoYmqSm9W9cq6mtxmGcUZNWSJR+8apd+7J37X2Drk 6XemHA6qL6GyVrQviccdgg5YNgP9EXrqvP25Atmv5W4xGHkffc46qUZRkuHGuKkz uVsUroL+fH6OzNnIXh/bdO6/u0UKUWDy6rlX0AImTRYzPiQCgB8i/+hWyN3fFkWQ ynT780wwfs97sm7JVBF+mvSZhRNw2nhGsNFgbelV+7tfYIYqaBIAGyCyo2P/kTFS l6i3WyPPP7NoyUcN1wXb2w9dhsWTRwCxNJs8RADlfZ8pBeDEIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDG/vM9MZ6JEVhseVVQAiH5SDzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMzkyNGYxYjctNzg5Yi0z NzU4LWJiM2UtNzhlMTVlNzE4OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiYJAI/8GeY7RhNINulIaKnk7oYkgU2oV8+8NF4ihQHGpJkZ7oRfP8T 6lGFIWVQQlvW9B/P06iVc9suE1mQv0hxSP0tFlNY2Y6RinbRyTRcrsAHxMw0cj/a 4+Ip5DdMxijNiV4qHUaiGsdPZOgfCXcmNDNt9t4L18WNUZUe6vH3RbsA1pXOcHD4 ZQPCdkIou+Aw6XQ0u/lussPfJpBM3xMQ0KQgfUDWjo+pF8gHHXFT0KOA3KQCSqI+ Mp40fhpEYpKQXikqu1BZcsJ+OpHPHjgpibii3OO+9GVCSMMAzen2PNseOvf9L1a4 zc1ma+L/1ZMWrFG9Tcp9fiMKVEbbQZE= -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:48 2026 by rpki-client