$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa File: 43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json) Hash identifier: T9J2a/wlCUo1ZZXTXnK450YJPCoGqQkUvJNF3PM+/og= Subject key identifier: 14:56:FE:F0:70:F5:B7:4A:4F:05:37:A0:C2:03:6F:A3:FC:91:DF:73 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2C21E84625DF9E5F49C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 104.200.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2c:21:e8:46:25:df:9e:5f:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=79b0854b-6b57-4496-94f6-f6c9469f3766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:0a:45:eb:3b:7c:5a:21:fd:21:fd:ab:e0: 7f:04:3e:43:be:60:cf:fa:24:10:0f:20:0d:6f:d9: 3a:a1:af:26:1d:10:bd:da:b0:b9:2d:dc:36:59:7a: bf:7d:b9:f9:d2:98:d5:d4:87:de:61:05:0d:eb:4c: aa:2e:96:f7:0b:5b:41:22:d7:6a:2f:31:00:f1:c7: 19:d0:e4:ca:d4:a8:f9:26:97:3a:d3:15:57:af:ff: 2b:50:b8:9e:01:03:2b:b7:ae:67:6f:9b:f3:63:1b: 5b:2f:bd:0d:6b:6e:6e:3b:47:54:68:f1:5b:dc:e5: 6d:eb:0c:f6:97:da:4d:1c:43:bb:80:6b:9b:d2:0b: 4a:83:ca:60:bf:03:77:e3:73:eb:70:45:d4:69:0d: d3:f5:dc:d9:8a:82:78:82:4a:d7:8b:5f:81:03:2e: 4b:28:13:6d:61:63:37:00:a2:df:bf:d8:ef:ad:08: 3b:04:70:e8:0c:70:d1:7f:f0:8b:c6:2a:e1:e7:7c: 57:31:85:da:8a:a4:6c:c6:b3:ad:95:95:f4:6a:9b: 61:0f:96:fc:09:07:6e:8f:fa:06:66:cf:08:3b:f2: 38:ef:d7:12:57:cf:29:f1:9a:98:25:f5:d6:c9:51: 47:c8:26:05:a3:d4:e1:e6:99:03:fb:e3:f3:69:ae: 71:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:56:FE:F0:70:F5:B7:4A:4F:05:37:A0:C2:03:6F:A3:FC:91:DF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.200.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:34:41:06:97:6b:bc:76:67:1e:62:fb:91:d8:15:68:5d:2c: f7:13:26:37:a2:dd:e6:ad:0c:e6:9a:ad:c9:a3:16:bb:6f:3e: 6e:a7:a7:23:54:ba:d8:9e:73:24:90:8d:88:1c:2d:56:de:f3: 84:75:2f:0b:cd:1b:f7:08:ee:0f:c0:c0:a5:06:a9:1a:7d:13: 52:57:13:81:b2:96:4e:38:f8:5c:77:66:b3:cb:df:fd:29:16: 39:51:99:18:34:04:65:21:c7:61:e6:93:84:70:ea:cc:4d:a7: d1:90:03:b3:6a:4c:53:91:d3:79:87:46:16:2e:a2:68:3b:0a: 62:52:9d:c7:d4:60:d9:cf:0a:91:e7:9d:ac:a1:38:10:e9:4e: 4a:86:d5:0f:d8:d3:4a:20:b2:1a:f6:f5:b7:9b:9f:a9:bd:cc: b7:a3:a7:ea:07:f0:3f:de:c7:7a:02:ee:b8:2d:5b:34:9e:a0: 08:a7:f3:07:ef:61:8c:1b:65:5e:d6:e5:03:b0:63:ef:93:03: 15:3d:b3:df:7b:20:bd:ca:22:92:66:28:6b:73:f6:a9:e0:2e: 3a:8c:e4:59:e6:28:55:cc:ad:25:b0:58:ae:b1:10:20:47:99: 15:8a:e9:4a:c7:4c:9c:5c:78:3d:d0:60:3f:ad:60:94:e7:ac: 23:ce:d5:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSwh6EYl355fScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NzliMDg1NGItNmI1Ny00NDk2LTk0ZjYtZjZjOTQ2OWYzNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiYKRes7fFoh/SH9q+B/BD5DvmDP+iQQDyAN b9k6oa8mHRC92rC5Ldw2WXq/fbn50pjV1IfeYQUN60yqLpb3C1tBItdqLzEA8ccZ 0OTK1Kj5Jpc60xVXr/8rULieAQMrt65nb5vzYxtbL70Na25uO0dUaPFb3OVt6wz2 l9pNHEO7gGub0gtKg8pgvwN343PrcEXUaQ3T9dzZioJ4gkrXi1+BAy5LKBNtYWM3 AKLfv9jvrQg7BHDoDHDRf/CLxirh53xXMYXaiqRsxrOtlZX0apthD5b8CQduj/oG Zs8IO/I479cSV88p8ZqYJfXWyVFHyCYFo9Th5pkD++Pzaa5xKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRW/vBw9bdKTwU3oMIDb6P8kd9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNDNkNjk4YTktZjM2NC0z ZjExLTkxOGUtYTNmNWE1N2VkNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU0QQaXa7x2Zx5i+5HYFWhdLPcTJjei3eatDOaarcmjFrtvPm6npyNU utiecySQjYgcLVbe84R1LwvNG/cI7g/AwKUGqRp9E1JXE4Gylk44+Fx3ZrPL3/0p FjlRmRg0BGUhx2Hmk4Rw6sxNp9GQA7NqTFOR03mHRhYuomg7CmJSncfUYNnPCpHn nayhOBDpTkqG1Q/Y00ogshr29bebn6m9zLejp+oH8D/ex3oC7rgtWzSeoAin8wfv YYwbZV7W5QOwY++TAxU9s997IL3KIpJmKGtz9qngLjqM5FnmKFXMrSWwWK6xECBH mRWK6UrHTJxceD3QYD+tYJTnrCPO1Zw= -----END CERTIFICATE-----Generated at Sun Sep 27 10:47:08 2026 by rpki-client