$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa File: 4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa (raw, json) Hash identifier: pd2XqTikaVXby131aLEjB6UpEphUKZuCaP39qfBL/iw= Subject key identifier: D0:E8:DA:41:CE:2A:31:3B:BC:DE:D1:5C:86:DE:1D:2B:62:14:91:BE Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E921FAA88EAB105BB59A93DC0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 11290 IP address blocks: 205.237.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:aa:88:ea:b1:05:bb:59:a9:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=25f2d5f0-3150-4c4d-90cd-d078c4a49b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:3a:49:55:8c:86:1c:99:72:1b:4a:09:74: 0d:18:96:49:ce:20:28:83:14:78:36:46:74:8c:3f: 00:6b:a6:aa:90:c9:6b:26:2c:64:11:23:d4:06:33: a7:be:cf:1e:08:41:d7:bd:a1:e8:c7:bf:8d:7e:25: e1:28:83:3c:b2:c9:e1:4f:ce:20:1f:35:53:0a:95: 6d:d6:32:14:99:3d:8e:88:17:e6:e3:7b:85:b3:1a: 20:2a:a6:bd:d4:bc:95:6f:2d:42:ca:ba:e8:ce:4b: 44:bd:65:ca:a8:f8:3a:07:1d:7a:d1:21:4a:9a:fb: a7:d2:1a:ea:ca:b6:0f:8a:b3:5d:ee:03:4c:02:f0: da:fd:60:23:35:1c:eb:24:bd:59:a1:83:04:ad:e1: 6d:ea:00:7a:05:ea:7c:8a:36:ef:8b:0a:6d:e2:7b: af:21:d3:0c:bc:42:f2:7d:d8:b3:6e:f9:1f:b3:21: b1:d2:f0:c1:20:d0:91:c0:c0:61:75:b9:9c:83:dc: 98:21:cc:e9:ee:59:46:95:44:1a:47:ec:e5:8c:9f: 9d:d5:a3:d5:e3:f9:f0:04:ee:85:57:34:5a:fa:ed: d7:fd:16:1a:8b:76:89:b5:d1:65:5f:9b:2f:8f:fd: 0d:68:4b:da:e7:2f:e2:6c:0b:e6:f2:3b:1c:2e:c5: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E8:DA:41:CE:2A:31:3B:BC:DE:D1:5C:86:DE:1D:2B:62:14:91:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 205.237.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:67:e0:51:aa:02:b4:d8:ab:05:b6:70:49:89:b1:64:12:1e: c4:61:86:67:6b:31:fe:e1:58:f7:f7:22:21:b7:99:8a:4d:16: 94:cc:3f:ee:da:ec:ab:e2:00:a8:4a:bd:4d:f7:48:85:83:07: 83:7d:01:9e:f6:92:70:2f:d1:c1:28:04:5a:0f:c2:5c:c2:74: 94:35:85:6d:2a:22:c6:25:a3:1d:ec:2e:9c:50:07:85:d0:b1: 21:57:34:70:5a:df:51:bf:c0:94:a5:31:9e:aa:fb:d0:a3:83: 42:99:36:b9:13:88:63:c0:e6:fc:2b:aa:55:ba:8a:5f:c6:80: 71:26:86:5b:49:b2:c4:87:56:4d:fc:83:4c:bc:a1:8d:95:60: 40:b9:1d:2d:16:e3:3f:64:16:7d:fa:23:7d:30:e5:9d:f9:5a: b2:b5:41:cb:5e:46:cc:aa:24:87:b4:9d:1f:59:0b:0a:03:ec: 11:2f:4a:b0:ad:5c:a2:7a:dc:2f:4c:71:79:8f:9a:40:d4:f1: d8:29:5b:1c:cf:09:83:09:56:08:fa:3c:2b:e6:aa:a4:d8:3e: e1:32:7f:df:3b:ff:04:b8:9a:53:9d:2a:18:37:c6:07:db:e3: 19:21:a4:14:f3:85:1d:40:f8:9f:0d:b5:e7:4b:3c:d3:90:de: a3:f4:6b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6qI6rEFu1mpPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk MjVmMmQ1ZjAtMzE1MC00YzRkLTkwY2QtZDA3OGM0YTQ5Yjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjds6SVWMhhyZchtKCXQNGJZJziAogxR4NkZ0 jD8Aa6aqkMlrJixkESPUBjOnvs8eCEHXvaHox7+NfiXhKIM8ssnhT84gHzVTCpVt 1jIUmT2OiBfm43uFsxogKqa91LyVby1CyrrozktEvWXKqPg6Bx160SFKmvun0hrq yrYPirNd7gNMAvDa/WAjNRzrJL1ZoYMEreFt6gB6Bep8ijbviwpt4nuvIdMMvELy fdizbvkfsyGx0vDBINCRwMBhdbmcg9yYIczp7llGlUQaR+zljJ+d1aPV4/nwBO6F VzRa+u3X/RYai3aJtdFlX5svj/0NaEva5y/ibAvm8jscLsWtMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDo2kHOKjE7vN7RXIbeHStiFJG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNGIwOTQ4ZmQtODQ0Yy0z ZmVhLThhNDQtYWY2YmNjMTk0MGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAze0jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJn4FGqArTYqwW2cEmJsWQSHsRhhmdrMf7hWPf3IiG3mYpNFpTMP+7a 7KviAKhKvU33SIWDB4N9AZ72knAv0cEoBFoPwlzCdJQ1hW0qIsYlox3sLpxQB4XQ sSFXNHBa31G/wJSlMZ6q+9Cjg0KZNrkTiGPA5vwrqlW6il/GgHEmhltJssSHVk38 g0y8oY2VYEC5HS0W4z9kFn36I30w5Z35WrK1QcteRsyqJIe0nR9ZCwoD7BEvSrCt XKJ63C9McXmPmkDU8dgpWxzPCYMJVgj6PCvmqqTYPuEyf987/wS4mlOdKhg3xgfb 4xkhpBTzhR1A+J8NtedLPNOQ3qP0a24= -----END CERTIFICATE-----Generated at Fri Jul 24 15:06:07 2026 by rpki-client