$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa File: 9888496b-db63-3363-bfab-e35ab2a737a4.roa (raw, json) Hash identifier: nM1oo0w9HUTo89HMwAiWK2SQ/4wIGanqykS+Ns7z3Kc= Subject key identifier: A3:50:A6:41:73:43:44:DC:B3:F2:B8:69:41:64:AA:B5:1F:10:80:61 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E9A7FD419FD15F24F180F8680 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 11290 IP address blocks: 24.204.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d4:19:fd:15:f2:4f:18:0f:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=55d430eb-0181-493f-ad0d-5ca08eabb0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:76:b2:80:83:05:3f:a2:e1:46:2c:12:3c: 53:56:db:b8:a7:1f:87:9e:c4:52:a8:50:bb:71:ff: bf:8d:4c:f4:ef:80:1f:33:6d:ac:67:25:17:f0:01: 12:b8:e0:8a:0e:33:0b:df:e5:5b:b6:b3:54:d1:56: e8:ea:d5:0b:d4:20:6c:e3:b3:72:76:2f:57:66:d4: 06:26:78:82:ca:14:96:22:11:45:7c:ff:bd:a1:13: 5e:10:11:5a:73:ef:75:63:a8:06:da:89:e3:9d:0a: d6:46:ed:8d:9e:fb:6e:dc:9f:ea:d8:6a:4b:ef:fe: d6:69:7b:07:c4:0b:98:1b:fa:8b:c7:e4:93:eb:49: 81:42:15:f8:48:66:e8:e7:69:93:75:90:e2:91:f4: 7f:4a:2b:a1:ee:d0:11:92:d6:26:99:bd:b3:7e:48: 28:d1:e6:05:67:1d:ef:33:ac:e8:c2:57:5c:08:0c: 20:49:0d:fb:b0:5c:19:33:d3:50:e4:17:7d:18:6a: 55:f4:7c:c7:a6:91:04:72:5d:2d:e3:25:e1:ec:ec: 8d:cd:c5:75:ce:56:c1:23:d0:56:92:37:74:e5:14: 7f:67:0c:f4:ac:76:69:30:62:bd:97:b8:03:aa:e6: 0f:8f:a1:6c:10:14:d4:5a:da:26:96:68:99:31:0f: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:A6:41:73:43:44:DC:B3:F2:B8:69:41:64:AA:B5:1F:10:80:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.204.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:67:fd:9a:dd:d2:d9:3a:2f:bf:74:14:c1:8f:26:5e:a2:0a: e0:19:b7:96:b0:21:50:ed:09:9d:37:20:cc:34:d2:09:ff:70: be:fe:08:20:31:ce:ba:29:a3:8a:8d:23:fd:c3:4a:48:9c:63: 5c:73:7e:c3:e3:bf:49:39:7d:0f:8d:9f:4b:db:05:5c:d9:a4: 15:dd:5e:5f:49:c7:4c:e2:07:3e:a8:73:06:5a:a8:f8:95:74: cd:2f:d3:7d:c4:8d:f7:38:81:14:65:3a:c0:ee:19:af:e3:7e: 72:7b:63:62:35:4d:15:26:ed:bf:de:31:a8:da:81:e6:93:cf: a9:e6:11:c6:31:ee:d5:c7:f5:40:09:d7:f1:3d:16:a1:ca:01: 0b:d0:e5:f6:53:57:40:89:d9:88:47:d7:f4:1c:32:0d:7f:b4: d5:03:20:9f:28:2a:d4:27:47:bb:52:c9:74:e9:7d:b0:3e:e8: b9:12:66:b9:66:f8:9b:6f:79:1c:5b:bc:a0:bb:e6:40:b5:64: 07:eb:ca:4b:ed:82:32:6c:05:9e:51:3b:7a:4c:fb:b3:20:a7: 9f:88:a1:a0:a4:58:7d:50:59:17:9b:9e:46:18:82:88:50:d3: 99:6e:83:ec:d1:1a:9d:7f:8e:8e:c3:8c:96:8c:69:83:30:77: b7:cd:03:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9QZ/RXyTxgPhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk NTVkNDMwZWItMDE4MS00OTNmLWFkMGQtNWNhMDhlYWJiMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZV2soCDBT+i4UYsEjxTVtu4px+HnsRSqFC7 cf+/jUz074AfM22sZyUX8AESuOCKDjML3+VbtrNU0Vbo6tUL1CBs47Nydi9XZtQG JniCyhSWIhFFfP+9oRNeEBFac+91Y6gG2onjnQrWRu2Nnvtu3J/q2GpL7/7WaXsH xAuYG/qLx+ST60mBQhX4SGbo52mTdZDikfR/Siuh7tARktYmmb2zfkgo0eYFZx3v M6zowldcCAwgSQ37sFwZM9NQ5Bd9GGpV9HzHppEEcl0t4yXh7OyNzcV1zlbBI9BW kjd05RR/Zwz0rHZpMGK9l7gDquYPj6FsEBTUWtomlmiZMQ9XqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNQpkFzQ0Tcs/K4aUFkqrUfEIBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTg4ODQ5NmItZGI2My0z MzYzLWJmYWItZTM1YWIyYTczN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGMyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtn/Zrd0tk6L790FMGPJl6iCuAZt5awIVDtCZ03IMw00gn/cL7+CCAx zropo4qNI/3DSkicY1xzfsPjv0k5fQ+Nn0vbBVzZpBXdXl9Jx0ziBz6ocwZaqPiV dM0v033Ejfc4gRRlOsDuGa/jfnJ7Y2I1TRUm7b/eMajageaTz6nmEcYx7tXH9UAJ 1/E9FqHKAQvQ5fZTV0CJ2YhH1/QcMg1/tNUDIJ8oKtQnR7tSyXTpfbA+6LkSZrlm +JtveRxbvKC75kC1ZAfrykvtgjJsBZ5RO3pM+7Mgp5+IoaCkWH1QWRebnkYYgohQ 05lug+zRGp1/jo7DjJaMaYMwd7fNA9o= -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:07 2026 by rpki-client