$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa File: b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa (raw, json) Hash identifier: lRokDDuimM0p8ExtPdxIhGnQueL3qokW9Nhx/V7f1Yc= Subject key identifier: 9A:FA:5B:48:65:F5:EF:E1:A0:E4:72:73:41:45:79:C9:4D:E7:42:C2 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E921FA6F80CE1728DF86A7880 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 11290 IP address blocks: 216.228.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a6:f8:0c:e1:72:8d:f8:6a:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=2b5ef86e-9279-4342-a84c-24ce52bacdc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:6e:07:38:bd:58:4d:d8:5d:ab:62:62:d1: f7:32:ee:9d:35:c8:3e:3c:66:19:2a:8d:7c:a3:70: f1:73:1e:0e:d9:e8:a5:ec:b4:a5:68:4d:cd:f8:95: b8:ce:25:de:5e:58:ed:f1:3b:cd:19:dd:a5:60:4a: a5:7c:1a:23:0e:14:93:ad:43:09:5e:fc:47:1a:8c: 1c:43:52:79:f8:ba:d1:33:12:1c:0c:34:14:f5:d9: ad:50:fe:90:db:6f:b5:3d:ca:8c:38:6b:47:35:0b: 7c:fa:7b:56:c5:d8:be:04:60:f4:49:cb:2e:48:ee: c5:e4:c9:81:92:0d:f8:d3:a3:e6:9e:fa:0e:d9:75: e9:a9:c9:55:28:5a:d9:d8:d5:c9:2c:d7:98:59:2b: c7:f5:4b:2c:d5:ab:b0:c0:e2:97:35:01:f6:8a:96: 11:52:99:93:5b:b1:82:30:40:f0:e0:7d:9b:fc:f1: 6f:e0:a3:3a:88:64:d1:e3:1f:47:06:17:f5:42:c9: fd:2d:e2:6a:f1:a5:fa:94:13:26:13:6d:d4:51:e9: 84:bf:a6:c0:88:1a:9f:36:5e:c1:d9:e1:e3:21:a2: 2d:7c:8f:16:43:42:37:06:1d:83:a5:83:3c:82:bc: de:a5:86:fc:01:cc:e6:7b:42:59:42:64:18:f5:ca: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FA:5B:48:65:F5:EF:E1:A0:E4:72:73:41:45:79:C9:4D:E7:42:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 216.228.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c2:1e:2c:1e:ac:3b:b0:1b:9e:62:35:80:63:ba:33:fd:fc: fb:37:43:b0:19:1e:cc:ab:f2:b7:37:56:80:cd:67:db:38:81: 4b:c1:8a:53:26:24:1a:32:f4:2b:71:57:c4:ad:00:89:ef:fb: 92:36:0c:33:35:43:dd:fb:22:14:57:a2:41:10:72:0b:45:c9: fc:45:05:29:bc:9a:93:49:26:b8:2d:ea:4c:b9:1c:f7:52:f3: ee:7b:75:a9:17:9e:cb:a4:19:a0:bd:19:d1:0b:3b:e0:d0:b8: 73:b4:e0:e7:fd:6c:90:9a:22:07:e0:31:cb:9d:70:52:c1:b4: 3e:29:47:9e:0e:e0:37:75:fa:46:0d:70:3f:68:74:93:0c:c5: 12:5b:77:7e:65:e0:50:f8:68:a4:18:35:f2:dd:3e:a1:88:13: 0a:9d:5b:92:ef:8b:0b:4e:c5:24:30:b3:cf:5e:11:22:00:cd: 04:d4:d4:ca:51:d2:6b:63:29:63:2d:34:71:aa:b7:6e:5f:72: 41:6b:5c:8c:51:0a:13:74:6d:4a:48:a6:e6:c1:a1:78:55:65: 37:05:ca:28:80:6c:71:84:b6:3f:59:f9:ac:63:c2:1e:a8:eb: 58:ab:20:1c:44:fa:49:5c:a4:d2:9e:42:b7:18:25:35:29:7c: cf:e9:84:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6b4DOFyjfhqeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk MmI1ZWY4NmUtOTI3OS00MzQyLWE4NGMtMjRjZTUyYmFjZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU5uBzi9WE3YXatiYtH3Mu6dNcg+PGYZKo18 o3Dxcx4O2eil7LSlaE3N+JW4ziXeXljt8TvNGd2lYEqlfBojDhSTrUMJXvxHGowc Q1J5+LrRMxIcDDQU9dmtUP6Q22+1PcqMOGtHNQt8+ntWxdi+BGD0ScsuSO7F5MmB kg3406PmnvoO2XXpqclVKFrZ2NXJLNeYWSvH9Uss1auwwOKXNQH2ipYRUpmTW7GC MEDw4H2b/PFv4KM6iGTR4x9HBhf1Qsn9LeJq8aX6lBMmE23UUemEv6bAiBqfNl7B 2eHjIaItfI8WQ0I3Bh2DpYM8grzepYb8Aczme0JZQmQY9cqgMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr6W0hl9e/hoORyc0FFeclN50LCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjJlMmZjOGEtMWYzNi0z MTRlLTkzMDEtZWJmYzlmYmJiNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPCHiwerDuwG55iNYBjujP9/Ps3Q7AZHsyr8rc3VoDNZ9s4gUvBilMm JBoy9CtxV8StAInv+5I2DDM1Q937IhRXokEQcgtFyfxFBSm8mpNJJrgt6ky5HPdS 8+57dakXnsukGaC9GdELO+DQuHO04Of9bJCaIgfgMcudcFLBtD4pR54O4Dd1+kYN cD9odJMMxRJbd35l4FD4aKQYNfLdPqGIEwqdW5LviwtOxSQws89eESIAzQTU1MpR 0mtjKWMtNHGqt25fckFrXIxRChN0bUpIpubBoXhVZTcFyiiAbHGEtj9Z+axjwh6o 61irIBxE+klcpNKeQrcYJTUpfM/phJs= -----END CERTIFICATE-----Generated at Fri Jul 24 12:34:52 2026 by rpki-client