$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa File: b5f5f32e-5188-314d-a26e-19c0504c484c.roa (raw, json) Hash identifier: S4Z5R9UlZlJaegQ2Yb+og0hg2LqTkNDt5pVJZfp9+w4= Subject key identifier: BD:D4:2E:95:39:9D:8F:A6:11:0E:DC:E7:F5:21:70:B5:50:DE:09:7F Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584DB1DACD5556E1236695279420 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 11290 IP address blocks: 209.54.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:cd:55:56:e1:23:66:95:27:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=88cf09c3-e597-47ac-b56b-b27e6fba1ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:31:c3:c3:40:7b:33:1b:2d:bc:f5:c4:93: 4f:77:b1:19:b9:4b:06:d8:6a:3c:85:e0:d6:53:2f: b9:59:b9:de:c0:1a:f7:84:65:9e:30:b1:f4:a1:d8: 6b:6b:30:2c:ec:3c:ef:44:39:77:0e:c6:3b:f7:90: 69:6a:38:93:12:a5:c9:de:d3:fe:24:39:cf:91:d0: b3:96:04:b2:f9:68:bf:f8:8e:4e:37:a2:74:6a:ef: f0:71:0e:22:92:ab:93:1a:25:6d:c8:33:f1:39:9a: 4a:21:a1:b5:69:bf:e5:3b:d2:a3:b9:40:10:d5:cd: 88:8d:43:1f:4a:48:63:de:98:62:79:1c:fc:6f:1e: 19:3e:7b:7c:26:25:fd:3f:9e:b6:5b:2c:3b:c5:c0: 71:a5:54:8b:31:8d:8e:1e:a4:29:29:ba:43:7e:23: be:ed:46:5b:ef:0e:40:32:c3:0a:3f:64:72:33:14: 58:07:72:c0:73:d1:cd:72:2a:f9:a7:6c:8d:ac:6e: d6:0f:58:15:50:18:63:68:bc:e7:1a:e9:8d:64:4a: 09:28:1f:51:14:f6:cc:4e:fa:69:e5:d9:00:30:78: b1:0b:23:0f:42:ab:5d:b8:6a:b6:74:6c:9e:27:ff: 21:62:b8:8b:cf:5a:dc:75:78:46:9d:7c:17:66:8f: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:2E:95:39:9D:8F:A6:11:0E:DC:E7:F5:21:70:B5:50:DE:09:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.54.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:69:a2:1c:c5:64:b8:ee:76:ce:05:65:f7:7f:51:a1:52:bd: 7a:37:dd:f1:6a:94:c1:ec:14:1c:e5:82:67:c6:b8:2d:05:96: 46:b3:6b:34:70:b1:19:7b:d7:b4:8d:50:bd:47:e0:09:7d:ac: 02:2b:d8:e8:a9:28:31:75:b0:9c:95:02:85:38:6d:38:55:69: 0a:8a:fd:1f:ca:6a:5d:28:5b:42:da:d0:e8:c5:fd:65:25:cf: 32:4a:93:8b:0d:a8:9c:54:97:da:b4:9c:61:f7:6d:e4:76:c2: 2d:b0:03:b6:64:a6:f8:b6:29:fd:81:b9:7a:bb:2a:5e:09:18: 2c:39:21:ee:e5:45:62:af:60:80:2c:e5:1c:dd:7d:c1:4b:11: 27:ca:94:4a:b4:d7:9d:7e:fd:ee:01:b4:31:be:11:c3:9b:32: a6:1e:04:4c:76:d6:b1:94:f3:d0:1e:2d:d2:c0:8c:0b:f7:dd: fc:63:0e:cd:a6:1c:f8:39:60:68:8e:d5:e3:cf:35:b9:f6:a6: 90:9d:b2:31:11:16:7c:cf:f3:1a:13:d0:39:d2:d5:c2:6a:15: a8:0c:2f:83:88:13:a1:39:83:d6:5a:bc:c8:cb:f6:7b:73:f3: c2:58:68:ff:8e:6d:6d:28:9f:d3:8a:31:0a:34:98:cb:7e:61: f2:3e:3a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2s1VVuEjZpUnlCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk ODhjZjA5YzMtZTU5Ny00N2FjLWI1NmItYjI3ZTZmYmExY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQQxw8NAezMbLbz1xJNPd7EZuUsG2Go8heDW Uy+5WbnewBr3hGWeMLH0odhrazAs7DzvRDl3DsY795BpajiTEqXJ3tP+JDnPkdCz lgSy+Wi/+I5ON6J0au/wcQ4ikquTGiVtyDPxOZpKIaG1ab/lO9KjuUAQ1c2IjUMf Skhj3phieRz8bx4ZPnt8JiX9P562Wyw7xcBxpVSLMY2OHqQpKbpDfiO+7UZb7w5A MsMKP2RyMxRYB3LAc9HNcir5p2yNrG7WD1gVUBhjaLznGumNZEoJKB9RFPbMTvpp 5dkAMHixCyMPQqtduGq2dGyeJ/8hYriLz1rcdXhGnXwXZo/ySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3ULpU5nY+mEQ7c5/UhcLVQ3gl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjVmNWYzMmUtNTE4OC0z MTRkLWEyNmUtMTljMDUwNGM0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFpohzFZLjuds4FZfd/UaFSvXo33fFqlMHsFBzlgmfGuC0FlkazazRw sRl717SNUL1H4Al9rAIr2OipKDF1sJyVAoU4bThVaQqK/R/Kal0oW0La0OjF/WUl zzJKk4sNqJxUl9q0nGH3beR2wi2wA7Zkpvi2Kf2BuXq7Kl4JGCw5Ie7lRWKvYIAs 5RzdfcFLESfKlEq0151+/e4BtDG+EcObMqYeBEx21rGU89AeLdLAjAv33fxjDs2m HPg5YGiO1ePPNbn2ppCdsjERFnzP8xoT0DnS1cJqFagML4OIE6E5g9ZavMjL9ntz 88JYaP+ObW0on9OKMQo0mMt+YfI+OuA= -----END CERTIFICATE-----Generated at Wed May 13 05:32:30 2026 by rpki-client