$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa File: b5f5f32e-5188-314d-a26e-19c0504c484c.roa (raw, json) Hash identifier: QgM9WErSZUH057kl9ly1YsIuvy9GrviUeJZqYD1dA80= Subject key identifier: 97:1C:28:80:E5:E6:9B:80:41:BE:6C:05:28:56:6E:95:A4:3C:27:58 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E921FA6D4C6B34CC1EDEC94E0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 11290 IP address blocks: 209.54.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a6:d4:c6:b3:4c:c1:ed:ec:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=1831d0e6-28c9-4049-b42e-383edca50b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:d1:ab:3f:09:70:ef:43:c8:10:c4:da:74: 44:2e:ad:a5:12:f8:55:85:25:27:97:39:fe:70:e3: 52:90:af:4d:16:3a:22:c7:5c:89:cf:f5:98:b8:96: 5d:5a:61:dc:c0:f5:70:44:54:8b:df:55:9b:19:a7: 8b:e2:37:f4:bb:b3:9f:00:4a:f9:cf:16:d5:4f:79: 5f:27:c6:e5:bf:10:16:c2:8e:a5:f5:36:c8:e9:72: 12:3d:7b:b2:9e:70:9f:fd:4d:07:29:85:29:32:80: f6:83:ee:8e:78:a5:35:95:2a:e2:2e:56:a5:30:b2: c7:9e:04:83:76:31:bd:ac:95:11:31:01:d2:c1:bd: 3c:f5:24:6c:b9:c1:41:e8:92:9e:65:23:a7:95:a2: 60:98:43:3d:66:fe:70:87:50:24:0e:28:28:f1:3f: c0:de:46:35:a4:4f:80:10:61:e8:d8:2d:9b:fd:73: 41:56:4f:a1:b8:37:ed:db:4b:a9:2b:a3:b2:cd:da: 34:2c:55:bb:2f:b9:fd:c1:c2:44:d8:2d:fb:b8:1a: dc:00:8e:78:24:27:78:3f:67:42:85:d3:7b:94:b5: df:c8:06:47:e4:82:10:f9:55:65:47:10:c1:cc:d8: 2d:2e:0b:ac:5e:b3:8f:96:f0:24:63:0a:87:23:42: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1C:28:80:E5:E6:9B:80:41:BE:6C:05:28:56:6E:95:A4:3C:27:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.54.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d5:9f:9d:e0:a2:0d:17:fa:99:a1:7a:ce:8a:df:7d:69:28: 8f:95:23:61:94:45:9f:63:41:22:ec:23:5d:ed:9e:17:67:05: aa:5a:57:2e:86:7f:a5:06:b1:6d:d4:8d:79:a5:f9:51:fa:ec: b9:2e:df:8d:93:95:e3:f9:4f:c1:d7:6b:10:64:a2:ea:a9:50: 24:c1:49:f9:51:dc:ad:67:c5:81:42:cf:13:75:86:0d:13:d4: 0f:0b:1f:45:58:f0:21:7d:2d:47:d9:40:11:2d:53:0e:be:91: c0:bf:a9:8b:77:41:c9:a4:0b:2b:72:53:20:a0:18:01:f0:4b: 23:b1:f1:50:2b:dd:13:11:4b:c8:c8:8e:2f:53:26:cc:4e:54: 34:32:66:48:32:41:d4:76:b5:e7:17:bc:37:18:8d:aa:7a:5e: 32:f7:95:b8:ef:0c:35:46:d0:15:f0:46:b1:eb:e0:01:34:d4: eb:b3:ba:86:d2:1b:16:97:ff:44:63:dd:fb:65:88:c8:c1:14: a0:80:75:a5:bf:09:af:b6:05:c7:08:89:6f:15:93:e2:df:c1: 8d:11:11:7d:fc:ef:76:83:97:f6:ae:ad:be:9a:c6:a5:7d:50: 82:a0:00:47:33:86:97:75:9d:a5:81:2c:a8:5b:0b:f4:02:2a: bd:cb:8a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6bUxrNMwe3slOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk MTgzMWQwZTYtMjhjOS00MDQ5LWI0MmUtMzgzZWRjYTUwYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCrRqz8JcO9DyBDE2nRELq2lEvhVhSUnlzn+ cONSkK9NFjoix1yJz/WYuJZdWmHcwPVwRFSL31WbGaeL4jf0u7OfAEr5zxbVT3lf J8blvxAWwo6l9TbI6XISPXuynnCf/U0HKYUpMoD2g+6OeKU1lSriLlalMLLHngSD djG9rJURMQHSwb089SRsucFB6JKeZSOnlaJgmEM9Zv5wh1AkDigo8T/A3kY1pE+A EGHo2C2b/XNBVk+huDft20upK6Oyzdo0LFW7L7n9wcJE2C37uBrcAI54JCd4P2dC hdN7lLXfyAZH5IIQ+VVlRxDBzNgtLgusXrOPlvAkYwqHI0JM5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJccKIDl5puAQb5sBShWbpWkPCdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjVmNWYzMmUtNTE4OC0z MTRkLWEyNmUtMTljMDUwNGM0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPVn53gog0X+pmhes6K331pKI+VI2GURZ9jQSLsI13tnhdnBapaVy6G f6UGsW3UjXml+VH67Lku342TleP5T8HXaxBkouqpUCTBSflR3K1nxYFCzxN1hg0T 1A8LH0VY8CF9LUfZQBEtUw6+kcC/qYt3QcmkCytyUyCgGAHwSyOx8VAr3RMRS8jI ji9TJsxOVDQyZkgyQdR2tecXvDcYjap6XjL3lbjvDDVG0BXwRrHr4AE01OuzuobS GxaX/0Rj3ftliMjBFKCAdaW/Ca+2BccIiW8Vk+LfwY0REX3873aDl/aurb6axqV9 UIKgAEczhpd1naWBLKhbC/QCKr3Lir0= -----END CERTIFICATE-----Generated at Fri Jul 24 15:07:05 2026 by rpki-client