$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa File: b93f0bfa-6321-30a0-9834-67e1293e1040.roa (raw, json) Hash identifier: hqANDsMFnau2rTHA8hMCkrFAyGM2uTGHyAGhx96BiVY= Subject key identifier: 21:89:0C:23:54:62:28:35:CC:BC:6E:B0:25:70:01:F4:5A:BC:DF:E3 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E921FAA72B440A56D7058FAC0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 11290 IP address blocks: 205.237.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:aa:72:b4:40:a5:6d:70:58:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=f1558ae3-9b9e-4b98-8878-dee476a54d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:ea:29:a5:06:cf:97:d9:66:f3:4b:92:92: d2:42:7a:c7:a9:80:b6:1e:d5:da:92:ce:f3:df:c5: 1c:96:4b:4b:8f:b2:89:31:f9:2b:48:6c:03:95:ef: 51:32:63:42:60:bd:8c:fc:90:ce:bd:93:00:f5:64: fc:cb:3e:c7:52:8f:35:2d:a1:a8:11:aa:12:fc:8a: 30:e8:0e:aa:8f:95:ea:e7:51:78:6f:ee:0d:d5:1d: ee:6c:3b:e5:02:fc:bd:0a:85:a2:bd:7f:ca:8d:0a: 06:a3:59:71:eb:59:8f:19:3c:d7:a3:c1:67:4e:24: 5e:99:0b:d7:4e:ff:7f:6e:ff:39:33:89:27:eb:02: 5f:de:4b:83:9e:32:74:0d:ec:9e:5e:66:df:9c:1f: 76:26:6e:1a:69:f4:e4:80:2d:d2:7f:32:db:28:cd: 2f:0a:5c:bb:7b:1d:ba:be:8c:2a:49:57:d3:d7:aa: cd:27:31:1f:0f:bb:cf:e0:76:d1:bb:d2:14:bb:52: 72:c8:22:81:65:e0:36:42:38:3e:63:dd:04:b9:57: c9:02:c7:8c:1c:4f:23:73:c3:9b:a1:e9:64:12:56: 98:eb:86:79:c3:a2:91:b3:99:12:03:c9:34:82:f4: f2:d3:48:d4:98:91:9d:8a:a8:2a:3e:d5:a3:d0:48: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:0C:23:54:62:28:35:CC:BC:6E:B0:25:70:01:F4:5A:BC:DF:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 205.237.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:62:03:dc:41:c5:15:5b:ef:2b:1b:4c:c7:9a:c2:43:7c:39: 18:ce:24:e8:eb:0c:20:c1:fb:e2:32:e6:3d:54:70:55:4a:69: 18:80:ff:9b:6f:15:21:e7:ed:8c:bc:dd:8c:a3:d6:36:56:9d: 35:ea:b5:af:c1:1c:00:0d:56:52:21:2d:60:b1:b3:5a:47:36: ed:23:55:4a:63:d1:c0:d8:f0:c4:c6:92:d8:58:7d:3a:9d:68: 29:15:aa:54:1d:7e:d7:50:1b:d1:1b:23:10:e3:6b:76:d1:3c: 18:55:77:16:58:19:75:4e:fe:9f:3a:c6:51:45:d9:8b:33:7c: dd:5a:68:72:60:da:5d:79:b3:95:ca:34:30:54:6e:00:39:54: 60:da:cc:db:46:cd:33:ef:38:f6:8b:01:e3:2a:18:f9:e6:1e: 4e:d6:eb:31:f0:b1:c5:7f:06:b6:ae:95:bb:ae:cd:5c:d4:25: e9:40:a6:11:ef:83:b4:65:88:00:50:96:6a:81:22:0a:f5:b7: a1:ef:ce:d6:f5:81:43:bd:ab:ff:00:31:9e:52:d4:a0:12:24: 9f:6e:3d:15:52:b8:fd:fc:47:4a:f6:66:50:9b:37:e4:d5:f4: b5:a0:bf:9b:38:1c:cb:4f:fc:3d:14:a6:07:47:25:c2:21:ea: eb:98:d7:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6pytEClbXBY+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjE1NThhZTMtOWI5ZS00Yjk4LTg4NzgtZGVlNDc2YTU0ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms/qKaUGz5fZZvNLkpLSQnrHqYC2HtXaks7z 38UclktLj7KJMfkrSGwDle9RMmNCYL2M/JDOvZMA9WT8yz7HUo81LaGoEaoS/Iow 6A6qj5Xq51F4b+4N1R3ubDvlAvy9CoWivX/KjQoGo1lx61mPGTzXo8FnTiRemQvX Tv9/bv85M4kn6wJf3kuDnjJ0DeyeXmbfnB92Jm4aafTkgC3SfzLbKM0vCly7ex26 vowqSVfT16rNJzEfD7vP4HbRu9IUu1JyyCKBZeA2Qjg+Y90EuVfJAseMHE8jc8Ob oelkElaY64Z5w6KRs5kSA8k0gvTy00jUmJGdiqgqPtWj0EhYwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGJDCNUYig1zLxusCVwAfRavN/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjkzZjBiZmEtNjMyMS0z MGEwLTk4MzQtNjdlMTI5M2UxMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDze0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFiA9xBxRVb7ysbTMeawkN8ORjOJOjrDCDB++Iy5j1UcFVKaRiA/5tv FSHn7Yy83Yyj1jZWnTXqta/BHAANVlIhLWCxs1pHNu0jVUpj0cDY8MTGkthYfTqd aCkVqlQdftdQG9EbIxDja3bRPBhVdxZYGXVO/p86xlFF2YszfN1aaHJg2l15s5XK NDBUbgA5VGDazNtGzTPvOPaLAeMqGPnmHk7W6zHwscV/BraulbuuzVzUJelAphHv g7RliABQlmqBIgr1t6Hvztb1gUO9q/8AMZ5S1KASJJ9uPRVSuP38R0r2ZlCbN+TV 9LWgv5s4HMtP/D0UpgdHJcIh6uuY1w4= -----END CERTIFICATE-----Generated at Fri Jul 24 13:54:32 2026 by rpki-client