$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b5f44a-5601-3515-aa24-269f2e5639c1.roa File: c0b5f44a-5601-3515-aa24-269f2e5639c1.roa (raw, json) Hash identifier: Q3ABoOD/uP9WLe4Y6QwW1BX65PFIAGwMqwqJl1U1pew= Subject key identifier: 22:74:65:24:FA:E0:F6:F0:D8:8C:B4:E5:DE:E3:86:26:A4:52:78:77 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F49728A29D10B95C3AA2DA800 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b5f44a-5601-3515-aa24-269f2e5639c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11290 IP address blocks: 74.210.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:8a:29:d1:0b:95:c3:aa:2d:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6d745e25-7f83-48e8-9375-1c0db66db878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:11:d6:09:e4:d5:61:dd:f1:4b:70:bf:86: 88:4f:90:15:24:c7:8e:00:eb:36:da:a7:38:b7:c7: c8:94:6b:7e:bd:29:a7:b0:24:f5:3d:2b:0f:4a:d5: 83:4b:89:b8:ed:a6:97:95:90:6b:99:63:49:2a:3d: 32:91:82:36:48:41:28:8e:50:8d:dd:a3:ff:8e:cf: a9:6c:39:ac:5d:40:fc:80:b0:50:6f:9b:92:d9:4c: 44:60:53:7e:a1:42:c0:27:53:03:39:74:35:7d:b4: 32:8e:a2:cd:57:75:9c:63:21:f3:56:2d:cd:71:1d: 8a:bb:12:52:47:77:a3:c5:1b:ac:ca:0b:3b:14:b6: 70:f8:e0:fe:98:5a:60:c4:d5:d7:5d:4b:69:42:d3: 5c:de:94:67:f4:67:d4:dc:48:d5:60:23:31:5e:4a: 15:f4:9a:ad:c4:f2:02:fe:92:7e:1a:01:87:55:e5: 6d:a1:1d:a5:c6:e5:fe:e0:e9:86:e4:fa:7f:d8:42: 8b:d5:63:d6:a3:6f:9f:3b:c1:38:47:ed:d7:0b:71: 42:6f:2f:22:5b:b6:21:57:48:76:b7:e8:e0:32:56: 4e:d2:8d:a6:d2:b0:37:aa:d5:58:7a:d3:ee:a7:fa: dc:95:5e:49:76:1a:cb:40:06:d0:7a:9c:d6:f9:53: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:74:65:24:FA:E0:F6:F0:D8:8C:B4:E5:DE:E3:86:26:A4:52:78:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c0b5f44a-5601-3515-aa24-269f2e5639c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 74.210.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8d:e8:3c:9b:5f:9c:62:97:ff:b6:74:53:f2:0f:07:28:38: 36:a9:4f:76:1f:cf:d9:20:23:56:47:10:b7:92:5a:60:d3:89: 6c:c5:53:7c:3a:c8:3d:86:09:f5:db:a8:8d:87:04:f2:d4:ed: 04:21:71:ab:05:43:df:88:b3:59:fd:72:f9:ea:dd:28:b5:26: 87:75:9c:8f:c6:77:fb:e5:61:9b:bb:76:cb:fa:83:42:c5:56: 44:6f:21:7e:31:6a:83:c3:b6:e0:67:24:74:eb:af:54:c3:1e: 53:19:d9:55:15:2f:e8:2f:61:37:05:5c:d3:7d:61:8b:56:c6: c0:5f:33:fe:3e:b0:5c:70:8a:6e:bd:fa:76:73:1c:07:a8:07: 86:be:e1:51:a1:7c:09:24:7e:02:53:a6:49:f8:3a:83:70:db: 87:ec:37:01:2b:8a:88:25:b3:03:32:a5:6b:57:e7:f7:f8:25: 9b:37:68:c1:e5:6a:41:9c:0d:d1:88:93:75:b3:d9:2f:e3:d7: 1b:bf:5d:07:a8:2a:97:85:57:cc:3f:dc:e3:63:72:cc:8f:5a: 08:ec:7b:0b:eb:c2:89:d0:fd:89:08:69:26:92:1a:46:86:0b: f7:e2:26:76:3e:17:1b:c8:98:92:be:bf:ea:7d:0f:e2:8e:b6: 53:10:87:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcoop0QuVw6otqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQ3NDVlMjUtN2Y4My00OGU4LTkzNzUtMWMwZGI2NmRiODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquAR1gnk1WHd8Utwv4aIT5AVJMeOAOs22qc4 t8fIlGt+vSmnsCT1PSsPStWDS4m47aaXlZBrmWNJKj0ykYI2SEEojlCN3aP/js+p bDmsXUD8gLBQb5uS2UxEYFN+oULAJ1MDOXQ1fbQyjqLNV3WcYyHzVi3NcR2KuxJS R3ejxRusygs7FLZw+OD+mFpgxNXXXUtpQtNc3pRn9GfU3EjVYCMxXkoV9JqtxPIC /pJ+GgGHVeVtoR2lxuX+4OmG5Pp/2EKL1WPWo2+fO8E4R+3XC3FCby8iW7YhV0h2 t+jgMlZO0o2m0rA3qtVYetPup/rclV5JdhrLQAbQepzW+VPi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ0ZST64Pbw2Iy05d7jhiakUnh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzBiNWY0NGEtNTYwMS0z NTE1LWFhMjQtMjY5ZjJlNTYzOWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHStKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiN6DybX5xil/+2dFPyDwcoODapT3Yfz9kgI1ZHELeSWmDTiWzFU3w6 yD2GCfXbqI2HBPLU7QQhcasFQ9+Is1n9cvnq3Si1Jod1nI/Gd/vlYZu7dsv6g0LF VkRvIX4xaoPDtuBnJHTrr1TDHlMZ2VUVL+gvYTcFXNN9YYtWxsBfM/4+sFxwim69 +nZzHAeoB4a+4VGhfAkkfgJTpkn4OoNw24fsNwErioglswMypWtX5/f4JZs3aMHl akGcDdGIk3Wz2S/j1xu/XQeoKpeFV8w/3ONjcsyPWgjsewvrwonQ/YkIaSaSGkaG C/fiJnY+FxvImJK+v+p9D+KOtlMQh6g= -----END CERTIFICATE-----Generated at Sat Sep 26 07:25:06 2026 by rpki-client