$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa File: c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa (raw, json) Hash identifier: t61f4mx3b/MKfOqrbZXaXHsQ7uI/sVrNWo0AP/RHQy0= Subject key identifier: 99:C6:1D:13:3F:21:24:A4:00:02:D5:E7:BF:01:E3:CD:D7:84:58:8F Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584E94EA5C114D3A1639FC1BD2C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 11290 IP address blocks: 199.102.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:5c:11:4d:3a:16:39:fc:1b:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=cb4145af-8bca-4bb2-bc49-31ec5a5ff071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:6c:20:cd:0d:67:a7:4e:8a:ee:79:7f:57: 2e:4d:e6:1b:fd:d1:64:9a:47:65:d2:2a:3f:1e:59: 59:15:3d:be:50:51:cf:70:1a:32:35:e3:57:57:18: ec:67:88:4f:8d:ae:47:15:b2:bd:8f:c1:37:15:2c: 5f:3c:b3:ca:ea:14:6c:b7:c7:cf:f7:de:4e:fb:f6: 22:b9:04:b2:8a:e4:87:ac:6d:96:25:46:11:71:fe: de:2d:de:d0:ad:7c:c4:78:76:16:f9:b9:39:2f:f7: dc:50:e7:7e:20:3d:37:60:f5:b8:a5:ca:30:c4:b8: 28:94:d5:08:3c:aa:8c:1e:39:71:79:28:fe:b1:21: 9e:e8:08:11:05:b4:77:92:28:5b:83:0b:14:1c:9d: ae:b0:3a:c9:f4:0a:64:11:42:40:1c:8e:88:62:87: 39:d2:8d:35:66:7f:c8:2f:7f:fd:5b:fa:a6:01:f7: cf:5b:d9:15:89:c2:98:a6:55:9b:4a:ef:8e:b6:e6: 6e:53:96:6d:c5:de:87:e9:57:da:0d:65:ba:01:e2: b0:77:65:85:e0:94:62:4a:47:23:22:eb:48:08:97: f4:e6:5f:87:bf:c0:99:76:07:cf:0c:9b:d0:ff:22: 1a:74:de:35:e3:d9:07:7b:57:6f:4c:cd:90:57:ef: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:1D:13:3F:21:24:A4:00:02:D5:E7:BF:01:E3:CD:D7:84:58:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.102.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0b:28:32:a0:b3:5b:9f:b5:79:3c:6b:1a:7f:95:3e:cb:90: 2d:fc:31:cc:18:76:d5:19:8c:fb:9f:44:b1:92:17:14:80:0d: 38:af:55:76:91:0d:10:6c:5c:3d:7e:9c:fd:f5:ec:7c:6a:42: f5:c1:05:81:fa:f7:f0:a4:92:2e:8c:db:55:3f:dc:bd:71:ad: 4e:4c:e5:91:4d:af:1d:c2:aa:9f:8f:fd:76:17:17:7e:90:4f: 68:8a:3c:96:89:34:87:a8:b5:c3:7b:26:55:8a:ca:09:1a:f9: 3b:35:1f:53:67:2c:a1:fa:48:83:b5:75:32:db:62:51:44:0b: c1:53:d7:98:fc:72:14:73:8a:40:01:31:a2:ce:2f:79:63:98: 0f:12:43:c3:3e:da:70:6e:b5:92:34:9f:28:73:d4:e0:65:1a: 5f:78:18:3c:9c:33:f4:a6:59:e8:61:cb:8c:89:c2:ed:75:08: 5d:df:c0:49:b8:0d:e8:1a:5a:f1:1a:b0:f1:94:db:da:7a:c6: fd:65:b0:57:e5:77:f5:21:0b:34:a4:f7:6b:cd:92:70:81:66: ad:53:70:be:af:ad:75:6c:eb:f8:a7:fd:9b:18:d9:74:9b:2d: 65:db:b7:9b:e5:9e:88:a2:98:30:5f:4c:60:3f:70:d2:95:ff: f0:f0:58:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lwRTToWOfwb0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk Y2I0MTQ1YWYtOGJjYS00YmIyLWJjNDktMzFlYzVhNWZmMDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihZsIM0NZ6dOiu55f1cuTeYb/dFkmkdl0io/ HllZFT2+UFHPcBoyNeNXVxjsZ4hPja5HFbK9j8E3FSxfPLPK6hRst8fP995O+/Yi uQSyiuSHrG2WJUYRcf7eLd7QrXzEeHYW+bk5L/fcUOd+ID03YPW4pcowxLgolNUI PKqMHjlxeSj+sSGe6AgRBbR3kihbgwsUHJ2usDrJ9ApkEUJAHI6IYoc50o01Zn/I L3/9W/qmAffPW9kVicKYplWbSu+OtuZuU5Ztxd6H6VfaDWW6AeKwd2WF4JRiSkcj IutICJf05l+Hv8CZdgfPDJvQ/yIadN4149kHe1dvTM2QV+9HTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnGHRM/ISSkAALV578B483XhFiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzQ0NTZiYzgtMGQ5MS0z YThiLTk4YzQtMTlmZjA1NjhkNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2bIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0LKDKgs1uftXk8axp/lT7LkC38McwYdtUZjPufRLGSFxSADTivVXaR DRBsXD1+nP317HxqQvXBBYH69/Ckki6M21U/3L1xrU5M5ZFNrx3Cqp+P/XYXF36Q T2iKPJaJNIeotcN7JlWKygka+Ts1H1NnLKH6SIO1dTLbYlFEC8FT15j8chRzikAB MaLOL3ljmA8SQ8M+2nButZI0nyhz1OBlGl94GDycM/SmWehhy4yJwu11CF3fwEm4 DegaWvEasPGU29p6xv1lsFfld/UhCzSk92vNknCBZq1TcL6vrXVs6/in/ZsY2XSb LWXbt5vlnoiimDBfTGA/cNKV//DwWNU= -----END CERTIFICATE-----Generated at Fri Jul 24 18:32:15 2026 by rpki-client