$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa File: c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa (raw, json) Hash identifier: 3rRWN7rQYKnajQMpJt3+Y7amzQzk7fUb7W2cG5+5YW8= Subject key identifier: 90:AB:66:95:3C:A8:D1:07:B1:B2:09:09:9A:73:ED:A7:87:06:66:75 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584DB4A5857E86598783C9CE4940 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 11290 IP address blocks: 199.102.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:85:7e:86:59:87:83:c9:ce:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=d11c3c00-fe6c-4641-84a1-cab2a3218c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:88:f9:33:92:21:7a:5c:c7:49:d3:da:76: a4:4d:ac:4d:c2:a1:0d:32:bc:bd:c3:44:68:f0:aa: a0:a9:30:66:2c:6a:32:f2:68:98:e3:a4:9f:52:9e: d6:f6:37:71:1c:89:57:ad:07:c8:9f:5e:92:41:c6: 4b:7e:32:be:5c:58:1b:bb:5a:4c:ad:76:09:16:0b: 63:14:12:7c:f9:72:9c:e7:e7:c5:54:08:d0:f4:95: 91:48:29:a2:a6:cc:72:15:72:85:4e:b4:32:23:3f: e8:09:f2:46:18:fc:97:af:c7:f6:a5:51:40:47:ec: 67:78:70:4f:7b:33:db:f5:02:11:2b:69:4a:ed:f7: 08:dc:90:04:f7:a1:c7:d0:b4:a7:08:8a:60:57:b3: df:66:53:5c:7f:4c:44:c6:34:87:54:a9:b6:61:1c: 22:eb:a4:e9:d2:31:c0:7b:82:b5:5b:79:cb:4f:1f: b9:42:66:3a:22:cc:ea:a1:f9:30:ba:49:c0:f4:88: 1d:54:b1:34:c9:1d:2e:c6:6e:b9:31:a0:9d:96:4e: 40:95:3e:4b:9f:41:d4:d7:78:84:5b:79:78:6f:be: 5f:5d:fc:ea:40:00:42:65:31:67:31:2d:2d:78:48: e0:56:3d:d9:d0:b5:22:c9:c7:ca:97:e0:b7:9e:fc: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AB:66:95:3C:A8:D1:07:B1:B2:09:09:9A:73:ED:A7:87:06:66:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.102.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3e:9d:9c:d8:b0:0f:4e:ac:95:00:40:05:ad:a6:b2:89:b4: 6d:04:01:96:c1:b3:3a:fe:bf:43:ae:03:d1:2f:95:f7:28:6b: 18:9f:7c:cc:f5:14:24:9c:3f:4b:45:da:5b:72:e8:d3:51:b0: bb:1e:e2:e0:fe:27:da:d5:33:05:d2:b0:d5:f3:59:43:57:15: fb:5d:54:ef:d2:84:ef:aa:0f:01:40:ab:c8:46:68:c5:25:0a: c1:92:a6:3c:a2:de:3f:5e:19:79:2a:04:d5:a1:7f:ab:ca:cb: c3:65:49:2e:0b:77:7f:3c:54:8f:47:8c:88:6c:56:e0:65:01: 9a:ea:9a:ca:f4:6d:2f:4c:41:47:25:2e:26:92:e5:5e:98:7f: 39:d1:ad:8e:6f:c5:e8:a3:6c:31:d0:18:56:46:c3:78:c9:8a: a3:33:43:d5:6a:79:2b:4b:37:d0:52:73:7f:a1:9f:b2:6c:3b: d0:72:dc:b5:f3:9e:3c:55:bd:f1:43:e3:3b:27:63:5a:47:64: 61:64:a0:0e:a7:a9:6c:52:c9:7c:44:2b:d6:cb:4f:9e:5c:f2: f0:e9:4b:4a:3c:4e:e7:4d:7d:64:8a:31:89:1e:cc:ac:23:fd: dc:3f:0e:9d:a9:3f:94:2d:f2:f7:f9:49:a0:be:2e:92:80:31: b3:ee:92:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYV+hlmHg8nOSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDExYzNjMDAtZmU2Yy00NjQxLTg0YTEtY2FiMmEzMjE4YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDaI+TOSIXpcx0nT2nakTaxNwqENMry9w0Ro 8KqgqTBmLGoy8miY46SfUp7W9jdxHIlXrQfIn16SQcZLfjK+XFgbu1pMrXYJFgtj FBJ8+XKc5+fFVAjQ9JWRSCmipsxyFXKFTrQyIz/oCfJGGPyXr8f2pVFAR+xneHBP ezPb9QIRK2lK7fcI3JAE96HH0LSnCIpgV7PfZlNcf0xExjSHVKm2YRwi66Tp0jHA e4K1W3nLTx+5QmY6IszqofkwuknA9IgdVLE0yR0uxm65MaCdlk5AlT5Ln0HU13iE W3l4b75fXfzqQABCZTFnMS0teEjgVj3Z0LUiycfKl+C3nvzDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCrZpU8qNEHsbIJCZpz7aeHBmZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzQ0NTZiYzgtMGQ5MS0z YThiLTk4YzQtMTlmZjA1NjhkNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2bIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs+nZzYsA9OrJUAQAWtprKJtG0EAZbBszr+v0OuA9EvlfcoaxiffMz1 FCScP0tF2lty6NNRsLse4uD+J9rVMwXSsNXzWUNXFftdVO/ShO+qDwFAq8hGaMUl CsGSpjyi3j9eGXkqBNWhf6vKy8NlSS4Ld388VI9HjIhsVuBlAZrqmsr0bS9MQUcl LiaS5V6YfznRrY5vxeijbDHQGFZGw3jJiqMzQ9VqeStLN9BSc3+hn7JsO9By3LXz njxVvfFD4zsnY1pHZGFkoA6nqWxSyXxEK9bLT55c8vDpS0o8TudNfWSKMYkezKwj /dw/Dp2pP5Qt8vf5SaC+LpKAMbPukos= -----END CERTIFICATE-----Generated at Wed May 13 04:01:56 2026 by rpki-client