$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa File: d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa (raw, json) Hash identifier: aPlNmwyOAnRgEgvLn7CqhmlSsn4X340EYIODacWa2Ak= Subject key identifier: 24:93:ED:D0:9D:CF:3C:13:47:2E:40:9D:D6:46:24:56:E5:A9:0D:28 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584DB4A585E0A3954C8C0543F280 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 11290 IP address blocks: 162.252.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:85:e0:a3:95:4c:8c:05:43:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=acc40773-d771-44f0-9fdc-bca068099256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:78:18:63:e9:96:71:9f:8c:d3:17:36:26: fb:a6:e6:b7:65:e9:04:fb:8b:6e:85:9b:10:0e:75: ab:38:19:14:07:2b:32:36:10:51:c8:7d:0d:95:c1: 7a:81:22:24:2c:3e:3e:8d:ba:a6:dc:72:05:08:17: 3f:d7:43:0b:92:d3:5a:b7:3e:d7:41:1c:7d:84:4d: cd:9b:88:77:82:22:47:6a:b2:10:01:04:c1:8e:b2: fe:69:bd:8a:15:e7:16:9e:00:a3:8e:e3:84:86:ff: f3:5c:1d:3b:77:d4:14:a6:48:0f:4d:c5:c1:cd:72: f5:3d:ce:6b:5a:e8:38:51:74:39:42:8c:e7:59:48: bc:be:e4:c7:68:59:dd:02:c5:05:a6:0e:f1:86:1b: 7e:51:c0:5f:5e:22:a6:25:25:a9:35:e4:45:6a:41: 62:2a:7d:5c:bd:99:22:d6:cf:0c:20:79:48:ab:dc: f3:62:48:fc:40:40:79:79:a0:64:54:7c:b2:13:07: 95:9d:4e:ea:4e:08:59:b8:48:d2:e5:76:80:b6:c1: 9a:47:2b:78:ee:7e:c8:77:f0:34:e3:20:52:78:6b: 0e:fd:5b:e7:be:b5:e3:75:9b:31:c4:66:9f:65:06: 67:97:a6:af:48:44:fc:a7:82:45:f3:4c:0d:e8:2e: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:ED:D0:9D:CF:3C:13:47:2E:40:9D:D6:46:24:56:E5:A9:0D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/d7bc32a7-4c02-3797-ae9c-6cb448b46915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.252.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b2:c9:59:7e:11:65:0d:cd:5b:a2:13:8f:30:ac:fe:af:d4: ba:fc:07:62:d4:5f:cb:97:51:5a:7d:0f:dd:60:1e:11:02:70: 63:8d:0c:80:f1:b6:16:af:1d:f5:7c:9b:5f:bf:b6:7b:2e:27: 4a:47:0e:96:64:f4:91:eb:75:90:eb:b6:39:42:5b:a4:e6:69: 9d:92:b5:26:a9:07:38:43:96:3d:2d:b5:53:b2:e4:83:d4:3a: e1:0f:1a:76:25:ab:a4:d1:3a:56:ea:24:0a:61:83:8b:fb:86: 39:67:c9:84:3d:b3:d0:d1:d7:7b:47:1e:1f:4f:40:c3:32:ce: dd:bb:56:ac:71:06:26:23:cf:00:d1:42:88:fe:1b:60:6f:69: c0:1f:7b:3d:93:a8:8a:21:7d:c4:12:43:9d:88:7b:07:f9:52: b0:d0:f0:c8:8d:0c:67:4b:7b:56:74:3b:08:a1:91:33:e0:58: cb:79:bc:0e:b6:5b:bf:11:c9:2e:4d:74:be:5a:c3:38:9b:d6: 6d:a0:f5:d5:44:65:72:00:a2:25:07:d5:cc:b3:21:09:e8:5d: cd:8d:21:f2:1c:1a:4f:5b:17:28:26:50:f1:10:17:7d:5a:f7: 9a:5a:85:40:e7:3e:53:6d:97:2a:8c:1f:32:ae:1a:9b:6d:c7: 10:fb:6c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYXgo5VMjAVD8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YWNjNDA3NzMtZDc3MS00NGYwLTlmZGMtYmNhMDY4MDk5MjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvp4GGPplnGfjNMXNib7pua3ZekE+4tuhZsQ DnWrOBkUBysyNhBRyH0NlcF6gSIkLD4+jbqm3HIFCBc/10MLktNatz7XQRx9hE3N m4h3giJHarIQAQTBjrL+ab2KFecWngCjjuOEhv/zXB07d9QUpkgPTcXBzXL1Pc5r Wug4UXQ5QoznWUi8vuTHaFndAsUFpg7xhht+UcBfXiKmJSWpNeRFakFiKn1cvZki 1s8MIHlIq9zzYkj8QEB5eaBkVHyyEweVnU7qTghZuEjS5XaAtsGaRyt47n7Id/A0 4yBSeGsO/VvnvrXjdZsxxGafZQZnl6avSET8p4JF80wN6C5nbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCST7dCdzzwTRy5AndZGJFblqQ0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZDdiYzMyYTctNGMwMi0z Nzk3LWFlOWMtNmNiNDQ4YjQ2OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOyyVl+EWUNzVuiE48wrP6v1Lr8B2LUX8uXUVp9D91gHhECcGONDIDx thavHfV8m1+/tnsuJ0pHDpZk9JHrdZDrtjlCW6TmaZ2StSapBzhDlj0ttVOy5IPU OuEPGnYlq6TROlbqJAphg4v7hjlnyYQ9s9DR13tHHh9PQMMyzt27VqxxBiYjzwDR Qoj+G2BvacAfez2TqIohfcQSQ52Iewf5UrDQ8MiNDGdLe1Z0OwihkTPgWMt5vA62 W78RyS5NdL5awzib1m2g9dVEZXIAoiUH1cyzIQnoXc2NIfIcGk9bFygmUPEQF31a 95pahUDnPlNtlyqMHzKuGpttxxD7bAM= -----END CERTIFICATE-----Generated at Wed May 13 05:20:12 2026 by rpki-client