$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa File: ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa (raw, json) Hash identifier: cPnEqcSgc06UzDIdsB5IncieAwcaaU9571TFxkntuWo= Subject key identifier: 0D:77:3B:46:68:BD:16:2D:D8:37:5C:ED:0A:EB:1A:42:1D:E8:03:89 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584DBA3B00DD8A64431A13D9AD00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 11290 IP address blocks: 24.54.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:00:dd:8a:64:43:1a:13:d9:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=551d0210-23a7-4200-907f-74c5facb2540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:51:00:5b:46:f4:9e:5a:b3:fe:c7:59:b1: 92:ee:2e:72:c7:0f:96:f6:f1:21:e7:6f:48:7a:af: b2:fc:0b:78:0f:ee:6d:b0:c1:6e:62:b3:21:24:03: ac:b0:c5:bb:ec:92:6c:5b:d5:17:ff:2f:67:75:67: 48:f3:ae:fc:a7:f9:25:f1:91:8b:25:ea:3a:19:26: 69:d1:15:a4:dd:ce:e2:0a:12:39:00:8a:0d:60:5c: f5:af:c7:5e:d7:56:86:94:6d:6b:25:a6:a9:32:26: ea:48:9d:7c:d8:a5:ca:82:7c:c0:85:e2:42:34:c9: a2:0b:29:19:12:94:4d:71:20:97:30:d6:05:b4:62: ba:2f:21:5c:f7:90:d9:2f:36:9e:4b:02:30:17:4e: c7:76:9e:cc:2e:8a:22:e7:dd:ff:7c:bb:f0:79:8e: e1:90:94:a3:99:85:26:6b:a8:cb:b3:54:4b:31:9b: 1d:b2:f8:83:41:44:29:a4:91:36:5f:b9:70:6c:06: 8d:d2:e7:9b:a9:90:b2:0b:48:b2:8c:1a:b3:30:d6: d1:ff:16:6d:99:0c:69:ed:8c:a0:7f:26:9a:ff:3c: 18:19:0d:f3:e1:5f:92:72:e7:1f:63:5f:5f:9a:35: a1:38:e0:03:d6:df:ac:a1:28:12:ce:4b:62:61:08: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:77:3B:46:68:BD:16:2D:D8:37:5C:ED:0A:EB:1A:42:1D:E8:03:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.54.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b3:d8:37:aa:ff:66:6c:1e:5b:f8:83:e7:6d:ce:d5:bf:e1: 9b:6e:bc:f0:68:cd:ef:cc:6a:e1:f7:65:02:53:17:b6:c0:2d: d4:23:86:be:72:21:be:80:90:84:ff:f4:ac:58:bd:66:08:31: b2:c3:f1:e1:c5:1b:2f:a5:5f:a0:ec:6a:9e:f0:e2:f2:0f:3e: 73:21:15:6e:ee:89:c4:62:b6:c6:a2:ec:11:f7:f8:4b:4b:3d: be:25:9d:7f:b1:ce:87:cd:dd:34:8f:84:b6:b8:26:e9:da:36: fb:58:3a:ae:1d:6a:24:44:cc:79:b1:dc:7f:4f:7e:99:49:a7: ec:0b:ff:27:e2:07:ea:19:af:94:e5:47:0b:e9:58:e6:6e:8c: ce:be:f8:db:2d:1a:58:a3:dc:ea:2f:9f:74:37:1d:a5:a3:c9: 8d:ad:ee:50:24:57:7b:24:c7:a6:eb:38:dc:ef:25:1c:ae:6a: b4:64:a3:73:15:b3:24:a7:75:4c:4a:b5:ad:90:6d:77:72:a6: 4c:d4:20:b6:34:30:cd:c4:67:6e:9d:5d:fa:57:50:dc:26:db: 92:e9:00:7b:3f:d5:ce:50:3c:90:cd:1c:dc:65:d9:8d:d8:ea: b2:27:ef:91:5c:a3:14:d9:32:48:ee:0f:44:89:ff:ed:f9:81: bc:6f:f9:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwDdimRDGhPZrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NTUxZDAyMTAtMjNhNy00MjAwLTkwN2YtNzRjNWZhY2IyNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKNRAFtG9J5as/7HWbGS7i5yxw+W9vEh529I eq+y/At4D+5tsMFuYrMhJAOssMW77JJsW9UX/y9ndWdI8678p/kl8ZGLJeo6GSZp 0RWk3c7iChI5AIoNYFz1r8de11aGlG1rJaapMibqSJ182KXKgnzAheJCNMmiCykZ EpRNcSCXMNYFtGK6LyFc95DZLzaeSwIwF07Hdp7MLooi593/fLvweY7hkJSjmYUm a6jLs1RLMZsdsviDQUQppJE2X7lwbAaN0uebqZCyC0iyjBqzMNbR/xZtmQxp7Yyg fyaa/zwYGQ3z4V+ScucfY19fmjWhOOAD1t+soSgSzktiYQi8RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA13O0ZovRYt2Ddc7QrrGkId6AOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmZlNjBmYTktMzllMy0z OGY2LWIzODctZjMyMDZiMGY2MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGDYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyz2Deq/2ZsHlv4g+dtztW/4ZtuvPBoze/MauH3ZQJTF7bALdQjhr5y Ib6AkIT/9KxYvWYIMbLD8eHFGy+lX6Dsap7w4vIPPnMhFW7uicRitsai7BH3+EtL Pb4lnX+xzofN3TSPhLa4JunaNvtYOq4daiREzHmx3H9PfplJp+wL/yfiB+oZr5Tl RwvpWOZujM6++NstGlij3Oovn3Q3HaWjyY2t7lAkV3skx6brONzvJRyuarRko3MV sySndUxKta2QbXdypkzUILY0MM3EZ26dXfpXUNwm25LpAHs/1c5QPJDNHNxl2Y3Y 6rIn75FcoxTZMkjuD0SJ/+35gbxv+eo= -----END CERTIFICATE-----Generated at Wed May 13 07:30:52 2026 by rpki-client