$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa File: e4c840a6-7c44-37cd-8d84-325c36434df5.roa (raw, json) Hash identifier: CZK2D/un/SgJbzUEACAoAdIqMB6L2BP0Q8rie64z8Zg= Subject key identifier: 67:22:5C:D3:99:BE:D9:4B:9B:67:CB:8C:BF:F2:26:C5:F9:78:9D:A7 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584F2EED0AA3E858A96D141D4C40 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 395437 IP address blocks: 143.55.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0a:a3:e8:58:a9:6d:14:1d:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=b78305c1-806b-4286-a5a3-189dc6f28b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:56:a6:da:12:bd:c1:e3:ea:66:ab:95:0f: 4a:13:6c:ea:6d:5f:0d:17:d2:ef:6c:2a:10:81:8d: 1e:46:ff:bb:24:b6:fa:7f:28:f1:4b:d7:92:cd:f4: db:7a:e1:bb:04:44:97:b2:31:9d:d7:34:3f:7d:9d: 07:7f:9b:74:24:51:ce:c6:e9:9e:74:c1:8e:ca:6e: 5a:7d:d6:7e:3f:67:17:95:ed:c0:a7:75:cb:6e:5c: f5:48:2f:c7:5c:4a:d1:69:76:57:e5:e5:aa:36:3e: e6:4d:3c:a7:c6:d3:5f:66:28:8c:ef:28:b2:45:da: 98:af:07:31:ec:a4:d3:5c:58:62:1e:32:65:c3:3e: 64:67:64:10:a7:6d:0c:d9:3c:99:5e:e1:a3:6e:fd: 10:c0:27:30:bf:83:10:63:3e:d1:d0:70:f4:3f:87: 57:2a:bd:b7:37:af:04:76:e1:5f:42:af:45:62:30: ae:e7:8e:c5:d0:8c:80:58:27:67:2d:8f:c3:10:a1: 72:86:25:e8:41:ea:c5:fa:47:92:8d:c2:56:85:58: a6:7d:64:90:b1:04:a6:97:6d:fa:82:53:73:f2:15: 9d:7a:0f:61:c0:f1:d7:12:da:56:85:8b:52:43:22: 57:42:41:db:fe:f6:3f:3d:73:6c:c4:be:b9:7e:2e: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:5C:D3:99:BE:D9:4B:9B:67:CB:8C:BF:F2:26:C5:F9:78:9D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 143.55.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fd:95:a5:00:4d:29:f3:b0:62:4b:8f:d0:40:c2:31:58:fb: a9:a5:86:78:52:59:62:75:ce:49:46:30:b2:56:d1:df:7e:30: 26:a8:b1:3f:0f:99:87:99:a4:58:8b:99:f4:bf:5a:b2:9a:89: 49:f3:1b:9c:61:61:07:79:4b:84:1e:1c:9e:c6:1e:ed:95:cc: 88:df:94:60:79:9a:28:77:51:cd:27:f0:7d:5b:95:21:52:41: ae:80:47:80:89:26:af:3d:5c:d7:f0:1c:5c:32:f3:ba:ed:e4: c3:22:de:a5:12:05:c4:2f:83:6d:87:f4:04:54:fe:63:0f:db: cc:17:4b:12:f7:c3:3f:9f:fe:46:bd:0e:df:d3:a9:9e:87:01: e9:be:7f:32:5d:27:17:67:07:ef:4a:04:e8:74:8d:48:ce:66: a8:db:02:f2:e1:f3:10:34:ec:40:63:d6:63:f4:3d:2c:7a:3b: ab:6b:73:36:32:14:2b:75:d1:a3:32:22:58:62:9c:50:fc:25: e6:b7:e0:09:31:50:f4:10:74:e9:4a:55:0b:56:f4:5f:9c:23: 74:17:73:71:43:eb:34:75:da:41:06:c9:e7:90:8b:01:cc:73: d5:47:76:d6:e8:2e:fd:70:94:46:dd:99:15:45:c3:18:9d:e4: 85:90:38:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Qqj6FipbRQdTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk Yjc4MzA1YzEtODA2Yi00Mjg2LWE1YTMtMTg5ZGM2ZjI4YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE1WptoSvcHj6marlQ9KE2zqbV8NF9LvbCoQ gY0eRv+7JLb6fyjxS9eSzfTbeuG7BESXsjGd1zQ/fZ0Hf5t0JFHOxumedMGOym5a fdZ+P2cXle3Ap3XLblz1SC/HXErRaXZX5eWqNj7mTTynxtNfZiiM7yiyRdqYrwcx 7KTTXFhiHjJlwz5kZ2QQp20M2TyZXuGjbv0QwCcwv4MQYz7R0HD0P4dXKr23N68E duFfQq9FYjCu547F0IyAWCdnLY/DEKFyhiXoQerF+keSjcJWhVimfWSQsQSml236 glNz8hWdeg9hwPHXEtpWhYtSQyJXQkHb/vY/PXNsxL65fi6+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGciXNOZvtlLm2fLjL/yJsX5eJ2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvZTRjODQwYTYtN2M0NC0z N2NkLThkODQtMzI1YzM2NDM0ZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjzfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj9laUATSnzsGJLj9BAwjFY+6mlhnhSWWJ1zklGMLJW0d9+MCaosT8P mYeZpFiLmfS/WrKaiUnzG5xhYQd5S4QeHJ7GHu2VzIjflGB5mih3Uc0n8H1blSFS Qa6AR4CJJq89XNfwHFwy87rt5MMi3qUSBcQvg22H9ARU/mMP28wXSxL3wz+f/ka9 Dt/TqZ6HAem+fzJdJxdnB+9KBOh0jUjOZqjbAvLh8xA07EBj1mP0PSx6O6trczYy FCt10aMyIlhinFD8Jea34AkxUPQQdOlKVQtW9F+cI3QXc3FD6zR12kEGyeeQiwHM c9VHdtboLv1wlEbdmRVFwxid5IWQOCM= -----END CERTIFICATE-----Generated at Tue Sep 22 09:05:31 2026 by rpki-client