$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa File: 1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa (raw, json) Hash identifier: eS8F8DeYjG2O7zWOFaAllF6PwHXHW55LxW8vR+0xX+4= Subject key identifier: B2:D6:95:28:17:CD:38:D4:68:74:FF:33:DB:C8:CA:9B:EA:53:D0:AC Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584FB6711A1907316B141AE58C00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 395382 IP address blocks: 40.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:1a:19:07:31:6b:14:1a:e5:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=0931b5aa-696b-4a4e-8c88-b7e105e771cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:97:a3:e9:99:8b:11:4f:49:15:9c:40:d5: 34:92:9b:61:06:40:6c:20:00:32:cf:d0:ac:59:75: 84:ea:e3:03:e2:43:ee:f3:e0:92:36:70:ec:c4:91: 65:45:b6:ce:2a:d6:9d:d3:10:55:4a:f0:48:2f:e9: 57:58:a6:3f:03:4c:22:71:9a:e2:1e:54:cb:71:a5: 21:9b:00:60:08:01:f7:68:a4:17:5f:34:a6:75:8b: d7:bf:8d:9e:78:cf:3e:eb:65:79:42:0b:8d:31:48: 64:60:7c:e1:0b:9c:ee:07:dd:51:ad:80:33:bc:9a: 38:a9:d3:af:c0:f4:95:fb:88:b8:53:58:06:78:76: 7f:62:ac:98:66:e7:08:b9:9b:7e:95:54:fe:de:0f: 1c:e0:6b:17:a0:22:da:79:ec:2b:f8:36:7d:07:0c: dc:fa:5e:f8:ef:ee:87:84:4b:82:51:be:7e:5f:8a: 7b:59:ca:a3:6c:0a:61:0a:4b:43:3b:cb:22:6c:47: 86:5a:6f:f9:63:5b:05:a3:fa:fa:a8:ca:9a:c1:cf: 54:43:cc:12:69:3c:6c:68:a8:0d:3a:f6:c6:59:34: ef:41:6e:be:15:ce:1f:92:96:f5:25:42:26:e8:5d: fb:97:35:d4:f1:22:e1:29:6a:91:a8:30:8d:98:f8: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D6:95:28:17:CD:38:D4:68:74:FF:33:DB:C8:CA:9B:EA:53:D0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:59:5d:29:70:d7:98:b4:65:ae:a3:5d:db:ae:8b:48:07:9e: 1f:29:22:e8:32:26:e5:7d:a5:82:90:63:cc:46:0d:34:ae:00: 65:99:5a:3a:fb:0a:a2:1e:4a:d0:22:02:7d:42:c9:04:df:a1: bc:6a:89:86:aa:87:64:90:1b:55:09:e9:20:58:20:b0:be:ef: 32:a3:c1:ec:24:13:79:3f:d7:a5:12:f6:f7:53:73:20:bf:21: 00:18:e6:2c:f4:bb:b4:b5:f8:a2:23:13:10:ff:31:17:9a:36: ac:23:67:d3:41:28:88:0a:3c:3f:2d:9e:e4:f4:9f:cd:ba:71: 56:6b:87:e3:23:99:e2:6b:1d:57:6c:f3:c5:56:88:6f:70:65: 9c:05:ae:45:49:72:9b:16:3b:14:07:75:6b:3e:c8:cb:d2:b3: e1:9f:d0:9d:84:74:b6:74:9b:41:75:a1:c2:06:26:d8:16:6f: 7b:c8:c2:b7:15:88:6b:96:0e:45:95:02:ef:7d:34:4a:80:32: 7c:bf:09:0b:1e:ad:10:f0:21:43:2c:d8:0a:11:21:00:3c:d4: 57:44:8d:38:b6:76:6b:be:47:05:fe:a3:79:63:85:b2:7b:74: e3:e2:79:e8:bc:df:26:0c:09:57:c7:6a:e4:6c:77:43:d4:06: f0:55:60:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cRoZBzFrFBrljAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk MDkzMWI1YWEtNjk2Yi00YTRlLThjODgtYjdlMTA1ZTc3MWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR+Xo+mZixFPSRWcQNU0kpthBkBsIAAyz9Cs WXWE6uMD4kPu8+CSNnDsxJFlRbbOKtad0xBVSvBIL+lXWKY/A0wicZriHlTLcaUh mwBgCAH3aKQXXzSmdYvXv42eeM8+62V5QguNMUhkYHzhC5zuB91RrYAzvJo4qdOv wPSV+4i4U1gGeHZ/YqyYZucIuZt+lVT+3g8c4GsXoCLaeewr+DZ9Bwzc+l747+6H hEuCUb5+X4p7WcqjbAphCktDO8sibEeGWm/5Y1sFo/r6qMqawc9UQ8wSaTxsaKgN OvbGWTTvQW6+Fc4fkpb1JUIm6F37lzXU8SLhKWqRqDCNmPibaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLWlSgXzTjUaHT/M9vIypvqU9CsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMWZlZWZhOGEtNGFkZC0z MWEzLWJkNDUtZGMwOWJjNDI2YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdZXSlw15i0Za6jXduui0gHnh8pIugyJuV9pYKQY8xGDTSuAGWZWjr7 CqIeStAiAn1CyQTfobxqiYaqh2SQG1UJ6SBYILC+7zKjwewkE3k/16US9vdTcyC/ IQAY5iz0u7S1+KIjExD/MReaNqwjZ9NBKIgKPD8tnuT0n826cVZrh+MjmeJrHVds 88VWiG9wZZwFrkVJcpsWOxQHdWs+yMvSs+Gf0J2EdLZ0m0F1ocIGJtgWb3vIwrcV iGuWDkWVAu99NEqAMny/CQserRDwIUMs2AoRIQA81FdEjTi2dmu+RwX+o3ljhbJ7 dOPieei83yYMCVfHauRsd0PUBvBVYB4= -----END CERTIFICATE-----Generated at Sun Nov 15 20:44:07 2026 by rpki-client