$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa File: b36d5e8f-bac8-378b-8482-3e6f208fa162.roa (raw, json) Hash identifier: xxtRBl8Ggw/rS73gUiGunzxOgp8qsAyuhc2McEHC4Jc= Subject key identifier: 90:E3:55:BE:E6:76:E9:30:83:A7:22:D5:8C:AF:1A:3E:30:B0:81:72 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584E253F0B508FE471583DCAAE40 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 22065 IP address blocks: 40.143.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0b:50:8f:e4:71:58:3d:ca:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=8c41b64d-8e30-4350-98f9-55803230b3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:bb:c1:ea:33:3d:a7:f7:b3:99:26:55:ee: 29:f0:c8:e0:ae:0f:75:d7:53:1c:38:b7:de:20:ab: af:db:0e:cb:4c:6e:ef:3d:2c:22:d8:df:f4:f6:32: 87:3f:76:6e:be:95:dc:86:a8:4f:96:b4:57:79:15: eb:3f:f7:f6:1c:15:f3:da:a1:81:6c:0c:a3:27:2a: c3:f8:9f:e0:74:d6:e1:60:ce:80:a0:39:0d:56:ba: c9:1a:94:5b:46:ba:61:9c:52:5a:1c:84:e3:aa:90: 67:04:35:db:bb:ee:4f:70:ca:fb:ab:08:68:b8:35: 32:f9:56:48:01:54:ce:18:07:87:a6:7e:6b:ce:1e: d7:b4:d9:4e:c7:e8:61:ec:d1:fa:ab:66:38:89:1d: 1d:23:ca:6b:e5:fb:58:85:79:65:43:74:80:a5:38: 16:67:3d:4a:f7:2b:bb:6e:50:a1:8b:4d:ab:2e:91: 78:ad:d1:09:7e:25:55:cc:69:b2:26:c7:34:a0:ad: 90:7c:39:d7:3d:3f:40:a1:77:3d:c1:9c:25:33:e7: 0b:40:92:09:fe:e1:f5:8e:16:78:af:23:77:84:34: 01:2e:c7:e6:20:9a:51:2f:19:a8:09:93:94:a4:d5: d0:a7:6a:00:ba:3d:45:52:21:4a:69:9f:81:23:03: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E3:55:BE:E6:76:E9:30:83:A7:22:D5:8C:AF:1A:3E:30:B0:81:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:10:2e:30:66:29:dc:12:c4:cf:bd:9b:ed:fe:da:ef:53:d5: 4a:87:7d:93:3e:5b:24:a4:40:d5:6f:2f:0c:b0:32:0b:38:5d: b5:92:f2:c6:ab:65:23:2d:86:59:15:cb:7c:b4:5c:d8:ac:a5: 1c:86:6c:e1:60:64:61:63:97:5d:e6:b6:11:69:e3:a4:45:b0: 1e:38:21:24:22:3c:3b:93:43:69:bf:a1:70:9f:b3:47:61:43: 34:31:e8:6e:0c:1f:e2:56:95:25:2c:8f:fe:36:b3:71:a8:cd: 5e:35:c3:24:c9:c3:38:18:90:60:27:ab:dd:74:2c:17:d5:ce: b5:db:2f:c9:73:1b:51:7d:79:63:f7:82:20:34:99:43:f6:7e: 25:87:4b:ef:1f:f2:c9:43:e9:ac:46:09:33:1b:3b:8c:a5:3b: 46:f0:31:76:98:fe:73:73:bc:de:47:10:7a:86:82:bd:d7:29: 6f:40:79:57:59:46:ff:14:e2:0d:76:45:f5:c3:d6:38:07:db: 38:3e:0a:e8:e1:48:16:45:f4:14:03:85:b1:9d:7a:0a:fe:70: 24:d7:79:53:ff:65:f5:f1:fd:76:e9:0e:cb:00:0e:1d:16:bd: b1:67:ab:9c:fe:06:d8:cb:bb:f3:33:44:15:b2:b6:90:ca:ac: 6b:9e:0a:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwtQj+RxWD3KrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk OGM0MWI2NGQtOGUzMC00MzUwLTk4ZjktNTU4MDMyMzBiM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+i7weozPaf3s5kmVe4p8Mjgrg9111McOLfe IKuv2w7LTG7vPSwi2N/09jKHP3ZuvpXchqhPlrRXeRXrP/f2HBXz2qGBbAyjJyrD +J/gdNbhYM6AoDkNVrrJGpRbRrphnFJaHITjqpBnBDXbu+5PcMr7qwhouDUy+VZI AVTOGAeHpn5rzh7XtNlOx+hh7NH6q2Y4iR0dI8pr5ftYhXllQ3SApTgWZz1K9yu7 blChi02rLpF4rdEJfiVVzGmyJsc0oK2QfDnXPT9AoXc9wZwlM+cLQJIJ/uH1jhZ4 ryN3hDQBLsfmIJpRLxmoCZOUpNXQp2oAuj1FUiFKaZ+BIwPeRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDjVb7mdukwg6ci1YyvGj4wsIFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYjM2ZDVlOGYtYmFjOC0z NzhiLTg0ODItM2U2ZjIwOGZhMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI8dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwQLjBmKdwSxM+9m+3+2u9T1UqHfZM+WySkQNVvLwywMgs4XbWS8sar ZSMthlkVy3y0XNispRyGbOFgZGFjl13mthFp46RFsB44ISQiPDuTQ2m/oXCfs0dh QzQx6G4MH+JWlSUsj/42s3GozV41wyTJwzgYkGAnq910LBfVzrXbL8lzG1F9eWP3 giA0mUP2fiWHS+8f8slD6axGCTMbO4ylO0bwMXaY/nNzvN5HEHqGgr3XKW9AeVdZ Rv8U4g12RfXD1jgH2zg+CujhSBZF9BQDhbGdegr+cCTXeVP/ZfXx/XbpDssADh0W vbFnq5z+BtjLu/MzRBWytpDKrGueCjU= -----END CERTIFICATE-----Generated at Sat Jun 13 18:32:10 2026 by rpki-client