$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa File: c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa (raw, json) Hash identifier: UaG9ziAxNtcd96Zs6bxVSL9kE317RaVz39iSMTEOG0s= Subject key identifier: 74:C8:61:7A:02:4E:C0:BF:F6:00:A0:56:C4:4B:4C:E6:54:E4:57:1B Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584FB67119F39BBA6689783E4880 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 63189 IP address blocks: 40.143.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:19:f3:9b:ba:66:89:78:3e:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=38ec18f1-2bf3-4989-845f-fe0c16a2deae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:30:fc:22:20:b5:30:1b:6d:4a:e0:b5:13: 3b:cb:1b:e4:5d:8b:57:b4:4c:6e:57:e1:78:ac:f3: da:84:35:4e:96:7c:53:f5:e1:b0:9f:c0:b7:18:f9: 0e:b6:b2:75:66:43:00:85:a9:40:43:81:2d:5b:f7: 3c:76:af:a4:b1:f4:bc:62:ba:0a:28:06:46:c9:5e: 99:78:18:b1:ef:86:b8:42:01:98:d0:5b:74:f0:5e: 92:9d:65:a1:16:6d:29:ea:7f:a6:d8:f6:cb:12:e8: 27:23:4c:8e:90:97:21:78:51:f4:f6:f2:3b:3d:4d: 80:76:0d:df:2b:fb:c0:09:87:3d:ad:36:54:bb:7c: d6:7c:f5:53:9b:ec:19:f9:c5:5b:61:dc:68:17:5b: 74:09:9c:b8:33:e1:0c:b6:1e:38:97:ee:d5:19:d3: 50:51:87:9c:2f:2d:36:ce:81:fc:1a:a0:23:d4:63: 52:d5:2f:e7:42:e8:70:61:82:bf:cb:09:34:16:90: 40:0a:3d:66:04:c6:77:e3:d9:d8:73:f6:95:04:b5: 1c:74:fb:b8:7d:9c:44:8f:cf:09:05:9e:41:36:88: 5f:ea:dd:24:b0:8a:36:a1:ea:5a:16:ec:92:be:88: a0:16:58:0e:05:6e:cf:ce:86:c4:13:51:42:d5:a8: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:61:7A:02:4E:C0:BF:F6:00:A0:56:C4:4B:4C:E6:54:E4:57:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:08:68:c1:25:86:03:0f:d8:82:2e:1d:12:2a:50:48:20:67: 6b:33:bf:99:73:86:07:29:6c:ac:d1:a3:bd:cf:38:bd:ca:81: f4:f6:b2:67:0a:cd:71:04:04:1a:3c:48:f6:b9:41:42:f1:c6: 84:cd:08:a0:18:1b:ed:9f:47:d8:8d:20:ae:40:7b:18:6c:9c: d0:11:a0:d3:4d:01:ab:2f:8d:23:3b:9a:f0:34:0f:38:40:57: c9:96:5f:60:d9:90:5c:7e:d7:35:19:c6:e6:4b:b6:ab:ca:0f: b5:99:4a:1c:d7:35:36:29:23:f5:e1:f5:f0:28:f4:79:2c:6f: 22:bc:54:12:e5:5a:e2:01:82:aa:57:3c:5b:8b:59:87:d8:ee: ef:fc:96:a7:f6:2d:77:ef:b5:43:1c:08:f0:0c:2b:b5:6c:d8: a8:6b:b9:91:c6:66:46:51:f4:b4:e3:9a:d3:69:5b:15:88:56: 9b:2b:7f:5c:cc:8f:d5:a7:93:ed:c9:1d:19:7c:31:86:94:23: 92:97:89:a3:0f:42:c1:c7:df:2f:88:f7:09:ba:15:8b:c6:77: ab:38:79:07:c2:2b:ff:0b:dc:05:ba:b0:aa:a4:c2:84:4c:cc: c6:ff:ec:c4:8d:c6:69:9b:ab:39:d0:af:d3:a8:bd:1a:3b:74: 55:e8:0f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cRnzm7pmiXg+SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk MzhlYzE4ZjEtMmJmMy00OTg5LTg0NWYtZmUwYzE2YTJkZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoww/CIgtTAbbUrgtRM7yxvkXYtXtExuV+F4 rPPahDVOlnxT9eGwn8C3GPkOtrJ1ZkMAhalAQ4EtW/c8dq+ksfS8YroKKAZGyV6Z eBix74a4QgGY0Ft08F6SnWWhFm0p6n+m2PbLEugnI0yOkJcheFH09vI7PU2Adg3f K/vACYc9rTZUu3zWfPVTm+wZ+cVbYdxoF1t0CZy4M+EMth44l+7VGdNQUYecLy02 zoH8GqAj1GNS1S/nQuhwYYK/ywk0FpBACj1mBMZ349nYc/aVBLUcdPu4fZxEj88J BZ5BNohf6t0ksIo2oepaFuySvoigFlgOBW7PzobEE1FC1ajDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTIYXoCTsC/9gCgVsRLTOZU5FcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYzVkZDI4MWYtNGMzNi0z ZTFjLWI4NDEtZTJmYWJkZjMxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI+PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkIaMElhgMP2IIuHRIqUEggZ2szv5lzhgcpbKzRo73POL3KgfT2smcK zXEEBBo8SPa5QULxxoTNCKAYG+2fR9iNIK5AexhsnNARoNNNAasvjSM7mvA0DzhA V8mWX2DZkFx+1zUZxuZLtqvKD7WZShzXNTYpI/Xh9fAo9HksbyK8VBLlWuIBgqpX PFuLWYfY7u/8lqf2LXfvtUMcCPAMK7Vs2KhruZHGZkZR9LTjmtNpWxWIVpsrf1zM j9Wnk+3JHRl8MYaUI5KXiaMPQsHH3y+I9wm6FYvGd6s4eQfCK/8L3AW6sKqkwoRM zMb/7MSNxmmbqznQr9OovRo7dFXoD+Y= -----END CERTIFICATE-----Generated at Sun Nov 15 20:44:12 2026 by rpki-client