$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/d836b078-cfc3-3068-83bc-df582fe5c892.roa File: d836b078-cfc3-3068-83bc-df582fe5c892.roa (raw, json) Hash identifier: 92z5G8+gLtTAt+D3EyNcxMS1kk02x2mxOmhEDWQU7Nc= Subject key identifier: 97:C5:30:93:DC:B4:11:7D:16:71:B6:CB:D1:03:6A:0D:51:AA:18:F7 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584CB121CE4588397A6E1D6ABB80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/d836b078-cfc3-3068-83bc-df582fe5c892.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 11958 IP address blocks: 40.143.85.0/24 maxlen: 24 40.143.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:ce:45:88:39:7a:6e:1d:6a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=6ca2a8e2-0666-4c9b-98ec-417f64dfcb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:b8:79:7c:41:f9:13:52:8d:37:bb:bc:30: b0:1e:5d:3f:32:84:5c:e7:d8:92:ce:44:0b:96:a9: 47:c0:e5:13:3e:19:d9:72:be:60:6f:7a:b6:19:83: da:4d:8d:38:c2:8f:f9:fd:6e:ef:f8:c0:ec:ae:77: d1:51:5d:e8:79:ee:f1:10:25:e4:0e:18:50:62:10: f3:80:a4:31:5b:5e:ff:03:7b:fd:39:07:f2:9e:2d: cf:40:3c:75:bf:3f:8a:8f:f9:66:0f:e7:76:fd:37: 5c:cb:a7:87:f6:cb:fa:4c:59:56:9d:ad:5c:8a:c0: 57:1c:ac:b2:30:7c:d7:ad:a9:93:06:b4:27:c2:93: 2b:5e:3b:ae:40:6d:c0:b3:c5:f5:78:b1:eb:c5:41: 2d:f8:b4:8a:82:6d:37:c6:da:f3:fb:8f:9d:24:5c: 3c:c4:00:7e:85:3f:fe:b2:72:ec:a5:bd:74:06:3f: d9:87:38:2e:ab:d1:07:06:57:04:d0:08:57:0e:da: 8a:f8:53:50:f2:ca:02:44:1a:e5:c8:af:14:d7:24: b0:8c:83:02:53:49:a9:2d:8d:a8:4f:12:14:e8:23: 79:08:4c:81:fa:ba:ce:c9:f1:b7:26:bc:fb:2f:3f: bb:bb:73:ba:51:1d:4d:85:8b:65:10:6b:e7:ec:eb: e1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C5:30:93:DC:B4:11:7D:16:71:B6:CB:D1:03:6A:0D:51:AA:18:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/d836b078-cfc3-3068-83bc-df582fe5c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.85.0/24 40.143.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9e:4e:91:e6:87:d9:fb:cb:05:f6:4b:6e:0b:8d:37:b7:c8: 25:4a:aa:b1:8c:e9:8a:44:af:5e:1a:32:af:51:58:98:36:0d: 74:17:68:cf:80:43:09:87:f1:07:61:59:cc:97:d8:a7:7f:26: e8:13:2f:9c:32:ce:06:cf:68:d6:ca:c8:87:84:82:4d:e9:ef: 65:6d:15:b5:81:6d:ee:0e:d5:7c:8c:bf:ba:08:59:b5:a2:51: 2e:c6:fb:98:ca:e5:4b:cd:b4:54:bf:aa:42:eb:01:64:5e:f4: c8:8b:c5:5b:85:ef:fe:7e:60:ca:76:bb:4f:ec:4c:65:ee:d8: f4:15:1b:c3:0e:9e:18:a1:42:27:58:d3:e6:bf:6d:ec:67:27: 60:ab:7e:77:37:19:2c:be:f2:20:39:33:03:ae:0a:42:5c:6d: 9a:a7:f3:11:f1:f2:f9:a1:f6:5b:c9:a4:51:74:b9:fc:90:5c: 41:11:9f:1c:7a:77:ac:88:45:7c:6b:09:24:f3:27:3e:17:8e: 31:47:47:0b:65:57:a3:ad:46:bb:12:df:f1:72:a7:c5:25:26: fa:41:5e:8c:68:3c:4d:30:cd:c6:ac:0a:90:a7:b3:61:db:9f: 1a:4a:2a:a6:4e:e5:de:9f:1b:89:22:bb:ab:23:34:fe:3b:86: 89:d4:cc:18 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyxIc5FiDl6bh1qu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NmNhMmE4ZTItMDY2Ni00YzliLTk4ZWMtNDE3ZjY0ZGZjYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Zy4eXxB+RNSjTe7vDCwHl0/MoRc59iSzkQL lqlHwOUTPhnZcr5gb3q2GYPaTY04wo/5/W7v+MDsrnfRUV3oee7xECXkDhhQYhDz gKQxW17/A3v9OQfyni3PQDx1vz+Kj/lmD+d2/Tdcy6eH9sv6TFlWna1cisBXHKyy MHzXramTBrQnwpMrXjuuQG3As8X1eLHrxUEt+LSKgm03xtrz+4+dJFw8xAB+hT/+ snLspb10Bj/Zhzguq9EHBlcE0AhXDtqK+FNQ8soCRBrlyK8U1ySwjIMCU0mpLY2o TxIU6CN5CEyB+rrOyfG3Jrz7Lz+7u3O6UR1NhYtlEGvn7OvhuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJfFMJPctBF9FnG2y9EDag1Rqhj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZDgzNmIwNzgtY2ZjMy0z MDY4LTgzYmMtZGY1ODJmZTVjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAKI9VAwQA KI/PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIWeTpHmh9n7ywX2S24LjTe3yCVKqrGM6YpEr14aMq9RWJg2 DXQXaM+AQwmH8QdhWcyX2Kd/JugTL5wyzgbPaNbKyIeEgk3p72VtFbWBbe4O1XyM v7oIWbWiUS7G+5jK5UvNtFS/qkLrAWRe9MiLxVuF7/5+YMp2u0/sTGXu2PQVG8MO nhihQidY0+a/bexnJ2Crfnc3GSy+8iA5MwOuCkJcbZqn8xHx8vmh9lvJpFF0ufyQ XEERnxx6d6yIRXxrCSTzJz4XjjFHRwtlV6OtRrsS3/Fyp8UlJvpBXoxoPE0wzcas CpCns2HbnxpKKqZO5d6fG4kiu6sjNP47honUzBg= -----END CERTIFICATE-----Generated at Mon Mar 2 16:24:38 2026 by rpki-client