$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa File: 1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa (raw, json) Hash identifier: ggZ+JW4ZPtaZTEannCU83q9QolLjDeb4Yoc+gk3Q0PQ= Subject key identifier: E5:C5:03:81:6D:54:65:F2:72:BB:D4:9B:EC:BF:AE:A9:DE:B3:CB:24 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2BFE24AFE35A1478CB00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 104.245.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:fe:24:af:e3:5a:14:78:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=a38d6f86-eb8d-4fd1-ae7d-a3d700f497f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:b6:42:ec:18:84:a2:d7:a9:ff:92:be:6b: be:5e:2a:fc:f5:fb:88:2a:d9:74:f7:04:e8:57:42: 88:8f:e1:c0:40:91:ef:f6:e6:8e:7a:b9:57:c1:d3: b8:a9:15:33:9c:43:16:ca:95:af:84:24:a5:03:38: 7e:7d:52:24:f8:20:5e:6c:02:00:2c:81:3c:3c:b1: 31:9c:e9:93:9c:5d:5f:4f:84:5c:90:cd:7d:d7:e2: 53:19:65:5d:7b:92:57:4b:ec:b9:6d:a5:a0:a5:84: 27:ad:e0:56:5a:00:f9:48:1f:48:7e:9f:7e:a1:81: 80:f5:ab:d0:5f:2a:cd:41:f2:9a:12:d7:b4:6c:22: 3a:7a:fe:8a:c8:f8:8d:ac:40:91:07:56:fb:30:96: 58:36:fb:0e:0a:4d:93:c2:e0:a0:88:c7:3e:9d:f8: 30:52:d6:93:b2:39:01:5b:10:a5:5b:a6:39:16:39: 11:88:0c:08:63:36:aa:45:8d:f5:34:d8:b8:b1:1c: 3a:3e:64:c0:b6:eb:d7:97:17:cf:37:d2:e2:a6:48: 42:0e:cb:a1:7c:38:d5:0a:de:b0:29:5a:57:41:da: 62:dc:6e:56:7e:4a:da:15:4d:2f:7f:bc:38:c5:38: a1:3c:7e:8d:d0:17:4b:74:66:1a:a4:9a:b5:00:0c: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C5:03:81:6D:54:65:F2:72:BB:D4:9B:EC:BF:AE:A9:DE:B3:CB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.245.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:98:76:35:8f:21:25:85:be:b8:0b:89:24:ca:37:33:4e:67: f4:c4:b4:59:89:2b:53:f3:56:bd:01:29:3f:5b:50:23:b7:4b: b4:55:c5:b8:18:c2:f0:4c:60:4b:22:d3:91:f3:53:80:b5:dc: 18:7d:44:e2:c4:f8:8b:b5:f4:58:25:95:45:a3:79:5c:ba:eb: 18:2a:03:50:d1:e1:f0:4e:cd:1b:a0:53:94:b9:2b:6d:f1:59: 62:63:c6:27:62:da:f5:63:3b:72:44:ff:71:ef:3d:c6:6e:58: 23:7f:e2:db:e6:51:fc:33:b0:74:e7:84:e8:c3:37:d7:cf:ad: a6:4f:70:7d:9d:30:2d:a1:0f:a5:1a:6b:fa:37:5f:11:31:c4: 6a:45:1d:5b:e7:80:4f:19:40:1a:68:7c:87:7d:49:99:cf:1e: ec:5a:5f:e2:ca:e5:d9:a0:7c:89:2d:93:00:91:00:3b:8c:7d: d2:48:15:6b:da:57:aa:9e:ef:bf:3a:19:5a:d6:10:bb:78:ec: c6:ed:cd:ac:01:70:cd:92:ac:1f:64:fa:1a:e5:f7:67:b9:aa: 9c:2d:60:d8:16:82:f2:87:d6:16:ae:72:b9:b6:f2:9f:33:74: cf:0f:68:df:18:f6:4a:e3:ac:72:e4:0c:fe:39:05:73:33:8a: c1:0e:95:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSv+JK/jWhR4ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YTM4ZDZmODYtZWI4ZC00ZmQxLWFlN2QtYTNkNzAwZjQ5N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOi2QuwYhKLXqf+Svmu+Xir89fuIKtl09wTo V0KIj+HAQJHv9uaOerlXwdO4qRUznEMWypWvhCSlAzh+fVIk+CBebAIALIE8PLEx nOmTnF1fT4RckM191+JTGWVde5JXS+y5baWgpYQnreBWWgD5SB9Ifp9+oYGA9avQ XyrNQfKaEte0bCI6ev6KyPiNrECRB1b7MJZYNvsOCk2TwuCgiMc+nfgwUtaTsjkB WxClW6Y5FjkRiAwIYzaqRY31NNi4sRw6PmTAtuvXlxfPN9LipkhCDsuhfDjVCt6w KVpXQdpi3G5WfkraFU0vf7w4xTihPH6N0BdLdGYapJq1AAz0ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXFA4FtVGXycrvUm+y/rqnes8skMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWZiMDY3NTItZWU1OS0z ZWZiLTg5NGMtMDFiM2UzYTQ1YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGYdjWPISWFvrgLiSTKNzNOZ/TEtFmJK1PzVr0BKT9bUCO3S7RVxbgY wvBMYEsi05HzU4C13Bh9ROLE+Iu19FgllUWjeVy66xgqA1DR4fBOzRugU5S5K23x WWJjxidi2vVjO3JE/3HvPcZuWCN/4tvmUfwzsHTnhOjDN9fPraZPcH2dMC2hD6Ua a/o3XxExxGpFHVvngE8ZQBpofId9SZnPHuxaX+LK5dmgfIktkwCRADuMfdJIFWva V6qe7786GVrWELt47MbtzawBcM2SrB9k+hrl92e5qpwtYNgWgvKH1haucrm28p8z dM8PaN8Y9krjrHLkDP45BXMzisEOlXg= -----END CERTIFICATE-----Generated at Wed Sep 23 01:27:55 2026 by rpki-client