$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa File: 2e52f444-65b3-3cf6-883a-6e7fadd14311.roa (raw, json) Hash identifier: 6UXMmLG9yB7cS31tG5uTMIKIIlmonl5EbOxcXpziFtU= Subject key identifier: B4:05:13:69:5F:20:6E:48:1D:75:43:A8:91:92:EB:D1:2E:61:EE:05 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F3CE29F8DE298B729250606C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 57.134.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9f:8d:e2:98:b7:29:25:06:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=5ea67499-0a50-4b8c-9dff-0b4cdf833db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:cb:25:44:7f:11:e6:89:fe:ba:31:e8:a1: 5b:69:78:f4:e6:99:fb:fc:9f:99:fb:94:f3:89:93: 9e:8a:7b:6f:11:78:3c:dd:79:7b:0b:b8:89:4b:a0: 7f:59:8e:fc:ee:fd:c1:e3:2b:5c:20:45:72:4d:5d: 4f:3d:4c:3a:30:56:63:25:61:48:7e:ca:c5:ec:5d: 7c:0c:39:5b:77:98:74:55:0d:78:d9:e5:96:a5:76: ac:84:9f:7a:26:55:69:6f:6e:63:ae:fb:76:2b:1f: 0b:ba:77:38:c1:01:f6:14:73:b3:92:69:7b:7a:49: c7:46:68:7d:90:d8:23:c5:6f:fc:f7:77:57:95:30: de:3a:ee:ed:b9:f0:ff:63:e1:3a:cc:c0:b4:a7:ac: 86:b9:ae:52:9e:25:b1:ca:7d:39:de:38:af:e3:e5: 98:0a:4d:ea:ac:1a:4d:78:b6:9c:07:50:a8:b3:aa: b4:f7:ea:ab:d1:f0:b0:a2:6e:ca:ec:0b:44:73:e4: 78:9d:17:dd:41:d1:f6:77:87:22:ca:10:70:a5:a6: e4:08:d4:c6:18:c2:e9:02:8d:bb:4e:d0:a2:5b:d3: d1:a5:f5:98:75:3a:23:b1:0a:81:88:15:e3:be:e4: f9:b5:8c:f3:2a:7b:8f:2f:2f:81:30:0f:14:55:66: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:05:13:69:5F:20:6E:48:1D:75:43:A8:91:92:EB:D1:2E:61:EE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e52f444-65b3-3cf6-883a-6e7fadd14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 57.134.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:57:df:66:83:2f:42:fa:b8:80:7d:35:cf:b6:e2:4d:c3:10: cb:00:6d:17:6b:85:54:78:10:dd:49:d4:11:78:4a:c6:40:d7: 57:ec:5a:7d:d3:2e:27:fd:07:b7:7f:48:ca:25:17:6f:e5:f5: b3:51:25:5b:a3:26:ce:d6:52:81:cd:81:d4:d5:5a:9d:a4:b4: a1:d1:6c:16:34:ef:8e:2f:24:2d:37:82:b1:3e:3a:29:8f:e5: 3a:52:11:22:8a:1a:bf:0c:85:24:de:c1:e8:66:b5:f6:5a:ab: dd:27:15:55:6f:bb:92:5c:8b:7a:22:3c:d5:ed:f9:19:f7:f4: bf:cd:08:64:36:32:4b:20:a6:04:da:24:80:35:56:a6:2a:55: db:49:ff:b1:17:11:c3:22:10:56:82:a0:f8:e9:12:db:0b:41: a5:1c:3f:34:3b:fc:55:ef:3b:3a:6f:7f:08:4a:84:b6:86:fb: 43:4c:97:80:8b:e3:01:1e:24:0d:30:c9:64:ac:20:29:17:b5: 25:f6:a6:b6:a2:a7:ff:f7:78:84:7e:3d:49:d7:6e:43:2f:86: b5:3b:07:19:03:f3:b1:fa:c1:70:f9:34:d5:1f:f1:73:f4:8b: c3:71:57:42:f9:4c:d1:bc:b9:fa:64:8c:02:25:8e:d2:5e:c2: fd:d5:d7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884p+N4pi3KSUGBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NWVhNjc0OTktMGE1MC00YjhjLTlkZmYtMGI0Y2RmODMzZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL3LJUR/EeaJ/rox6KFbaXj05pn7/J+Z+5Tz iZOeintvEXg83Xl7C7iJS6B/WY787v3B4ytcIEVyTV1PPUw6MFZjJWFIfsrF7F18 DDlbd5h0VQ142eWWpXashJ96JlVpb25jrvt2Kx8Lunc4wQH2FHOzkml7eknHRmh9 kNgjxW/893dXlTDeOu7tufD/Y+E6zMC0p6yGua5SniWxyn053jiv4+WYCk3qrBpN eLacB1Cos6q09+qr0fCwom7K7AtEc+R4nRfdQdH2d4ciyhBwpabkCNTGGMLpAo27 TtCiW9PRpfWYdTojsQqBiBXjvuT5tYzzKnuPLy+BMA8UVWZ3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQFE2lfIG5IHXVDqJGS69EuYe4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmU1MmY0NDQtNjViMy0z Y2Y2LTg4M2EtNmU3ZmFkZDE0MzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHOYYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENX32aDL0L6uIB9Nc+24k3DEMsAbRdrhVR4EN1J1BF4SsZA11fsWn3T Lif9B7d/SMolF2/l9bNRJVujJs7WUoHNgdTVWp2ktKHRbBY0744vJC03grE+OimP 5TpSESKKGr8MhSTewehmtfZaq90nFVVvu5Jci3oiPNXt+Rn39L/NCGQ2MksgpgTa JIA1VqYqVdtJ/7EXEcMiEFaCoPjpEtsLQaUcPzQ7/FXvOzpvfwhKhLaG+0NMl4CL 4wEeJA0wyWSsICkXtSX2praip//3eIR+PUnXbkMvhrU7BxkD87H6wXD5NNUf8XP0 i8NxV0L5TNG8ufpkjAIljtJewv3V150= -----END CERTIFICATE-----Generated at Thu Sep 24 10:01:09 2026 by rpki-client