$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2eea9b03-e9bc-3853-807a-15c29270aa5b.roa File: 2eea9b03-e9bc-3853-807a-15c29270aa5b.roa (raw, json) Hash identifier: YVsK98xvAWeYUPjVBoLCS/7TGpACIEVdcqo2ddFIbwM= Subject key identifier: 55:C0:63:20:B7:77:36:4A:09:67:0C:0E:2F:18:98:99:31:5D:78:91 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584EA6455DE899E4DEB1C016B000 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2eea9b03-e9bc-3853-807a-15c29270aa5b.roa Signing time: Tue 28 Jul 2026 14:12:28 +0000 ROA not before: Tue 28 Jul 2026 14:12:28 +0000 ROA not after: Mon 26 Oct 2026 14:12:28 +0000 asID: 11290 IP address blocks: 24.230.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:45:5d:e8:99:e4:de:b1:c0:16:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jul 28 14:12:28 2026 GMT Not After : Oct 26 14:12:28 2026 GMT Subject: CN=2bd624e8-db30-4dbe-8477-25b5a165662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1a:ec:e7:15:17:06:d9:64:2f:bc:af:5b:bb: 7f:07:ff:10:c4:e4:a0:86:09:f7:8c:37:ed:05:c2: 61:bc:8a:5a:68:4e:6f:e9:bb:82:16:35:fa:18:78: a4:44:8e:06:32:e4:f6:62:b5:e6:1d:59:35:98:c8: d6:e5:92:e8:99:ea:13:9a:6d:88:b6:b4:8c:9a:9a: bd:7a:c2:ae:6d:ae:b8:d3:7d:ad:65:e2:e1:8e:ae: 8d:14:aa:0b:13:c4:c8:14:cf:f1:e4:57:d2:7e:56: 04:08:77:e3:6b:ce:3e:97:66:e2:4b:07:24:9b:22: 45:c1:ed:e0:c1:55:d4:92:e4:0a:fa:0f:e3:8a:97: ac:92:8b:f8:2a:46:fe:d3:b5:c7:81:46:4f:64:9e: 1f:e0:8b:e2:86:b1:e7:ae:e7:7e:2a:f1:96:dd:ee: 78:5d:8c:4c:8f:57:79:c2:65:21:77:55:6c:64:d0: 33:fb:7c:a3:47:1e:41:3c:f4:c7:be:00:1d:21:9b: 59:34:f1:7c:56:46:0e:39:e2:21:81:91:e5:05:5c: e2:a3:b5:b3:b1:f1:a6:98:ee:f9:96:81:7e:d3:01: b4:85:d7:1f:13:38:e8:a7:b2:7f:e0:a3:84:20:05: af:5a:ef:71:59:a6:d7:55:a1:4e:fb:8f:a6:b4:90: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C0:63:20:B7:77:36:4A:09:67:0C:0E:2F:18:98:99:31:5D:78:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2eea9b03-e9bc-3853-807a-15c29270aa5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.230.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b5:0d:46:7b:eb:64:b8:66:08:fe:5f:bf:45:0e:f1:87:06: 92:71:75:61:56:b6:1e:df:a7:09:d3:71:44:5a:01:d0:28:02: 81:c3:35:8c:7e:fb:df:ad:3d:c9:23:b0:11:8d:5f:cd:1f:2a: 65:9e:0e:8f:3f:7f:03:7f:85:22:28:ea:d0:3f:b0:1c:50:81: 70:78:a6:82:2b:ff:3b:b7:d7:41:1b:9b:eb:ca:34:39:bd:c8: c6:45:c7:08:4d:73:6f:bb:81:92:d9:0e:e3:89:29:1e:e6:53: 02:27:8f:92:66:d1:f8:cd:aa:f8:49:8c:50:fe:5f:c4:fd:de: 18:5a:86:6b:4b:28:8d:86:ce:43:0a:39:c7:3a:fb:02:5f:06: 0d:42:c0:71:bc:ec:41:bb:3c:50:7d:25:ce:cd:32:43:6d:f4: 52:81:57:cc:29:ea:fb:e8:9d:40:23:5f:17:84:7c:03:9c:7e: f2:54:c9:2a:87:19:19:95:b2:50:30:aa:24:16:e3:83:4d:b1: 10:e8:11:42:33:55:f8:47:50:9c:71:42:9a:8c:76:df:15:8d: 95:89:84:bf:e7:63:4c:8f:ba:87:b7:53:0d:df:d0:da:04:52: 8e:c6:4a:54:39:bd:ad:4a:df:2d:0b:f3:d9:3d:51:4a:f5:21: 02:e4:8d:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6mRV3omeTescAWsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDcyODE0MTIyOFoXDTI2MTAyNjE0MTIyOFowLzEtMCsGA1UEAxMk MmJkNjI0ZTgtZGIzMC00ZGJlLTg0NzctMjViNWExNjU2NjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhrs5xUXBtlkL7yvW7t/B/8QxOSghgn3jDft BcJhvIpaaE5v6buCFjX6GHikRI4GMuT2YrXmHVk1mMjW5ZLomeoTmm2ItrSMmpq9 esKuba64032tZeLhjq6NFKoLE8TIFM/x5FfSflYECHfja84+l2biSwckmyJFwe3g wVXUkuQK+g/jipeskov4Kkb+07XHgUZPZJ4f4IvihrHnrud+KvGW3e54XYxMj1d5 wmUhd1VsZNAz+3yjRx5BPPTHvgAdIZtZNPF8VkYOOeIhgZHlBVzio7WzsfGmmO75 loF+0wG0hdcfEzjop7J/4KOEIAWvWu9xWabXVaFO+4+mtJDWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXAYyC3dzZKCWcMDi8YmJkxXXiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmVlYTliMDMtZTliYy0z ODUzLTgwN2EtMTVjMjkyNzBhYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGObAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS1DUZ762S4Zgj+X79FDvGHBpJxdWFWth7fpwnTcURaAdAoAoHDNYx+ +9+tPckjsBGNX80fKmWeDo8/fwN/hSIo6tA/sBxQgXB4poIr/zu310Ebm+vKNDm9 yMZFxwhNc2+7gZLZDuOJKR7mUwInj5Jm0fjNqvhJjFD+X8T93hhahmtLKI2GzkMK Occ6+wJfBg1CwHG87EG7PFB9Jc7NMkNt9FKBV8wp6vvonUAjXxeEfAOcfvJUySqH GRmVslAwqiQW44NNsRDoEUIzVfhHUJxxQpqMdt8VjZWJhL/nY0yPuoe3Uw3f0NoE Uo7GSlQ5va1K3y0L89k9UUr1IQLkjdk= -----END CERTIFICATE-----Generated at Tue Jul 28 19:17:17 2026 by rpki-client