$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa File: 32edac01-155a-3d0e-a2c1-ab944d3296fa.roa (raw, json) Hash identifier: fZq6WEKW311tSU5REjC5rLbLy7+HdqRa/Be+8q+HTj4= Subject key identifier: 2A:C6:F0:A8:84:DF:EC:39:0E:8F:B1:4B:51:1D:72:2E:54:57:24:79 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2BE534AF8207DFD9E840 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 140.106.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:e5:34:af:82:07:df:d9:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=b33e6d68-c3be-43c7-bba3-ecc7bb55c7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:4d:ec:a0:5c:6c:02:a3:80:18:fc:02:e8: 55:47:dd:de:31:a4:14:3f:74:88:b9:60:94:f4:fd: b4:08:0f:15:bc:cb:94:b7:39:45:6b:22:0f:ed:82: 33:b9:03:58:26:e2:3e:c2:6a:ac:dd:3f:6a:32:0d: 14:0f:65:77:5c:22:9e:16:1c:63:ac:19:49:24:86: c4:84:f9:17:e2:e8:32:17:bf:e1:68:35:2e:f7:bd: be:34:78:3a:c1:d5:3c:5b:53:06:db:e9:c7:9e:90: dd:26:80:b9:55:71:75:df:60:fc:ed:cd:f1:83:6c: 68:ca:2e:ac:3a:cb:7d:29:14:7e:37:7e:10:f0:1f: 0d:db:1f:24:a3:92:10:a6:29:3d:3f:1a:33:49:2c: c6:f4:82:0c:88:18:bd:87:9e:65:d5:44:64:24:49: 42:eb:cc:b9:97:84:42:fe:b1:b4:8d:49:db:2e:89: f7:26:64:0c:9e:a8:5c:c5:15:38:25:d9:25:3e:df: 9a:89:98:0c:3b:6e:5d:66:7e:5b:0d:09:a9:f8:ce: d6:7b:8a:a8:8a:50:f6:35:88:aa:f2:e8:cb:5d:5c: 88:24:40:67:a5:9e:09:5e:0f:08:36:72:2e:2f:aa: cd:84:c8:dd:8b:cb:2a:30:28:61:04:a3:8c:f4:c3: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:F0:A8:84:DF:EC:39:0E:8F:B1:4B:51:1D:72:2E:54:57:24:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 140.106.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fc:11:66:96:48:1c:25:e7:f4:f7:0e:42:a0:0b:19:ca:a0: 00:6a:ff:a0:a6:8e:e5:63:2d:d9:34:e6:b8:cd:ef:b5:a2:d3: ee:74:a2:b5:92:d4:0f:23:6a:8b:10:b5:45:de:69:e4:c7:38: 94:72:8a:12:39:04:88:7f:28:b0:b9:c1:76:b3:c3:09:fe:06: 71:e0:60:74:19:70:1e:d5:a2:82:4c:25:29:31:79:b0:d4:c3: dc:04:9f:ad:72:fc:3f:99:0f:c4:98:cb:f4:47:e2:95:02:8a: ce:3b:0d:87:ea:ce:82:45:6b:93:fb:c4:6a:c6:36:93:b6:6d: 55:44:a3:bd:33:f5:9a:75:52:18:65:95:38:74:97:78:00:6a: c6:a3:96:09:67:28:b9:c2:41:96:fe:c6:99:9e:a2:fd:f2:43: 40:2e:ad:51:14:1a:17:43:38:2b:cc:07:da:b5:a8:e3:5a:6e: ea:5b:ce:f6:08:b8:41:29:11:85:46:73:e4:2f:71:6d:90:cf: 58:09:57:30:06:0b:38:39:8c:63:80:e8:b6:b2:08:83:b8:c8: 16:06:67:bc:3a:21:c2:77:19:ee:41:97:2a:6a:59:8d:fc:b8: eb:98:94:33:39:94:f5:94:79:19:5c:89:ae:c4:73:c9:ac:25: 2e:f8:4b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSvlNK+CB9/Z6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YjMzZTZkNjgtYzNiZS00M2M3LWJiYTMtZWNjN2JiNTVjN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jlN7KBcbAKjgBj8AuhVR93eMaQUP3SIuWCU 9P20CA8VvMuUtzlFayIP7YIzuQNYJuI+wmqs3T9qMg0UD2V3XCKeFhxjrBlJJIbE hPkX4ugyF7/haDUu972+NHg6wdU8W1MG2+nHnpDdJoC5VXF132D87c3xg2xoyi6s Ost9KRR+N34Q8B8N2x8ko5IQpik9PxozSSzG9IIMiBi9h55l1URkJElC68y5l4RC /rG0jUnbLon3JmQMnqhcxRU4JdklPt+aiZgMO25dZn5bDQmp+M7We4qoilD2NYiq 8ujLXVyIJEBnpZ4JXg8INnIuL6rNhMjdi8sqMChhBKOM9MNdpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrG8KiE3+w5Do+xS1Edci5UVyR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMzJlZGFjMDEtMTU1YS0z ZDBlLWEyYzEtYWI5NDRkMzI5NmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjGoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD38EWaWSBwl5/T3DkKgCxnKoABq/6CmjuVjLdk05rjN77Wi0+50orWS 1A8jaosQtUXeaeTHOJRyihI5BIh/KLC5wXazwwn+BnHgYHQZcB7VooJMJSkxebDU w9wEn61y/D+ZD8SYy/RH4pUCis47DYfqzoJFa5P7xGrGNpO2bVVEo70z9Zp1Uhhl lTh0l3gAasajlglnKLnCQZb+xpmeov3yQ0AurVEUGhdDOCvMB9q1qONabupbzvYI uEEpEYVGc+QvcW2Qz1gJVzAGCzg5jGOA6LayCIO4yBYGZ7w6IcJ3Ge5BlypqWY38 uOuYlDM5lPWUeRlcia7Ec8msJS74S7E= -----END CERTIFICATE-----Generated at Thu Sep 24 12:52:56 2026 by rpki-client