$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa File: 3eff0cfa-371f-32f7-9a45-34628c453640.roa (raw, json) Hash identifier: jRPANkKAniz6UJ9mgCvCPBU97Az4+oErvyQ7KPaA50w= Subject key identifier: 5F:CF:5E:AC:C1:65:9A:0A:1C:67:E3:C5:F4:94:E3:C5:CB:88:BE:C5 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD4076CA09F29DEAA7DD5FD80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 108.171.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6c:a0:9f:29:de:aa:7d:d5:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=9c75a2d7-ccf9-4b9a-8641-a8d8922992f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:df:c9:4f:e3:bd:c7:2f:56:ee:87:a8:2c: 95:50:06:aa:11:1d:0c:6e:86:79:f4:11:e5:b6:84: 5b:e8:30:85:02:26:1d:0d:b8:93:8f:8f:8e:36:e0: bf:23:51:24:2a:83:33:36:62:a4:e9:30:8c:04:d9: bb:6a:64:c0:7c:c7:a6:e0:06:06:2c:a4:c0:11:2f: 84:7d:b0:61:7a:94:ea:7b:c4:6c:1d:cd:3d:97:d6: 5d:7c:a3:bd:23:a3:bc:bd:0e:dc:56:f4:db:4e:79: 27:49:16:29:70:ff:14:b6:46:33:4d:e4:db:22:42: 00:3e:5e:f9:ef:0b:38:54:83:9a:30:fc:19:3c:0e: 6b:b7:b2:c8:ba:e8:c6:7c:64:3c:97:7b:fb:ae:79: c7:24:b5:7d:6f:ec:0d:38:d2:81:6d:09:00:61:7b: 34:e1:0e:15:5b:2a:ea:61:80:44:e0:c4:7b:fc:75: 34:02:8b:5d:c4:5b:63:3a:ff:25:82:30:86:e8:9c: 76:78:4b:fd:9a:ff:53:a2:82:06:35:9e:e8:f1:cb: 64:ab:4e:f8:4c:09:94:c6:04:7a:51:11:4f:44:5e: 31:b5:b4:ef:f0:03:23:1d:a5:65:54:3d:05:4f:54: 8e:8f:03:b2:a6:74:7d:11:6c:a0:d3:8b:4f:14:7c: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CF:5E:AC:C1:65:9A:0A:1C:67:E3:C5:F4:94:E3:C5:CB:88:BE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 108.171.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:75:ba:a7:ac:77:5e:20:df:e4:9c:d6:35:f0:9d:bd:18:ba: 19:e2:cb:fb:f6:8c:70:2d:db:85:8b:f7:6e:e3:4e:d7:4f:94: 7d:9d:86:85:4e:ab:0a:e1:2f:5a:c9:34:16:da:68:e7:eb:e1: be:ce:d5:51:e3:f5:f1:1b:90:86:89:fd:d3:8a:32:77:41:49: f7:ae:03:dd:3b:2d:64:ac:c6:d7:0e:29:ee:02:b4:06:41:1b: 6f:3b:63:7f:9a:b8:64:38:0b:ff:ed:1d:d1:e4:15:2a:92:0e: cf:95:5b:73:e3:fb:c9:6e:e8:67:89:e6:e4:86:36:8e:77:70: ef:29:db:ab:e6:b6:e1:5f:e1:24:1b:27:95:4b:7c:eb:e8:09: 2e:5e:19:18:d3:7e:88:8f:40:80:50:59:5c:e7:64:0d:ff:12: e3:51:85:56:3d:e0:37:bc:6d:0d:5f:cf:a4:0c:c6:de:ae:b7: 15:2e:47:a0:4a:99:4e:b1:bc:6e:b5:76:2a:06:79:a3:85:b6: 69:51:f3:81:2a:0b:10:ec:eb:3f:ee:7c:2f:07:77:40:e9:ba: 87:71:49:58:2e:82:20:24:75:3c:b1:0c:e2:5e:68:14:a3:91: 8b:f1:60:36:bb:1f:65:55:36:70:0a:fc:35:d7:66:6f:f1:6c: b6:ec:d5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2ygnyneqn3V/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk OWM3NWEyZDctY2NmOS00YjlhLTg2NDEtYThkODkyMjk5MmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCPfyU/jvccvVu6HqCyVUAaqER0MboZ59BHl toRb6DCFAiYdDbiTj4+ONuC/I1EkKoMzNmKk6TCMBNm7amTAfMem4AYGLKTAES+E fbBhepTqe8RsHc09l9ZdfKO9I6O8vQ7cVvTbTnknSRYpcP8UtkYzTeTbIkIAPl75 7ws4VIOaMPwZPA5rt7LIuujGfGQ8l3v7rnnHJLV9b+wNONKBbQkAYXs04Q4VWyrq YYBE4MR7/HU0AotdxFtjOv8lgjCG6Jx2eEv9mv9TooIGNZ7o8ctkq074TAmUxgR6 URFPRF4xtbTv8AMjHaVlVD0FT1SOjwOypnR9EWyg04tPFHxqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/PXqzBZZoKHGfjxfSU48XLiL7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvM2VmZjBjZmEtMzcxZi0z MmY3LTlhNDUtMzQ2MjhjNDUzNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC51uqesd14g3+Sc1jXwnb0Yuhniy/v2jHAt24WL927jTtdPlH2dhoVO qwrhL1rJNBbaaOfr4b7O1VHj9fEbkIaJ/dOKMndBSfeuA907LWSsxtcOKe4CtAZB G287Y3+auGQ4C//tHdHkFSqSDs+VW3Pj+8lu6GeJ5uSGNo53cO8p26vmtuFf4SQb J5VLfOvoCS5eGRjTfoiPQIBQWVznZA3/EuNRhVY94De8bQ1fz6QMxt6utxUuR6BK mU6xvG61dioGeaOFtmlR84EqCxDs6z/ufC8Hd0DpuodxSVgugiAkdTyxDOJeaBSj kYvxYDa7H2VVNnAK/DXXZm/xbLbs1ag= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:48 2026 by rpki-client