$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa File: 43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json) Hash identifier: bYetuupz4FcZmLF5FHffh1A9dVTtj5E+G7RXFbHY4pE= Subject key identifier: B2:02:8D:DC:87:90:62:64:EB:8E:EC:F0:AB:33:5B:BC:66:A9:50:1D Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD4076CF643B52D5655636680 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 104.200.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6c:f6:43:b5:2d:56:55:63:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=ca7f12bc-4961-4912-a576-bcf951fa30d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:5c:69:40:4d:06:44:c4:a5:09:3f:48:f5: c4:58:dc:4c:1a:c1:3d:2c:d0:b7:63:05:d1:36:4c: 37:64:5c:3d:2b:ed:95:33:0e:41:58:ea:74:08:95: b4:71:de:ef:da:73:49:16:cc:90:e0:41:dd:22:b2: 65:fb:bb:64:2c:09:d2:dd:e4:e7:f2:c5:89:9b:05: f4:96:12:13:3b:60:f6:a3:c7:ca:ae:6a:bf:4d:40: 2f:8d:2f:8f:41:df:ea:01:4b:63:88:5c:aa:a9:a6: 30:27:4d:81:3c:fc:93:e5:a0:ca:9a:43:25:4c:57: be:f5:de:35:60:2b:79:2e:ee:b9:2d:b6:9e:fb:f7: 72:9a:37:9d:36:6d:d4:6e:3b:5d:a3:22:33:ed:9b: af:99:19:aa:ff:9a:a9:94:fa:a7:02:b1:37:da:7d: d6:59:e3:44:2e:95:ba:2d:b8:c8:6d:30:55:1a:f9: 29:76:fd:b9:bd:24:1c:91:e4:f1:d0:6e:82:0a:b3: 68:9a:6a:6b:f6:63:25:05:3e:b0:81:b9:02:2c:b4: 95:cc:2d:85:51:06:2d:6c:1f:dd:37:97:de:8a:90: 7f:a3:aa:9d:3c:7a:54:45:d3:2b:75:aa:72:bc:82: 4d:4f:3f:c1:d7:2d:0a:4d:9b:d8:df:40:39:0d:4b: 61:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:02:8D:DC:87:90:62:64:EB:8E:EC:F0:AB:33:5B:BC:66:A9:50:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.200.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:33:43:56:c2:e9:f0:b6:4c:a4:ac:4e:da:53:40:4d:fe:2d: 5f:b7:9c:fc:1e:9a:d9:98:76:9b:6b:38:9c:0f:de:45:17:e9: 6b:c5:1f:07:a8:35:a6:0f:96:70:7a:6f:ca:48:1c:24:b9:76: c7:3e:0b:0d:a3:f9:a5:74:49:8b:88:6f:ff:33:e1:f4:a6:26: be:f5:c3:7e:d3:dd:5a:43:8f:3c:10:0a:73:e8:bb:57:4a:a1: c9:30:80:5b:82:fb:d0:5a:7a:62:2b:94:3f:d9:21:7b:d1:90: 21:fa:a7:c8:77:35:c2:df:f2:34:84:37:db:e7:b5:a0:61:59: 29:17:e5:a4:23:a3:b0:3c:9b:8b:b0:51:17:8f:ff:ca:78:ec: 5b:d9:0b:28:6d:c3:43:f6:85:6e:ec:5b:76:9d:85:26:5f:58: 46:2f:72:fe:ec:7e:76:c4:8c:36:72:6c:96:a3:a6:7b:37:9b: 5f:0d:13:91:52:3e:8d:fd:93:f4:7e:e4:8b:98:c4:55:87:4e: 83:ad:b7:aa:d5:6a:93:c1:5a:e3:31:43:ef:21:f7:c0:fb:8b: cc:32:b3:7b:1f:2e:cd:83:18:1e:7d:53:5a:8b:74:12:01:57: a0:92:15:26:6b:61:b2:6f:39:2b:ae:8f:15:35:63:81:f9:00: 0e:27:00:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2z2Q7UtVlVjZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk Y2E3ZjEyYmMtNDk2MS00OTEyLWE1NzYtYmNmOTUxZmEzMGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9caUBNBkTEpQk/SPXEWNxMGsE9LNC3YwXR Nkw3ZFw9K+2VMw5BWOp0CJW0cd7v2nNJFsyQ4EHdIrJl+7tkLAnS3eTn8sWJmwX0 lhITO2D2o8fKrmq/TUAvjS+PQd/qAUtjiFyqqaYwJ02BPPyT5aDKmkMlTFe+9d41 YCt5Lu65Lbae+/dymjedNm3UbjtdoyIz7ZuvmRmq/5qplPqnArE32n3WWeNELpW6 LbjIbTBVGvkpdv25vSQckeTx0G6CCrNommpr9mMlBT6wgbkCLLSVzC2FUQYtbB/d N5feipB/o6qdPHpURdMrdapyvIJNTz/B1y0KTZvY30A5DUth+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLICjdyHkGJk647s8KszW7xmqVAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNDNkNjk4YTktZjM2NC0z ZjExLTkxOGUtYTNmNWE1N2VkNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkzQ1bC6fC2TKSsTtpTQE3+LV+3nPwemtmYdptrOJwP3kUX6WvFHweo NaYPlnB6b8pIHCS5dsc+Cw2j+aV0SYuIb/8z4fSmJr71w37T3VpDjzwQCnPou1dK ockwgFuC+9BaemIrlD/ZIXvRkCH6p8h3NcLf8jSEN9vntaBhWSkX5aQjo7A8m4uw UReP/8p47FvZCyhtw0P2hW7sW3adhSZfWEYvcv7sfnbEjDZybJajpns3m18NE5FS Po39k/R+5IuYxFWHToOtt6rVapPBWuMxQ+8h98D7i8wys3sfLs2DGB59U1qLdBIB V6CSFSZrYbJvOSuujxU1Y4H5AA4nANo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:26 2026 by rpki-client