$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ed077008-535b-37ca-a52c-435ff2eee5ea.roa File: ed077008-535b-37ca-a52c-435ff2eee5ea.roa (raw, json) Hash identifier: gXaJ967PFFyqBzh566+Gndizg9OLUiuo2PQxMQQs7UU= Subject key identifier: 90:10:9D:57:69:96:B3:16:64:21:86:F8:BA:88:42:66:46:53:B1:BF Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2C15FE5362438A494480 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ed077008-535b-37ca-a52c-435ff2eee5ea.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 104.218.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2c:15:fe:53:62:43:8a:49:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=cbf97f9c-9b36-4c87-86eb-2cdc08119335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b4:ce:8d:e5:f5:47:63:99:f7:44:73:c4:2e: ba:cc:d8:78:c3:44:a4:dd:a4:9d:fb:f5:0d:8a:70: 31:6d:92:15:6a:9c:2e:16:8a:bb:ca:b7:c3:83:af: 0f:0a:04:94:21:69:3f:60:b6:f5:d9:41:2b:7e:a8: 82:4f:6c:3b:71:a0:d3:7d:30:15:4f:15:69:0d:d9: c2:f4:6d:37:9e:2f:a8:d6:19:01:59:83:7d:f4:5f: 47:2f:76:af:7b:f3:bb:e6:27:bd:5c:a6:1b:00:57: 95:7e:08:29:5a:ae:b6:a2:99:0a:5c:d8:6f:a3:60: 9c:e5:f5:e3:82:05:57:d0:aa:97:1d:aa:5d:11:0c: 77:5a:27:bf:82:69:04:80:25:d2:53:72:8b:13:63: 17:c1:0b:c1:0e:d9:e8:51:38:c1:3b:52:57:5f:3d: ad:91:ed:77:ba:88:a2:8e:34:0f:ff:fd:dd:f9:fc: 9c:f5:98:27:ac:dd:ee:35:dd:15:14:13:05:2b:bc: c7:e4:dd:ab:ff:c2:34:ea:3e:80:97:97:85:e8:e1: a6:0f:f5:b6:b1:fc:41:5b:6b:ad:6b:d6:fa:f0:4b: 17:e7:f1:8e:63:f2:2a:c4:43:3b:f4:b4:36:7f:90: 7b:ee:55:a2:25:14:57:03:b3:35:08:98:43:ca:ac: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:10:9D:57:69:96:B3:16:64:21:86:F8:BA:88:42:66:46:53:B1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ed077008-535b-37ca-a52c-435ff2eee5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.218.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8a:06:23:f7:5b:81:4f:16:1a:b8:5e:fe:bd:94:c9:f4:21: 8f:a4:21:3d:96:b5:bf:25:55:74:cf:44:a7:78:12:e6:a5:34: 7b:67:d9:03:99:b5:c0:1f:c4:33:3a:9c:88:f7:f3:8e:29:3d: 1c:45:4d:0b:8f:59:82:1a:3f:fb:d6:ad:95:c0:3d:5f:d4:9a: de:4f:dc:3e:2b:3d:6f:14:c1:68:e0:35:6f:0a:b6:ac:93:1c: 76:4a:53:1a:c5:45:21:d3:a4:45:74:e1:90:dd:da:8a:41:6c: 0f:3d:30:e6:79:d4:e9:d2:ac:cb:26:04:76:cc:7c:e2:db:1c: bc:43:de:ef:e1:69:b1:e7:ea:05:5f:36:52:a1:c7:ca:ef:df: 47:37:50:6f:b8:1c:6b:6a:ee:8a:2f:e8:d7:cf:f6:7d:24:fc: 2f:34:f1:04:3e:a0:10:65:81:b2:5e:d5:b4:96:f7:0e:63:73: 65:2a:ad:7a:5a:82:e6:13:27:26:b9:13:56:60:72:d3:a9:12: 63:5c:c9:63:6f:a4:b9:82:a2:42:cc:5c:e3:b6:bc:c6:93:b0: 8a:cd:35:02:21:09:33:b2:d6:78:6f:76:21:e3:bb:7b:ca:e0: c3:62:d3:d7:15:da:aa:90:18:b0:23:28:88:8c:38:00:3a:6e: b9:d6:72:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSwV/lNiQ4pJRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk Y2JmOTdmOWMtOWIzNi00Yzg3LTg2ZWItMmNkYzA4MTE5MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLTOjeX1R2OZ90RzxC66zNh4w0Sk3aSd+/UN inAxbZIVapwuFoq7yrfDg68PCgSUIWk/YLb12UErfqiCT2w7caDTfTAVTxVpDdnC 9G03ni+o1hkBWYN99F9HL3ave/O75ie9XKYbAFeVfggpWq62opkKXNhvo2Cc5fXj ggVX0KqXHapdEQx3Wie/gmkEgCXSU3KLE2MXwQvBDtnoUTjBO1JXXz2tke13uoii jjQP//3d+fyc9ZgnrN3uNd0VFBMFK7zH5N2r/8I06j6Al5eF6OGmD/W2sfxBW2ut a9b68EsX5/GOY/IqxEM79LQ2f5B77lWiJRRXA7M1CJhDyqxq9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAQnVdplrMWZCGG+LqIQmZGU7G/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZWQwNzcwMDgtNTM1Yi0z N2NhLWE1MmMtNDM1ZmYyZWVlNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGKBiP3W4FPFhq4Xv69lMn0IY+kIT2Wtb8lVXTPRKd4EualNHtn2QOZ tcAfxDM6nIj3844pPRxFTQuPWYIaP/vWrZXAPV/Umt5P3D4rPW8UwWjgNW8KtqyT HHZKUxrFRSHTpEV04ZDd2opBbA89MOZ51OnSrMsmBHbMfOLbHLxD3u/habHn6gVf NlKhx8rv30c3UG+4HGtq7oov6NfP9n0k/C808QQ+oBBlgbJe1bSW9w5jc2UqrXpa guYTJya5E1ZgctOpEmNcyWNvpLmCokLMXOO2vMaTsIrNNQIhCTOy1nhvdiHju3vK 4MNi09cV2qqQGLAjKIiMOAA6brnWcpA= -----END CERTIFICATE-----Generated at Wed Sep 23 02:56:34 2026 by rpki-client