$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa File: 1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa (raw, json) Hash identifier: EFBXnYku4j4ASE4QWAVGd6owvsVWqgTs/x8D5md0Qrk= Subject key identifier: F2:E6:70:75:19:60:FD:9A:A6:C3:D0:5B:4E:B2:0C:4C:E1:F5:73:1A Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D91C0123AAE6E62EB68E774E0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 395382 IP address blocks: 40.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:12:3a:ae:6e:62:eb:68:e7:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=bc90d735-c9e4-41ee-87b8-90ff50faf6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:b3:78:84:1b:6b:52:ca:5c:0b:19:3c:b3: 33:67:fc:a9:11:c1:1a:dd:5c:22:7d:5a:aa:9c:24: 59:2f:ca:9b:a2:12:d3:70:7f:06:01:ed:8c:85:f1: e7:26:e6:5a:c2:d5:38:22:3f:22:b3:31:60:61:18: cd:17:7b:ba:ca:28:b0:12:99:8c:6b:01:2f:bc:99: 2f:a5:15:39:9e:7a:75:07:c7:25:ae:7b:ed:e5:b5: 2a:4a:19:0d:d0:2f:ff:ce:c9:92:29:26:7a:24:06: 77:03:10:44:d0:8c:d2:8b:34:75:d4:0b:49:6b:17: 20:54:db:2a:19:75:99:69:59:64:8e:5f:4a:de:c9: 74:6d:14:b8:9f:8c:0f:3f:8e:9d:bf:0b:73:e8:f3: 0c:bf:78:27:49:83:7a:0a:a7:24:70:ae:f3:20:3a: 42:3f:bf:82:58:52:14:e4:36:7a:b8:c7:6c:75:db: 8c:60:c0:74:ba:54:cf:9d:b6:77:71:65:4c:00:38: 68:a4:ae:3c:01:b2:4e:70:18:2b:ff:8f:35:02:d0: 73:2d:fb:af:57:3e:c2:bc:a5:28:53:3a:74:aa:05: ac:ee:36:33:29:ed:e8:2b:23:e2:7e:cb:b6:05:af: 31:f2:f5:2d:70:64:72:ef:53:35:33:fe:36:fa:ea: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:70:75:19:60:FD:9A:A6:C3:D0:5B:4E:B2:0C:4C:E1:F5:73:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a8:c8:d4:7d:d9:87:41:51:95:4f:54:eb:97:0e:54:56:4b: e0:26:03:a6:b6:47:8b:fb:57:b6:2d:72:ed:d1:5e:2b:71:0e: 35:9b:f3:59:16:74:8c:17:99:ac:95:f3:78:6c:7a:8e:33:d4: 74:02:94:ce:9c:15:93:fa:b8:dc:5e:65:d6:09:81:d7:0d:db: 5a:3f:97:76:88:77:ff:a7:40:37:22:95:60:25:cb:d3:56:11: b0:d3:52:b2:c3:83:16:88:02:af:48:fd:37:76:a2:d6:e1:08: a9:9d:84:6a:d7:fa:cc:6d:5b:07:6e:71:f0:13:52:c9:83:f4: e4:47:a4:bf:b8:2a:64:54:df:b4:cf:6e:32:fc:6a:e2:b9:b2: b2:d6:4d:da:cc:c3:0a:c7:46:01:b4:70:17:36:a3:6e:b8:96: a2:ad:25:a0:9c:ee:1d:31:14:8f:ea:13:d1:81:70:81:27:39: 0e:da:90:0a:31:ff:80:53:6b:fd:38:9d:4b:b0:2e:c5:91:e0: 86:45:6b:02:5b:9d:c9:7c:4a:cd:66:de:00:f5:6a:18:6a:90: 58:5a:9c:d4:bb:bf:30:27:54:6f:b8:f0:e4:06:fc:4e:72:09: 3b:8d:4b:80:74:86:61:31:20:5b:65:90:86:6c:93:1b:91:38: c5:dd:98:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBI6rm5i62jndOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YmM5MGQ3MzUtYzllNC00MWVlLTg3YjgtOTBmZjUwZmFmNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrazeIQba1LKXAsZPLMzZ/ypEcEa3VwifVqq nCRZL8qbohLTcH8GAe2MhfHnJuZawtU4Ij8iszFgYRjNF3u6yiiwEpmMawEvvJkv pRU5nnp1B8clrnvt5bUqShkN0C//zsmSKSZ6JAZ3AxBE0IzSizR11AtJaxcgVNsq GXWZaVlkjl9K3sl0bRS4n4wPP46dvwtz6PMMv3gnSYN6CqckcK7zIDpCP7+CWFIU 5DZ6uMdsdduMYMB0ulTPnbZ3cWVMADhopK48AbJOcBgr/481AtBzLfuvVz7CvKUo Uzp0qgWs7jYzKe3oKyPifsu2Ba8x8vUtcGRy71M1M/42+urnewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLmcHUZYP2apsPQW06yDEzh9XMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMWZlZWZhOGEtNGFkZC0z MWEzLWJkNDUtZGMwOWJjNDI2YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKoyNR92YdBUZVPVOuXDlRWS+AmA6a2R4v7V7Ytcu3RXitxDjWb81kW dIwXmayV83hseo4z1HQClM6cFZP6uNxeZdYJgdcN21o/l3aId/+nQDcilWAly9NW EbDTUrLDgxaIAq9I/Td2otbhCKmdhGrX+sxtWwducfATUsmD9ORHpL+4KmRU37TP bjL8auK5srLWTdrMwwrHRgG0cBc2o264lqKtJaCc7h0xFI/qE9GBcIEnOQ7akAox /4BTa/04nUuwLsWR4IZFawJbncl8Ss1m3gD1ahhqkFhanNS7vzAnVG+48OQG/E5y CTuNS4B0hmExIFtlkIZskxuROMXdmHo= -----END CERTIFICATE-----Generated at Wed Apr 22 08:32:25 2026 by rpki-client