$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: CzxYvGXY48qtEYPGZSAfZe40wKFfSUuSWakSJqL3ysk= Subject key identifier: 23:43:5A:2B:EB:03:39:A7:04:2C:23:87:43:2F:A4:72:9B:E3:80:6A Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D91C015D44A371F768A05B780 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:15:d4:4a:37:1f:76:8a:05:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=8bf484ed-aaa8-4e50-b26a-ecc9e431b7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:5f:0e:67:12:da:2e:8d:46:8c:26:f9:49: 32:7a:30:e1:e7:f3:36:4f:10:b2:37:6f:35:1c:6b: b3:01:5a:4d:43:1c:ad:c0:6c:08:52:57:e9:33:37: cc:f0:60:ad:e3:dc:cc:1b:02:5c:05:e3:f9:e5:7d: 5d:b5:9b:c7:25:19:1d:10:e7:1f:e1:cc:45:28:22: 85:d2:58:98:6c:cf:37:b9:90:1e:00:df:82:bf:6a: 4d:3f:52:96:a4:c6:32:a7:c4:ac:74:27:1f:3c:a0: ec:28:bb:01:2b:e2:6d:1b:62:63:60:b0:ae:cb:be: 98:4a:93:ca:d6:d5:11:78:7d:c2:5a:99:26:f8:41: da:f8:9e:22:0e:68:14:8d:ff:2a:c6:37:63:42:cc: 32:5a:0f:1e:fa:cc:61:3a:fa:6b:0d:1e:69:fb:16: 56:26:6d:25:d3:2c:a2:44:d5:e7:6f:3c:5c:99:de: 34:0b:d2:17:51:f8:7f:ea:d7:a0:dc:63:32:99:f1: 68:a0:44:b5:c1:cd:07:79:d3:db:65:d8:ba:eb:8f: 5f:d9:de:e2:7b:87:88:76:a4:ee:63:03:cb:61:10: 4c:95:d5:47:0e:f0:90:16:87:fd:1b:d1:5e:6f:03: aa:f9:c3:d0:a9:77:fe:65:a6:fd:a0:82:dd:38:d1: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:5A:2B:EB:03:39:A7:04:2C:23:87:43:2F:A4:72:9B:E3:80:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:39:8d:aa:6c:76:02:6f:ba:86:aa:cf:c3:8e:f5:b1:4e:47: 7b:50:22:e7:e4:93:3f:87:7c:a0:ae:eb:07:91:db:fc:de:8b: 8a:33:90:e0:df:71:23:f0:ab:0f:c1:21:34:44:22:55:f0:0e: 3c:ec:46:97:06:0f:c4:d3:4a:55:7e:f1:ce:a4:14:14:e9:7a: f4:5f:56:e0:ec:96:aa:1f:a8:27:93:9b:3f:6b:ef:39:57:71: 05:8f:af:ca:4c:cd:eb:c8:e1:f9:e4:14:3a:e7:8a:f1:88:4d: 28:f3:5a:df:94:be:2b:2e:88:91:4d:b6:30:e0:65:53:f2:79: d7:0f:57:ca:76:32:ca:33:e7:91:e0:81:ed:ab:ca:2a:57:d5: 3e:d4:c5:ee:7a:cd:77:46:e2:4a:c4:7d:48:09:07:bc:b0:09: 01:d7:dc:d7:f2:e6:47:24:99:0a:cd:dd:bc:4c:d9:53:27:3e: 93:2c:e0:f4:8a:0c:99:f3:f0:86:6d:6c:24:83:81:3b:00:0c: c6:b1:e0:8d:ac:66:2a:91:d4:bf:a1:93:5c:9a:2d:46:88:6b: ff:e3:48:a9:94:28:3a:69:71:a8:20:b4:0f:ea:b2:22:ba:bd: d2:63:f2:97:43:75:fd:fc:b6:fc:2a:1a:5a:54:14:0b:6d:e5: 86:f9:fd:0d -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE2RwBXUSjcfdooFt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OGJmNDg0ZWQtYWFhOC00ZTUwLWIyNmEtZWNjOWU0MzFiN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2RfDmcS2i6NRowm+UkyejDh5/M2TxCyN281 HGuzAVpNQxytwGwIUlfpMzfM8GCt49zMGwJcBeP55X1dtZvHJRkdEOcf4cxFKCKF 0liYbM83uZAeAN+Cv2pNP1KWpMYyp8SsdCcfPKDsKLsBK+JtG2JjYLCuy76YSpPK 1tUReH3CWpkm+EHa+J4iDmgUjf8qxjdjQswyWg8e+sxhOvprDR5p+xZWJm0l0yyi RNXnbzxcmd40C9IXUfh/6teg3GMymfFooES1wc0HedPbZdi6649f2d7ie4eIdqTu YwPLYRBMldVHDvCQFof9G9FebwOq+cPQqXf+Zab9oILdONGQtQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFCNDWivrAzmnBCwjh0MvpHKb44BqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUjmNqmx2Am+6hqrPw471sU5He1Ai 5+STP4d8oK7rB5Hb/N6LijOQ4N9xI/CrD8EhNEQiVfAOPOxGlwYPxNNKVX7xzqQU FOl69F9W4OyWqh+oJ5ObP2vvOVdxBY+vykzN68jh+eQUOueK8YhNKPNa35S+Ky6I kU22MOBlU/J51w9XynYyyjPnkeCB7avKKlfVPtTF7nrNd0biSsR9SAkHvLAJAdfc 1/LmRySZCs3dvEzZUyc+kyzg9IoMmfPwhm1sJIOBOwAMxrHgjaxmKpHUv6GTXJot Rohr/+NIqZQoOmlxqCC0D+qyIrq90mPyl0N1/fy2/CoaWlQUC23lhvn9DQ== -----END CERTIFICATE-----Generated at Wed Apr 22 08:32:32 2026 by rpki-client