$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa File: b36d5e8f-bac8-378b-8482-3e6f208fa162.roa (raw, json) Hash identifier: KjnHrL2ve1NYfCslMzPGUpjKOIzDXTntn/GoR42eI+Q= Subject key identifier: DC:5C:E6:E3:05:9E:46:04:87:E2:B2:23:3A:A5:48:EF:4B:A8:43:2F Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584F698D8928CC9480FE1B7B2E80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 22065 IP address blocks: 40.143.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:89:28:cc:94:80:fe:1b:7b:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=3e0b58bb-6ddf-41df-9cee-daa9f5d3e96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:34:49:32:3d:ef:47:d2:f2:48:ba:68:3a: fa:7c:83:73:93:d3:7d:95:d7:05:1f:05:ed:9d:08: 89:0b:da:38:3d:58:bc:18:6a:d5:d2:64:b7:a5:92: 55:46:2c:40:44:3c:ac:f6:53:2b:d5:88:66:1d:d7: 08:69:f9:f9:63:c9:76:7d:10:3d:48:7b:ba:a0:5a: 69:c0:26:de:6b:4d:c8:f0:0d:0d:3f:a1:5f:f9:31: 11:66:91:21:15:01:7a:fb:ad:8b:e4:77:5d:a9:58: 2c:c3:44:f6:c2:53:fe:1e:b2:5a:f5:33:c5:51:f7: a1:0c:f8:03:20:9b:b5:91:cc:cc:0b:c8:55:1b:41: 25:7e:f8:f9:f4:24:ae:bb:fc:1a:a5:94:80:5a:d5: 3f:ad:78:3a:47:35:60:d8:60:73:6d:c1:9b:e3:eb: 55:8d:0c:4f:52:dc:94:f5:f3:be:9c:3d:45:b2:a6: 7f:79:8a:34:8c:20:df:85:89:8a:ff:f7:f4:80:83: cb:bc:94:8c:72:46:98:87:d6:a7:0b:74:af:fc:2f: 7f:56:f4:0e:fa:06:76:ea:9b:bd:37:63:2b:17:f4: e0:25:fa:f8:43:f5:f2:f6:7a:d6:58:27:99:42:cd: aa:3d:44:ca:32:df:e8:71:bf:27:e4:81:4b:cb:58: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:E6:E3:05:9E:46:04:87:E2:B2:23:3A:A5:48:EF:4B:A8:43:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8e:6e:ca:2d:b3:f0:e2:f3:23:b2:e7:fc:ea:a6:30:33:fe: 82:72:21:8c:da:19:e4:d7:52:35:48:27:9c:41:0f:a4:24:7a: ca:5b:20:bd:bf:30:a6:6b:d6:d1:25:54:89:63:bb:a1:05:77: f4:09:7c:e7:1a:48:85:a2:29:a4:1b:0f:f5:09:a4:b3:c3:78: 44:0b:b6:22:e9:e1:2b:02:c0:23:e3:29:aa:31:b2:ce:10:3a: 0b:d1:e0:4c:0b:b8:d8:34:ac:95:41:81:cb:5e:a4:9d:58:3f: 20:43:ff:0e:c4:0d:14:0a:d6:f4:e5:ce:f9:af:5f:b1:7f:80: 7a:c2:83:80:04:20:34:af:82:b8:e6:30:ba:80:e4:74:f6:fa: 59:40:0a:b8:a3:85:bc:90:f3:29:49:11:d2:ea:ff:4e:73:67: 86:46:87:a6:15:01:9d:70:be:60:14:4a:22:42:d4:de:78:ba: 75:fc:9b:e3:04:55:42:09:36:a1:0d:72:8f:a7:f5:b6:e8:6a: 7a:94:e7:35:0d:7f:b4:5f:5e:6a:62:19:65:b0:58:dc:49:1a: 9f:54:dc:e9:52:09:15:78:fb:04:56:96:51:25:76:83:64:e1: 83:53:c6:64:42:11:94:1a:b9:69:38:ef:45:96:7b:d0:e1:e7: 7a:d6:46:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYkozJSA/ht7LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk M2UwYjU4YmItNmRkZi00MWRmLTljZWUtZGFhOWY1ZDNlOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsw0STI970fS8ki6aDr6fINzk9N9ldcFHwXt nQiJC9o4PVi8GGrV0mS3pZJVRixARDys9lMr1YhmHdcIafn5Y8l2fRA9SHu6oFpp wCbea03I8A0NP6Ff+TERZpEhFQF6+62L5HddqVgsw0T2wlP+HrJa9TPFUfehDPgD IJu1kczMC8hVG0Elfvj59CSuu/wapZSAWtU/rXg6RzVg2GBzbcGb4+tVjQxPUtyU 9fO+nD1FsqZ/eYo0jCDfhYmK//f0gIPLvJSMckaYh9anC3Sv/C9/VvQO+gZ26pu9 N2MrF/TgJfr4Q/Xy9nrWWCeZQs2qPUTKMt/ocb8n5IFLy1hriwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxc5uMFnkYEh+KyIzqlSO9LqEMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYjM2ZDVlOGYtYmFjOC0z NzhiLTg0ODItM2U2ZjIwOGZhMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI8dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiObsots/Di8yOy5/zqpjAz/oJyIYzaGeTXUjVIJ5xBD6QkespbIL2/ MKZr1tElVIlju6EFd/QJfOcaSIWiKaQbD/UJpLPDeEQLtiLp4SsCwCPjKaoxss4Q OgvR4EwLuNg0rJVBgctepJ1YPyBD/w7EDRQK1vTlzvmvX7F/gHrCg4AEIDSvgrjm MLqA5HT2+llACrijhbyQ8ylJEdLq/05zZ4ZGh6YVAZ1wvmAUSiJC1N54unX8m+ME VUIJNqENco+n9bboanqU5zUNf7RfXmpiGWWwWNxJGp9U3OlSCRV4+wRWllEldoNk 4YNTxmRCEZQauWk470WWe9Dh53rWRpk= -----END CERTIFICATE-----Generated at Sat Oct 24 06:58:20 2026 by rpki-client