$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa File: c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa (raw, json) Hash identifier: 4c5AhUFATA+Bj9mGH4rjMGYjdM+QxYQAlaUq/WgVpws= Subject key identifier: 69:7C:AC:9A:D0:44:95:CF:2B:15:BE:0C:71:A5:13:F1:4B:34:09:50 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D91C0121209D08A93537DFF00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 63189 IP address blocks: 40.143.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:12:12:09:d0:8a:93:53:7d:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=b2728650-a043-495b-898c-d0a6f3122760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:3f:20:77:41:51:62:f9:2d:a5:49:6e:b3: d6:d9:d2:3e:9e:ce:51:21:af:55:a4:c8:2e:79:c8: 78:f8:4c:cb:04:08:a6:18:c0:69:26:3e:cd:e4:43: 3a:e1:d0:fb:15:d8:b4:d0:02:93:7b:1f:2d:bc:82: 3d:81:14:e1:c9:fb:de:e8:f2:da:87:74:ba:f6:c0: 4f:34:01:ce:9f:da:3f:26:18:c0:eb:01:92:45:10: 75:d3:e0:67:6e:5a:6c:98:c7:9e:3f:14:f1:de:df: 32:ab:de:3e:c2:7f:61:75:46:2a:44:4f:d8:90:4a: 4b:b2:a9:76:b7:13:31:ed:3e:f1:78:69:0d:7d:32: 76:0e:a5:e8:85:a2:fd:d4:41:f2:db:ce:73:33:2a: f5:c9:9d:77:98:58:5d:a2:75:ea:7b:73:fe:4b:d5: eb:17:34:a4:4e:a3:a1:5b:74:58:f1:4b:32:db:d3: 3e:67:94:43:49:3f:ed:d6:b3:c0:d3:cf:7d:bf:09: b3:84:91:67:9b:1e:61:33:9f:d3:99:c6:47:db:69: c5:5e:34:3d:11:ac:78:7c:03:ec:38:88:02:c7:47: f7:09:3d:7c:c3:6d:16:3d:f5:ce:de:d0:05:46:e1: dd:00:06:16:d8:d4:12:a0:eb:6a:0f:79:e5:ae:33: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7C:AC:9A:D0:44:95:CF:2B:15:BE:0C:71:A5:13:F1:4B:34:09:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:62:be:03:53:a4:01:9e:8c:79:9e:a8:48:b4:59:c4:ab:a9: b6:76:2a:ae:52:50:d5:c7:d3:41:6f:dd:d7:ba:7d:88:d0:87: 04:2e:a5:9f:be:2b:19:33:75:ce:77:75:b0:b0:a1:3c:f9:ac: 6a:20:2c:ed:d4:e7:6f:64:4d:e9:e6:86:30:63:b0:a6:c9:c6: 4c:59:a1:67:e3:28:7c:9c:2e:f0:23:71:19:44:21:9e:4c:56: bd:e5:98:e9:9e:64:25:60:2d:e1:98:75:19:48:07:7a:fb:2b: 83:4b:ad:a5:ed:26:ec:6c:3a:3d:26:81:67:83:c4:a3:50:a9: 13:18:9f:f0:ff:4c:a6:e8:11:e0:3d:7a:10:22:5f:ac:03:17: 0d:e8:90:9f:47:bf:ce:3d:2e:b8:10:cc:ac:60:ff:8a:18:73: ec:09:1d:8a:ca:6c:d4:a0:24:92:89:52:e4:86:a9:37:30:93: f7:74:61:18:d9:73:18:29:c5:fb:d8:05:69:60:15:c2:74:f7: ba:3f:74:2a:05:59:0a:03:83:a5:dd:2e:2a:e6:93:2d:b5:9e: b6:bb:84:70:6c:43:71:c6:4c:79:cd:91:39:0b:f6:57:94:d6: eb:f7:b9:40:f8:f5:68:98:81:e1:b1:45:f5:82:a6:e4:4f:b2: b9:bc:67:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBISCdCKk1N9/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YjI3Mjg2NTAtYTA0My00OTViLTg5OGMtZDBhNmYzMTIyNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip0/IHdBUWL5LaVJbrPW2dI+ns5RIa9VpMgu ech4+EzLBAimGMBpJj7N5EM64dD7Fdi00AKTex8tvII9gRThyfve6PLah3S69sBP NAHOn9o/JhjA6wGSRRB10+BnblpsmMeePxTx3t8yq94+wn9hdUYqRE/YkEpLsql2 txMx7T7xeGkNfTJ2DqXohaL91EHy285zMyr1yZ13mFhdonXqe3P+S9XrFzSkTqOh W3RY8Usy29M+Z5RDST/t1rPA0899vwmzhJFnmx5hM5/TmcZH22nFXjQ9Eax4fAPs OIgCx0f3CT18w20WPfXO3tAFRuHdAAYW2NQSoOtqD3nlrjNn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl8rJrQRJXPKxW+DHGlE/FLNAlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYzVkZDI4MWYtNGMzNi0z ZTFjLWI4NDEtZTJmYWJkZjMxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI+PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdivgNTpAGejHmeqEi0WcSrqbZ2Kq5SUNXH00Fv3de6fYjQhwQupZ++ Kxkzdc53dbCwoTz5rGogLO3U529kTenmhjBjsKbJxkxZoWfjKHycLvAjcRlEIZ5M Vr3lmOmeZCVgLeGYdRlIB3r7K4NLraXtJuxsOj0mgWeDxKNQqRMYn/D/TKboEeA9 ehAiX6wDFw3okJ9Hv849LrgQzKxg/4oYc+wJHYrKbNSgJJKJUuSGqTcwk/d0YRjZ cxgpxfvYBWlgFcJ097o/dCoFWQoDg6XdLirmky21nra7hHBsQ3HGTHnNkTkL9leU 1uv3uUD49WiYgeGxRfWCpuRPsrm8Z5A= -----END CERTIFICATE-----Generated at Wed Apr 22 08:32:16 2026 by rpki-client