$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa File: 823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa (raw, json) Hash identifier: vXxhajAIFddsWBMoPhtAET7sHP50pOUQD6gxHNJ8VPc= Subject key identifier: D6:AF:D0:32:3C:0B:EE:B2:1C:AC:E8:EF:EA:74:54:52:20:F4:42:22 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C1AEEB279F4BFA251080 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 162.217.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c1:ae:eb:27:9f:4b:fa:25:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=aa11ad7b-5b45-4f6b-a0e2-ea189d4825b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:37:6a:4d:99:1c:9c:15:35:33:f8:bf:1c: d5:cc:f3:c0:f6:5a:31:01:28:8f:22:e8:b7:34:91: f0:4b:a6:f2:4f:aa:d7:d3:04:da:92:e5:21:01:20: 03:15:90:5a:77:b1:9d:15:79:c5:63:8c:ef:c7:00: 38:50:2d:c5:62:b9:53:03:3f:39:32:be:16:2e:85: 21:cd:a4:79:6d:03:12:b4:e3:49:21:38:85:50:59: 84:71:aa:9e:58:bf:36:47:43:2b:f5:cb:5c:8c:fb: a2:a3:a0:f6:40:c0:10:c6:09:e7:92:ea:82:be:5b: 4e:51:9f:99:b0:8b:52:38:f7:df:e8:c9:ad:fa:ce: 76:c4:88:8c:38:de:a0:db:4a:4a:39:17:03:a5:78: 54:87:eb:86:00:f8:0b:c7:6b:b3:96:5b:6b:54:32: 27:82:b6:69:98:d3:d0:c3:ff:40:09:1f:fd:c6:c6: e4:91:a9:25:3f:d4:1d:06:ae:81:67:dc:9b:e9:ca: a5:25:2d:54:5a:af:d5:23:f6:86:84:e4:5e:b2:f0: ef:52:4b:b7:49:e6:05:e1:e5:5f:9e:50:2e:b1:9a: 5f:7a:f0:e0:d1:1a:1d:d3:b5:12:bc:5c:85:19:e3: 89:01:e4:eb:28:69:bc:a8:5e:63:b9:7c:dc:91:ca: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AF:D0:32:3C:0B:EE:B2:1C:AC:E8:EF:EA:74:54:52:20:F4:42:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.217.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d1:97:d6:4f:02:a8:71:52:77:dc:1c:26:a3:96:18:25:70: 84:ed:54:0b:a2:57:e3:4a:db:b6:03:5a:d9:36:be:1e:92:2b: 0e:ec:08:e6:d3:89:a1:35:3a:be:27:fb:bb:4a:0f:0f:22:e1: 36:9b:88:d5:aa:0a:d0:72:a1:e6:90:89:7e:79:8a:ef:ee:c3: 06:52:08:a5:ab:f1:30:c2:41:e7:53:a0:45:66:8b:15:d5:39: 87:73:1e:7a:0b:c8:a4:ba:d1:ec:c7:39:25:e9:33:91:ee:77: ce:43:f5:5b:5f:e3:9a:8d:70:4b:39:cd:10:10:3c:cd:27:fc: 6b:78:80:11:fa:82:f2:f2:b8:c5:b2:9a:15:46:e7:df:69:89: 76:fe:7b:62:ad:77:ce:b7:aa:74:68:a8:d9:8a:d9:e3:98:ff: 91:13:08:c3:19:2d:58:c7:f4:d2:a6:ff:55:44:f5:66:1f:85: 07:d9:88:44:b1:0d:7d:b3:2e:4b:e1:47:b9:30:d4:33:fc:87: 22:8c:0e:c7:54:3a:b0:a6:06:62:e1:12:b5:5e:be:0b:f5:76: ff:45:ff:61:73:f5:d3:be:58:98:42:b2:40:74:35:39:1e:49: ef:45:71:0a:c3:6e:29:fa:b6:57:03:95:d4:a2:d7:95:0a:88: cb:53:84:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sGu6yefS/olEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWExMWFkN2ItNWI0NS00ZjZiLWEwZTItZWExODlkNDgyNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/A3ak2ZHJwVNTP4vxzVzPPA9loxASiPIui3 NJHwS6byT6rX0wTakuUhASADFZBad7GdFXnFY4zvxwA4UC3FYrlTAz85Mr4WLoUh zaR5bQMStONJITiFUFmEcaqeWL82R0Mr9ctcjPuio6D2QMAQxgnnkuqCvltOUZ+Z sItSOPff6Mmt+s52xIiMON6g20pKORcDpXhUh+uGAPgLx2uzlltrVDIngrZpmNPQ w/9ACR/9xsbkkaklP9QdBq6BZ9yb6cqlJS1UWq/VI/aGhOResvDvUku3SeYF4eVf nlAusZpfevDg0Rod07USvFyFGeOJAeTrKGm8qF5juXzckco68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNav0DI8C+6yHKzo7+p0VFIg9EIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvODIzYjQwN2UtNmFlNC0z MGExLWFlMTgtODJhNWJhNzdiZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTRl9ZPAqhxUnfcHCajlhglcITtVAuiV+NK27YDWtk2vh6SKw7sCObT iaE1Or4n+7tKDw8i4TabiNWqCtByoeaQiX55iu/uwwZSCKWr8TDCQedToEVmixXV OYdzHnoLyKS60ezHOSXpM5Hud85D9Vtf45qNcEs5zRAQPM0n/Gt4gBH6gvLyuMWy mhVG599piXb+e2Ktd863qnRoqNmK2eOY/5ETCMMZLVjH9NKm/1VE9WYfhQfZiESx DX2zLkvhR7kw1DP8hyKMDsdUOrCmBmLhErVevgv1dv9F/2Fz9dO+WJhCskB0NTke Se9FcQrDbin6tlcDldSi15UKiMtThPA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:37:31 2025 by rpki-client