$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/86bfa98b-d00d-3c32-a493-79e47b689306.roa File: 86bfa98b-d00d-3c32-a493-79e47b689306.roa (raw, json) Hash identifier: C3zq6c6YcZVnhMElzbaykJzKSMk5nFkrhOi77otyEqs= Subject key identifier: 2E:51:7A:1B:41:8F:F1:C3:C1:4B:BD:CD:6B:D0:C0:D0:EF:56:2F:56 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B110C0DA27C09616C48504950 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/86bfa98b-d00d-3c32-a493-79e47b689306.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 205.151.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0d:a2:7c:09:61:6c:48:50:49:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=ea2487ac-3ce0-4bd3-983d-16e80b5ae99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:45:5f:2e:a5:26:04:4b:5b:4a:f1:1d:b2:01: 18:11:d5:b0:ed:9d:42:ec:43:dd:4c:54:9e:19:3a: a3:83:e3:01:22:09:1f:06:3c:71:fd:fe:ed:51:92: 53:9b:52:fb:b0:01:71:90:9f:72:06:d1:b0:55:50: ce:43:a3:b5:10:6f:7e:2b:36:16:5f:97:61:b1:03: 68:77:20:29:37:1c:e5:43:5e:19:60:25:1a:fc:16: 69:8a:41:d3:b7:47:79:d8:90:64:35:ca:42:61:d4: 62:50:32:b4:e8:13:e3:bf:ec:31:17:e7:5d:1c:d9: 7e:29:6b:45:a5:cb:ab:18:e1:f9:45:1f:62:99:ff: 61:77:27:1f:56:c2:20:f6:fb:e4:76:68:ec:14:37: 04:f1:57:92:e0:40:75:65:5f:d5:b3:38:56:d7:a9: 64:03:a5:ad:3a:8a:28:85:9d:bc:be:7a:2a:28:f8: e5:d7:1d:be:40:83:3f:9f:de:c9:e8:3b:e3:19:ee: a2:52:fb:d7:0c:e4:37:cd:43:e5:af:a7:42:05:e4: ae:6a:d1:86:c3:3f:8a:0d:59:c9:cc:0f:da:85:b1: 00:f9:05:8a:5c:c1:85:60:f4:ae:00:f4:f5:62:b7: 87:27:89:d7:5f:3c:0e:e9:de:44:a2:a6:b1:3a:20: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:51:7A:1B:41:8F:F1:C3:C1:4B:BD:CD:6B:D0:C0:D0:EF:56:2F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/86bfa98b-d00d-3c32-a493-79e47b689306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 205.151.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:18:c8:41:c0:1b:25:f2:cc:3e:1b:46:d1:d2:41:16:08:ce: 30:26:e1:f5:98:53:b5:38:27:20:65:3a:4e:f5:13:ba:1f:a2: d2:4f:90:b6:0d:38:c4:1d:cf:b4:1a:2b:a6:8a:b4:35:37:b6: 6f:44:4e:94:f3:1d:b7:e9:d4:f6:78:23:dd:57:02:11:43:80: e0:91:e8:59:3c:c5:43:8d:e6:be:2d:f8:a8:1f:96:53:53:a3: 3a:04:a4:fb:c8:5f:ce:68:5c:40:57:93:62:5c:7d:21:2f:b5: 66:02:1a:ce:3d:bf:8c:9f:a9:6e:38:be:fd:ca:67:ed:5c:ca: 05:9e:56:8a:30:82:8e:8e:a3:de:f1:d1:1e:dd:a7:94:93:fb: 7c:ad:60:43:07:da:47:a3:c0:0a:63:71:dc:03:e4:4e:bd:6e: 84:38:13:89:58:4d:b7:17:1a:a6:7d:00:f6:a5:a4:17:34:9f: 7b:c3:2d:46:d5:e1:1c:de:24:6b:20:c4:19:af:26:8b:1b:c3: 5b:a3:6a:3e:b8:7c:c5:7e:f8:1a:4c:67:b9:2e:d9:3c:8e:8d: 61:a2:50:41:b2:33:9e:f3:0a:3c:01:6f:b6:c3:4a:be:0c:1f: 60:ca:cc:ed:10:13:6c:f7:80:7c:c0:fb:f8:0d:3b:bd:01:04: c5:15:dd:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDA2ifAlhbEhQSVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWEyNDg3YWMtM2NlMC00YmQzLTk4M2QtMTZlODBiNWFlOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEVfLqUmBEtbSvEdsgEYEdWw7Z1C7EPdTFSe GTqjg+MBIgkfBjxx/f7tUZJTm1L7sAFxkJ9yBtGwVVDOQ6O1EG9+KzYWX5dhsQNo dyApNxzlQ14ZYCUa/BZpikHTt0d52JBkNcpCYdRiUDK06BPjv+wxF+ddHNl+KWtF pcurGOH5RR9imf9hdycfVsIg9vvkdmjsFDcE8VeS4EB1ZV/VszhW16lkA6WtOooo hZ28vnoqKPjl1x2+QIM/n97J6DvjGe6iUvvXDOQ3zUPlr6dCBeSuatGGwz+KDVnJ zA/ahbEA+QWKXMGFYPSuAPT1YreHJ4nXXzwO6d5EoqaxOiAEmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5RehtBj/HDwUu9zWvQwNDvVi9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvODZiZmE5OGItZDAwZC0z YzMyLWE0OTMtNzllNDdiNjg5MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEYyEHAGyXyzD4bRtHSQRYIzjAm4fWYU7U4JyBlOk71E7ofotJPkLYN OMQdz7QaK6aKtDU3tm9ETpTzHbfp1PZ4I91XAhFDgOCR6Fk8xUON5r4t+KgfllNT ozoEpPvIX85oXEBXk2JcfSEvtWYCGs49v4yfqW44vv3KZ+1cygWeVoowgo6Oo97x 0R7dp5ST+3ytYEMH2kejwApjcdwD5E69boQ4E4lYTbcXGqZ9APalpBc0n3vDLUbV 4RzeJGsgxBmvJosbw1ujaj64fMV++BpMZ7ku2TyOjWGiUEGyM57zCjwBb7bDSr4M H2DKzO0QE2z3gHzA+/gNO70BBMUV3Ww= -----END CERTIFICATE-----Generated at Wed Nov 5 17:37:28 2025 by rpki-client