$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa File: dee838bc-f216-31c6-87dd-91cad1fcab6a.roa (raw, json) Hash identifier: g3l8nS4HxCRIuvhJ4paQNc/xx7uN5KEe2ergkkyD2EA= Subject key identifier: 0D:B5:D0:81:1D:D5:80:93:58:8F:64:D6:67:58:3B:F3:AB:F3:E6:2B Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DFA4A778D47415F9C880 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:df:a4:a7:78:d4:74:15:f9:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=aa65ce10-7f97-4586-8212-e6373150a8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:48:e6:e1:f8:c6:d6:7a:6a:90:ef:70:07: 69:3d:5e:2f:0f:68:0d:88:aa:7c:2d:20:25:d7:6f: 0e:7f:28:b2:0e:88:63:48:c1:94:c5:1a:a2:5c:37: b2:c2:a7:08:99:e0:ed:97:f8:04:fc:0d:bc:64:d9: df:04:8f:6f:d3:55:97:58:f2:be:be:d6:56:f3:d6: 83:3c:56:3a:c4:49:c2:73:55:03:af:c8:95:a7:9e: e8:28:41:57:67:0e:61:99:65:c8:5a:56:d0:8c:d3: e3:2f:b2:d9:e6:d3:0f:b2:e7:e7:ab:ce:ed:04:0c: f1:0b:19:f3:7b:0b:88:e5:8d:a1:2a:ff:12:d9:35: 56:ea:5d:d3:13:c0:cd:58:74:8d:20:d6:92:f7:8e: 52:0a:63:7b:83:61:17:64:27:01:61:1b:25:51:c9: 39:8b:26:91:32:3b:4d:b9:f6:a5:91:6d:57:f3:e7: 27:33:98:7f:0a:c2:b6:81:bb:54:00:34:25:d6:d6: 81:cc:f6:85:d3:6a:cf:48:f0:c1:6a:9f:70:a6:db: 94:f7:61:da:c7:63:e9:36:22:37:63:1e:b2:3e:e6: 26:30:e4:70:ef:4c:8e:b5:68:67:e9:31:a5:89:38: f3:1b:bd:bd:90:e8:f8:65:31:e5:79:0e:73:b1:bc: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B5:D0:81:1D:D5:80:93:58:8F:64:D6:67:58:3B:F3:AB:F3:E6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:6e:f1:33:c5:52:21:f8:2d:23:9d:9f:4f:1f:82:0c:84:f2: 35:ed:55:b1:f1:ae:24:b5:d4:5b:87:1e:54:2d:b3:ec:74:d7: 5d:ce:a1:e2:9f:3c:1c:e0:cd:d0:56:c6:e8:9a:7a:00:b9:8f: f3:6f:ff:1f:27:18:5d:f0:b0:fe:21:10:40:5b:c6:52:dc:e8: a5:48:1f:c2:e9:82:8c:c9:b9:8f:f5:88:da:d0:26:93:79:5b: df:6f:1a:ce:cc:3e:61:83:24:e4:89:31:c0:c4:c0:3c:66:d5: c1:77:17:e8:a2:f2:b6:2b:9c:a6:12:a9:dd:22:c9:84:36:c4: 39:51:b0:6a:58:14:22:a4:39:6c:ec:a5:c9:52:03:77:f6:43: 3a:8a:d6:49:6f:d0:0c:03:57:31:55:ce:65:e3:53:a9:63:31: 4e:46:6a:17:fc:6c:06:b4:44:78:ee:01:5b:c8:60:8d:7d:79: b8:a3:f4:15:a4:f7:6c:16:fa:75:3b:d3:c2:aa:bf:3c:1f:02: f3:82:60:d7:0b:b5:3d:80:0e:29:ff:1b:6c:9d:d9:50:3d:90: a7:9e:57:5f:6a:05:a2:e6:5a:03:54:26:3a:e7:35:fc:08:2d: 14:3b:18:f1:57:22:d0:d7:d6:15:42:3a:d1:3d:4a:8e:49:b9: 69:9c:65:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt+kp3jUdBX5yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWE2NWNlMTAtN2Y5Ny00NTg2LTgyMTItZTYzNzMxNTBhOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKhI5uH4xtZ6apDvcAdpPV4vD2gNiKp8LSAl 128OfyiyDohjSMGUxRqiXDeywqcImeDtl/gE/A28ZNnfBI9v01WXWPK+vtZW89aD PFY6xEnCc1UDr8iVp57oKEFXZw5hmWXIWlbQjNPjL7LZ5tMPsufnq87tBAzxCxnz ewuI5Y2hKv8S2TVW6l3TE8DNWHSNINaS945SCmN7g2EXZCcBYRslUck5iyaRMjtN ufalkW1X8+cnM5h/CsK2gbtUADQl1taBzPaF02rPSPDBap9wptuU92Hax2PpNiI3 Yx6yPuYmMORw70yOtWhn6TGliTjzG729kOj4ZTHleQ5zsbx4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA210IEd1YCTWI9k1mdYO/Or8+YrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGVlODM4YmMtZjIxNi0z MWM2LTg3ZGQtOTFjYWQxZmNhYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENu8TPFUiH4LSOdn08fggyE8jXtVbHxriS11FuHHlQts+x0113OoeKf PBzgzdBWxuiaegC5j/Nv/x8nGF3wsP4hEEBbxlLc6KVIH8LpgozJuY/1iNrQJpN5 W99vGs7MPmGDJOSJMcDEwDxm1cF3F+ii8rYrnKYSqd0iyYQ2xDlRsGpYFCKkOWzs pclSA3f2QzqK1klv0AwDVzFVzmXjU6ljMU5Gahf8bAa0RHjuAVvIYI19ebij9BWk 92wW+nU708KqvzwfAvOCYNcLtT2ADin/G2yd2VA9kKeeV19qBaLmWgNUJjrnNfwI LRQ7GPFXItDX1hVCOtE9So5JuWmcZWE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:37:57 2025 by rpki-client