$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa File: df25439f-a8a5-3d84-9c28-12364575d70b.roa (raw, json) Hash identifier: u6wapB/gdIQ70zMN58bqKiMBfwLZi6ZH5cIg9n8AWdo= Subject key identifier: 27:98:8B:5B:E3:AA:66:56:D2:B4:57:45:EB:F7:FB:82:0C:9B:D3:50 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DFCCC3BB45EA572E7800 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:df:cc:c3:bb:45:ea:57:2e:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=7dcfa9c9-ed7e-4268-b049-366aa7a01646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:03:e1:f3:ef:22:d5:11:2a:50:f0:05:9a: 21:37:dc:59:e1:7b:ea:7b:fe:ef:82:77:72:72:0a: b4:72:cb:9a:78:e7:39:a4:54:44:a3:93:4d:3b:7c: a4:83:33:f6:86:c8:2d:d1:ab:90:6f:67:38:c8:32: 43:22:58:b8:f1:ba:fc:71:1a:b3:f4:7e:ce:71:77: a5:4d:81:f2:ba:02:75:fc:a4:33:f5:2d:26:63:9b: 6b:b7:bc:2e:1f:7b:eb:43:70:c6:1b:b6:6f:38:32: d0:b1:e1:26:8c:c8:d8:6c:24:c2:43:c2:15:2c:ca: e3:51:5a:cb:b8:04:f9:36:0d:7e:ff:f9:cb:99:57: 54:8b:fb:99:71:a7:74:26:d4:15:04:ea:cd:86:ca: f9:af:5d:e5:3a:70:ae:15:5d:5a:bc:99:d8:31:69: 15:a1:14:c1:f0:31:d9:b9:ea:26:17:1a:2e:b5:3a: b3:27:95:d9:7b:73:cd:05:3e:1a:f6:98:75:2f:78: 7e:ad:f8:d5:c2:ff:0d:56:5b:7e:44:f3:17:ec:12: 54:80:d5:c9:3a:1a:39:6c:2f:cf:4e:e8:a7:81:ea: 29:ce:49:f3:56:48:f1:ef:d2:f0:43:2e:5e:fe:c2: 1a:9f:e1:a0:00:78:bf:ad:2f:5f:75:59:ba:ce:35: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:98:8B:5B:E3:AA:66:56:D2:B4:57:45:EB:F7:FB:82:0C:9B:D3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c4:d9:69:38:57:88:ae:8c:72:d5:49:91:22:03:c5:54:5d: 21:b2:d1:68:7d:74:ba:7a:60:ce:3c:86:a7:65:79:d9:e9:9c: 43:28:7e:37:eb:36:a4:b2:ba:29:42:e0:1c:77:df:ec:99:2a: 15:6a:86:68:be:f9:63:ed:43:62:5c:da:58:8e:e3:13:7a:69: 15:1f:43:cc:7d:a7:05:8c:65:9c:da:08:e4:af:3c:a2:6a:24: 75:eb:59:54:1c:ac:45:24:f0:73:2f:96:40:84:dd:0c:d8:6b: c2:42:1a:2b:6c:f0:fd:82:81:d9:14:9e:06:6d:2e:42:f7:bd: 44:8a:4d:f1:92:5e:4d:60:4a:43:95:e4:47:c2:6e:9e:fc:54: 52:3c:9c:e1:c6:c0:6f:63:ab:68:4d:53:2a:57:76:37:e8:db: 89:e0:65:37:40:ec:32:25:1b:39:2a:d1:d8:be:d2:7a:29:a5: 0a:f3:6c:da:f4:cb:3d:9a:dd:eb:df:11:bc:ff:2f:c0:9a:7f: ae:36:88:89:52:51:fb:e5:e4:53:26:ba:50:5c:d6:c0:da:9e: ee:d3:e6:f6:9d:b7:5d:6a:ac:ff:9c:e7:bb:9c:6f:db:a6:7b: e5:47:2e:59:ba:5b:eb:bd:42:7d:90:4c:94:8a:da:c1:8b:2f: 06:68:49:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt/Mw7tF6lcueAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2RjZmE5YzktZWQ3ZS00MjY4LWIwNDktMzY2YWE3YTAxNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcsD4fPvItURKlDwBZohN9xZ4Xvqe/7vgndy cgq0csuaeOc5pFREo5NNO3ykgzP2hsgt0auQb2c4yDJDIli48br8cRqz9H7OcXel TYHyugJ1/KQz9S0mY5trt7wuH3vrQ3DGG7ZvODLQseEmjMjYbCTCQ8IVLMrjUVrL uAT5Ng1+//nLmVdUi/uZcad0JtQVBOrNhsr5r13lOnCuFV1avJnYMWkVoRTB8DHZ ueomFxoutTqzJ5XZe3PNBT4a9ph1L3h+rfjVwv8NVlt+RPMX7BJUgNXJOho5bC/P TuingeopzknzVkjx79LwQy5e/sIan+GgAHi/rS9fdVm6zjXRRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeYi1vjqmZW0rRXRev3+4IMm9NQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGYyNTQzOWYtYThhNS0z ZDg0LTljMjgtMTIzNjQ1NzVkNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3E2Wk4V4iujHLVSZEiA8VUXSGy0Wh9dLp6YM48hqdlednpnEMofjfr NqSyuilC4Bx33+yZKhVqhmi++WPtQ2Jc2liO4xN6aRUfQ8x9pwWMZZzaCOSvPKJq JHXrWVQcrEUk8HMvlkCE3QzYa8JCGits8P2CgdkUngZtLkL3vUSKTfGSXk1gSkOV 5EfCbp78VFI8nOHGwG9jq2hNUypXdjfo24ngZTdA7DIlGzkq0di+0noppQrzbNr0 yz2a3evfEbz/L8Caf642iIlSUfvl5FMmulBc1sDanu7T5vadt11qrP+c57ucb9um e+VHLlm6W+u9Qn2QTJSK2sGLLwZoSYk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:20:32 2025 by rpki-client