$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa File: ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa (raw, json) Hash identifier: 4RoXCneqX+4kfRzeqBSfk6Zauk39/91DQ5WT89vJ1/U= Subject key identifier: 2A:35:59:14:73:36:07:DE:E8:60:85:0F:72:76:2C:0D:AC:0D:09:79 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C19BEEB721D18F872F00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 162.223.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c1:9b:ee:b7:21:d1:8f:87:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=5750626a-fb6f-4100-b1bc-3af0a38ed22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3e:75:b7:a8:8c:bc:2b:d5:04:fe:5e:1b:c0: f5:cf:4c:2b:7e:71:9f:bc:22:99:f6:83:f4:a5:39: a8:4c:e6:b5:4e:37:2e:7b:5c:16:12:15:2f:6a:bb: 82:ce:8e:17:64:9a:5c:d5:b2:7e:82:e0:58:14:75: b1:59:7a:7d:eb:e5:28:48:e3:eb:cd:f3:b9:be:c7: 61:4d:09:9f:c6:a9:26:01:9c:94:35:23:82:0f:b9: 8c:5f:84:cd:4f:ca:cb:87:f6:34:d9:38:31:44:95: 10:d2:7f:19:09:e4:a4:b4:61:e7:85:40:25:6e:1d: 61:a6:45:54:d2:ba:36:12:76:96:a0:dd:5c:21:bc: fa:a3:81:a0:0a:d4:46:37:43:6c:a3:41:cb:5c:ad: 05:58:74:98:ea:a2:b0:ff:0e:4e:75:a4:21:97:fa: ce:71:c9:f5:c8:29:4e:a1:61:c9:ad:bc:5f:3f:f3: e6:c0:7d:31:5c:c5:f7:6d:65:4a:4d:d3:8a:07:e7: fc:1c:a1:b1:33:e1:fe:f4:fe:2e:cf:a6:e7:57:10: 4f:fc:c8:a5:30:6b:d9:da:bf:cd:4d:7b:6a:c9:97: 34:a5:23:e3:2d:75:bd:4b:aa:c3:19:82:32:2f:03: 86:ea:e6:36:f9:bf:db:85:ff:8c:e7:67:99:07:c9: 6f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:35:59:14:73:36:07:DE:E8:60:85:0F:72:76:2C:0D:AC:0D:09:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ea2e4c0c-4933-395e-aa97-4a6ebac8480b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.223.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:25:49:a6:de:ed:15:98:e1:ea:9c:5a:47:c8:31:09:cf:d6: d8:4e:19:90:37:36:84:c7:e9:8d:ad:bc:17:59:10:9f:66:92: b1:df:4a:4d:31:2e:62:50:ea:c0:c3:9f:33:a3:3c:42:59:83: 35:a3:9c:8c:81:68:bf:ed:a8:c5:d1:2d:7e:fa:9c:c7:a3:37: 9f:91:0d:f7:16:52:1c:dc:95:d1:cf:56:1a:99:07:33:8b:c4: 85:96:6d:dc:b7:a6:44:a2:3d:cf:97:8d:ac:5f:d8:fa:74:88: b8:cb:82:84:c2:e6:ba:3f:38:e5:ec:88:cc:eb:6a:83:bb:e7: 94:bb:76:14:94:14:4e:f3:0a:18:2d:23:5e:5b:99:cf:16:94: 85:4b:9d:17:d6:9f:0d:85:24:ee:fe:c0:b5:47:84:b2:aa:84: 80:b0:56:ad:05:8a:1a:6c:d0:45:9b:2c:77:f6:ea:3f:aa:db: 1c:da:93:b9:49:e6:e2:ff:e1:23:ce:b0:56:d9:cf:95:60:d2: 81:32:41:e6:06:cc:53:83:23:5e:b4:06:f2:59:31:f4:8e:d5: 27:58:eb:71:f3:a6:42:95:e6:06:ce:38:3f:cc:19:c5:86:df: 17:83:f0:80:26:c6:c2:ed:8a:45:26:e5:e5:26:4e:cd:e7:79: 84:4a:15:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sGb7rch0Y+HLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NTc1MDYyNmEtZmI2Zi00MTAwLWIxYmMtM2FmMGEzOGVkMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz51t6iMvCvVBP5eG8D1z0wrfnGfvCKZ9oP0 pTmoTOa1Tjcue1wWEhUvaruCzo4XZJpc1bJ+guBYFHWxWXp96+UoSOPrzfO5vsdh TQmfxqkmAZyUNSOCD7mMX4TNT8rLh/Y02TgxRJUQ0n8ZCeSktGHnhUAlbh1hpkVU 0ro2EnaWoN1cIbz6o4GgCtRGN0Nso0HLXK0FWHSY6qKw/w5OdaQhl/rOccn1yClO oWHJrbxfP/PmwH0xXMX3bWVKTdOKB+f8HKGxM+H+9P4uz6bnVxBP/MilMGvZ2r/N TXtqyZc0pSPjLXW9S6rDGYIyLwOG6uY2+b/bhf+M52eZB8lvhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo1WRRzNgfe6GCFD3J2LA2sDQl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZWEyZTRjMGMtNDkzMy0z OTVlLWFhOTctNGE2ZWJhYzg0ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFElSabe7RWY4eqcWkfIMQnP1thOGZA3NoTH6Y2tvBdZEJ9mkrHfSk0x LmJQ6sDDnzOjPEJZgzWjnIyBaL/tqMXRLX76nMejN5+RDfcWUhzcldHPVhqZBzOL xIWWbdy3pkSiPc+Xjaxf2Pp0iLjLgoTC5ro/OOXsiMzraoO755S7dhSUFE7zChgt I15bmc8WlIVLnRfWnw2FJO7+wLVHhLKqhICwVq0Fihps0EWbLHf26j+q2xzak7lJ 5uL/4SPOsFbZz5Vg0oEyQeYGzFODI160BvJZMfSO1SdY63HzpkKV5gbOOD/MGcWG 3xeD8IAmxsLtikUm5eUmTs3neYRKFXY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:38:06 2025 by rpki-client