$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa File: 00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa (raw, json) Hash identifier: U76A1DPzOwOmbcwwi0X7ubmeVFPAt43usPzBvjJZarw= Subject key identifier: 14:8B:90:5F:60:BE:5D:3B:8E:FB:26:CF:A2:6A:3B:E0:30:41:F8:24 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DEAABD22794186E35080 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 45.42.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:de:aa:bd:22:79:41:86:e3:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=66e5543e-5e3d-4faa-bca1-d6ad87b85d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:cc:71:8d:d8:38:b9:5f:70:f1:79:04:77: 2f:1b:57:f7:ac:04:24:b4:d9:b7:8c:67:30:5b:c8: 27:f3:f1:da:7d:d4:50:d8:15:f8:81:48:dd:80:30: 73:32:c6:86:7f:7c:e2:8b:c1:e7:8d:1d:be:1b:fb: 42:99:a4:1e:19:6b:db:3c:57:b7:af:2b:54:6a:6c: a3:f1:46:9d:13:fa:ed:cf:16:5d:39:34:fe:ea:82: b4:d5:70:3e:d0:0f:dd:ea:fa:8d:46:5f:77:e8:d5: 2d:76:8e:da:ef:b1:6d:9a:0d:e5:a3:68:fa:de:e9: f4:42:de:d3:fe:ad:3a:7a:59:8e:71:d6:4f:1c:23: ad:fb:56:e4:fa:96:b5:e2:5f:6c:4f:b6:5d:42:32: 02:ca:0c:25:ea:f3:a0:a2:ae:65:e7:a5:2c:d9:80: 45:fe:7b:bc:e5:b2:01:05:31:67:ac:60:2e:23:d3: ea:c5:66:88:7d:66:7e:72:0e:e9:66:85:bd:59:2e: 04:fa:16:cb:1b:8e:f6:58:45:4d:12:07:f6:70:28: 7d:c1:df:aa:8d:13:3e:7c:6d:91:2c:ef:d7:44:2b: 0c:cc:a6:fd:0e:fa:4f:e4:31:b2:48:38:a4:02:2c: c5:b6:91:69:b6:3e:45:67:ea:ac:75:18:2c:25:8a: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:90:5F:60:BE:5D:3B:8E:FB:26:CF:A2:6A:3B:E0:30:41:F8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/00f7a4f7-bfe4-30f3-af99-b4e3c9f9387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 45.42.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:40:b1:09:43:cc:bc:9a:23:4a:bf:f4:a6:f6:c1:71:95:23: 37:7c:e2:e4:64:38:1d:2e:55:f3:c4:af:55:e1:c6:2b:c4:13: 4e:d0:1b:67:fc:72:b3:01:5e:f6:3d:e4:2d:6c:99:7c:35:0f: e7:b2:8f:6a:a1:e5:1c:50:0a:d6:67:0d:61:d7:cc:b4:e2:ab: 31:20:09:b7:2f:3a:02:e4:91:42:35:14:c7:f0:0c:c2:5b:b8: ca:76:ec:bc:34:fd:b6:53:0e:81:55:52:3a:58:19:47:7a:15: 04:a3:2d:8d:de:1a:ae:e9:38:f0:17:8c:55:84:38:97:4d:56: 82:bb:1e:56:1b:ee:c6:fa:6d:d6:00:c8:48:b2:43:6c:02:35: 51:22:60:46:59:4e:67:b5:b4:fc:bd:c5:1f:ea:b9:0e:d8:91: b1:26:18:e7:c6:90:c8:83:81:d5:5b:0c:61:25:3a:f8:92:30: ef:be:e5:4a:08:ed:34:fd:c0:a9:42:f7:e6:5f:ab:11:90:c7: bf:e0:c0:60:f5:da:e2:72:16:47:0a:a7:12:35:40:71:98:af: c8:ec:97:ef:3d:22:fb:a1:ce:5b:83:99:53:b3:d1:99:0c:2d: da:c4:19:e4:9f:1b:2a:12:9c:3a:8c:bd:80:85:0d:13:ae:3e: 79:d2:fe:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt6qvSJ5QYbjUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjZlNTU0M2UtNWUzZC00ZmFhLWJjYTEtZDZhZDg3Yjg1ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cPMcY3YOLlfcPF5BHcvG1f3rAQktNm3jGcw W8gn8/HafdRQ2BX4gUjdgDBzMsaGf3zii8HnjR2+G/tCmaQeGWvbPFe3rytUamyj 8UadE/rtzxZdOTT+6oK01XA+0A/d6vqNRl936NUtdo7a77Ftmg3lo2j63un0Qt7T /q06elmOcdZPHCOt+1bk+pa14l9sT7ZdQjICygwl6vOgoq5l56Us2YBF/nu85bIB BTFnrGAuI9PqxWaIfWZ+cg7pZoW9WS4E+hbLG472WEVNEgf2cCh9wd+qjRM+fG2R LO/XRCsMzKb9DvpP5DGySDikAizFtpFptj5FZ+qsdRgsJYroOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSLkF9gvl07jvsmz6JqO+AwQfgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDBmN2E0ZjctYmZlNC0z MGYzLWFmOTktYjRlM2M5ZjkzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRAsQlDzLyaI0q/9Kb2wXGVIzd84uRkOB0uVfPEr1XhxivEE07QG2f8 crMBXvY95C1smXw1D+eyj2qh5RxQCtZnDWHXzLTiqzEgCbcvOgLkkUI1FMfwDMJb uMp27Lw0/bZTDoFVUjpYGUd6FQSjLY3eGq7pOPAXjFWEOJdNVoK7HlYb7sb6bdYA yEiyQ2wCNVEiYEZZTme1tPy9xR/quQ7YkbEmGOfGkMiDgdVbDGElOviSMO++5UoI 7TT9wKlC9+ZfqxGQx7/gwGD12uJyFkcKpxI1QHGYr8jsl+89IvuhzluDmVOz0ZkM LdrEGeSfGyoSnDqMvYCFDROuPnnS/ng= -----END CERTIFICATE-----Generated at Mon Nov 3 14:44:57 2025 by rpki-client