$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa File: 0cb626ec-8048-350f-9f19-eb8f88558842.roa (raw, json) Hash identifier: CXIwgrHRzKraDhGYVjtyjnJnYBwfhzCuy2XuLxM65e4= Subject key identifier: DA:36:79:0A:3E:4E:7B:FC:9D:C9:DE:CA:D4:DC:5D:00:3C:46:37:DE Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DF81F53C03AEB0EA9A80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.138.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:df:81:f5:3c:03:ae:b0:ea:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=7a9b0f74-f61b-4860-b227-108fbf482094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:04:aa:fc:90:50:7c:a7:2b:31:4e:90:d6: 44:8f:47:2d:67:30:48:bc:4b:fc:04:ff:97:6d:e0: 4c:02:82:2f:28:53:b8:5d:c6:73:88:ae:c8:5f:de: 80:66:8e:a6:ff:2a:fd:9e:d2:2b:56:d4:0c:3f:e2: b2:95:a5:f8:e4:b3:b3:c7:39:36:4e:e8:ca:8b:2b: dd:3d:e1:af:e5:cd:e1:de:84:17:e0:25:e9:37:77: 99:00:68:f4:af:56:ea:c9:ac:39:e0:11:1d:17:d7: b9:d6:c9:d7:58:48:eb:bd:43:8b:0a:47:74:80:54: ce:b0:f8:29:ee:ea:76:f9:60:d2:0d:ce:3b:6c:de: 07:e6:96:d9:b6:6f:39:91:ef:f5:64:48:9e:f6:3a: 57:48:e7:c9:12:66:15:d9:50:73:5e:de:9a:70:d2: 4a:cc:31:5b:f3:84:f6:b0:b8:fa:59:b7:b3:3e:56: 32:ea:c9:a8:ee:22:28:f0:83:5a:5d:f0:50:8f:b4: f8:c5:36:8a:72:00:8d:99:a5:cf:62:7e:f2:5d:4c: 82:35:2a:4d:53:43:34:36:48:f6:d6:70:11:b4:70: 45:e6:52:fa:81:cc:c7:72:e0:e1:b6:87:9b:f5:6e: 7c:e0:22:8d:d4:8e:93:8b:cc:fb:84:bd:00:b7:0f: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:36:79:0A:3E:4E:7B:FC:9D:C9:DE:CA:D4:DC:5D:00:3C:46:37:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.138.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c8:08:0d:90:ba:61:83:42:23:40:a6:4a:08:6c:98:8c:16: f3:b9:eb:7b:e3:72:4b:3e:7a:33:1a:04:ef:a3:39:72:64:ff: 92:5f:8f:09:6c:a6:eb:01:d5:dd:76:94:6f:3f:13:33:92:6e: 36:b5:d2:b2:a6:80:c9:cc:b7:74:07:36:74:14:55:5b:cb:1a: f4:2b:2b:86:7c:81:67:8a:bc:50:d7:ea:e4:df:d8:60:6d:8d: cd:25:b3:e1:d7:d2:c8:6f:aa:b7:42:c1:a4:85:65:50:53:00: bb:38:6f:5b:6c:16:89:1c:4f:cb:9b:58:f0:0f:14:4b:2b:b0: 7d:02:0a:f2:c2:4d:9e:ec:44:60:7d:a3:aa:b2:ce:84:05:97: 6c:ce:4b:58:5f:8f:c1:40:4f:01:b8:3a:00:9b:e1:5a:17:03: 57:11:a4:53:b4:e9:95:29:b0:d7:61:83:9a:a8:f5:f9:4f:68: 36:01:8f:32:6d:c9:5e:db:ca:7c:4a:07:e3:09:c6:78:ce:1b: 97:46:a7:80:29:1a:08:34:a7:c1:59:62:22:e6:40:8a:23:8c: 80:4e:ec:31:42:a5:09:88:b2:74:4f:66:82:3e:81:43:13:80: fb:2e:24:5b:84:e8:f9:c2:9f:2d:16:00:6e:76:43:96:04:90: 13:2b:24:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt+B9TwDrrDqmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2E5YjBmNzQtZjYxYi00ODYwLWIyMjctMTA4ZmJmNDgyMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOUEqvyQUHynKzFOkNZEj0ctZzBIvEv8BP+X beBMAoIvKFO4XcZziK7IX96AZo6m/yr9ntIrVtQMP+KylaX45LOzxzk2TujKiyvd PeGv5c3h3oQX4CXpN3eZAGj0r1bqyaw54BEdF9e51snXWEjrvUOLCkd0gFTOsPgp 7up2+WDSDc47bN4H5pbZtm85ke/1ZEie9jpXSOfJEmYV2VBzXt6acNJKzDFb84T2 sLj6WbezPlYy6smo7iIo8INaXfBQj7T4xTaKcgCNmaXPYn7yXUyCNSpNU0M0Nkj2 1nARtHBF5lL6gczHcuDhtoeb9W584CKN1I6Ti8z7hL0Atw+q3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo2eQo+Tnv8ncneytTcXQA8RjfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMGNiNjI2ZWMtODA0OC0z NTBmLTlmMTktZWI4Zjg4NTU4ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/ICA2QumGDQiNApkoIbJiMFvO563vjcks+ejMaBO+jOXJk/5Jfjwls pusB1d12lG8/EzOSbja10rKmgMnMt3QHNnQUVVvLGvQrK4Z8gWeKvFDX6uTf2GBt jc0ls+HX0shvqrdCwaSFZVBTALs4b1tsFokcT8ubWPAPFEsrsH0CCvLCTZ7sRGB9 o6qyzoQFl2zOS1hfj8FATwG4OgCb4VoXA1cRpFO06ZUpsNdhg5qo9flPaDYBjzJt yV7bynxKB+MJxnjOG5dGp4ApGgg0p8FZYiLmQIojjIBO7DFCpQmIsnRPZoI+gUMT gPsuJFuE6PnCny0WAG52Q5YEkBMrJKA= -----END CERTIFICATE-----Generated at Mon Sep 15 14:20:38 2025 by rpki-client