$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa File: 1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa (raw, json) Hash identifier: 2t84pUOVJUPGp0PmPAwfKNKMdFPBhfylEyaI8PM9uAk= Subject key identifier: C6:56:77:FC:5C:B1:79:99:04:FB:37:99:02:1D:CA:D1:13:EA:0C:B4 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C1C26BED14021863FFC0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 162.212.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c1:c2:6b:ed:14:02:18:63:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=0e81ae53-599d-447c-ae82-20c23d3485c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:28:09:44:d8:02:cc:dd:dc:7f:21:47:ab:55: 19:a5:68:2d:19:a7:0c:5b:50:ad:87:17:af:b9:e4: ee:36:98:9b:51:e2:d6:f2:e2:7e:4c:6e:4e:e5:c5: 35:66:25:d7:55:f9:ce:50:e3:32:20:2d:fd:23:72: a9:56:eb:8f:3e:18:d2:3d:13:e9:9e:7f:d8:ae:d3: 64:06:42:73:12:28:03:16:86:1c:7f:03:e5:cc:49: 86:32:8c:9f:65:70:66:8d:07:1a:26:c7:7e:0f:da: 25:46:3b:de:4a:f7:2a:e8:74:59:52:9d:90:7e:6d: 62:08:9c:b7:4d:fc:a8:43:60:04:f0:7f:28:28:5e: 75:2b:b9:0a:b9:3f:43:b9:c1:fe:5d:9f:01:39:9a: 24:bc:4a:55:70:c5:c0:64:7b:80:d0:4a:e3:9d:b0: 16:f1:2b:26:e2:43:cf:5d:66:d2:c6:b9:22:6e:d8: 57:a0:33:d4:69:28:c0:43:87:3f:36:b5:07:24:3b: 29:e0:0b:a5:6f:d0:68:bf:93:5b:62:05:78:b5:6d: 40:12:d4:d9:ec:f8:42:72:f3:49:0a:78:20:3b:a8: 9a:e8:15:77:ad:a7:31:fc:8c:1e:9d:55:22:ab:15: 64:7d:e0:63:6d:cd:e2:04:53:cd:6f:bd:e1:5e:e9: e0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:77:FC:5C:B1:79:99:04:FB:37:99:02:1D:CA:D1:13:EA:0C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 162.212.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:95:92:07:cf:d6:5e:60:6b:2a:f2:06:57:a9:53:b7:a6:82: 8a:15:9c:c8:25:23:7d:7c:7b:b1:a0:27:a0:cb:f3:3e:7c:a6: 76:b7:24:75:69:5d:7c:6e:e3:3f:d6:cb:01:87:2b:47:55:3a: 0a:a5:04:c0:0f:4a:ce:be:5b:a7:37:46:f2:ac:21:fe:65:e7: fe:65:6b:b2:39:1f:74:af:0e:f5:25:9e:bc:b9:9e:e4:0c:5a: ad:86:67:72:68:38:c0:09:42:3b:1c:35:89:6c:7c:48:33:d7: b8:1e:4c:40:e2:8c:15:9c:80:15:47:38:e6:c4:0d:c0:88:52: 61:2b:5e:c9:dc:23:53:b6:4e:9e:43:3b:dd:bd:6a:29:35:1e: 5b:01:a7:60:c6:a7:9a:db:d5:ab:f5:5a:5d:b3:cf:d7:b2:85: 49:eb:93:df:30:4a:92:34:6b:da:97:1d:8d:da:bd:67:5b:a2: 5f:00:b7:b9:3c:e0:29:00:b4:2b:86:d1:36:55:a9:1b:19:16: 2e:9d:c0:1b:ec:5f:ae:6a:d7:f9:47:7b:a3:20:5b:fd:b8:fa: 0d:61:2a:c9:51:a1:28:8d:c2:ff:6c:a4:d7:fb:4d:79:de:29: ca:1b:96:02:66:a8:c9:1c:c9:ef:86:63:6b:98:f9:27:43:72: fc:fd:9f:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sHCa+0UAhhj/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MGU4MWFlNTMtNTk5ZC00NDdjLWFlODItMjBjMjNkMzQ4NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSgJRNgCzN3cfyFHq1UZpWgtGacMW1Cthxev ueTuNpibUeLW8uJ+TG5O5cU1ZiXXVfnOUOMyIC39I3KpVuuPPhjSPRPpnn/YrtNk BkJzEigDFoYcfwPlzEmGMoyfZXBmjQcaJsd+D9olRjveSvcq6HRZUp2Qfm1iCJy3 TfyoQ2AE8H8oKF51K7kKuT9DucH+XZ8BOZokvEpVcMXAZHuA0ErjnbAW8Ssm4kPP XWbSxrkibthXoDPUaSjAQ4c/NrUHJDsp4Aulb9Bov5NbYgV4tW1AEtTZ7PhCcvNJ CnggO6ia6BV3racx/IwenVUiqxVkfeBjbc3iBFPNb73hXungAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZWd/xcsXmZBPs3mQIdytET6gy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWIyYjlkZjktMDZjYS0z MjNhLWI1YzgtMWVmMWRkNTk2OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2VkgfP1l5gayryBlepU7emgooVnMglI318e7GgJ6DL8z58pna3JHVp XXxu4z/WywGHK0dVOgqlBMAPSs6+W6c3RvKsIf5l5/5la7I5H3SvDvUlnry5nuQM Wq2GZ3JoOMAJQjscNYlsfEgz17geTEDijBWcgBVHOObEDcCIUmErXsncI1O2Tp5D O929aik1HlsBp2DGp5rb1av1Wl2zz9eyhUnrk98wSpI0a9qXHY3avWdbol8At7k8 4CkAtCuG0TZVqRsZFi6dwBvsX65q1/lHe6MgW/24+g1hKslRoSiNwv9spNf7TXne KcoblgJmqMkcye+GY2uY+SdDcvz9n8E= -----END CERTIFICATE-----Generated at Mon Sep 15 14:18:53 2025 by rpki-client