$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa File: 1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa (raw, json) Hash identifier: omT6nAPsCBueRHUS43C55IzGa1VnpWyO2+WRYDEo3R8= Subject key identifier: 9D:50:FB:50:61:E1:B3:EE:5C:6D:A6:F3:61:ED:7F:9F:BA:9A:71:A1 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C239AD565CAE4199D4A0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 104.245.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c2:39:ad:56:5c:ae:41:99:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=fa7a4c5e-4c91-4145-9d9a-cc98fe18b269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:46:64:3d:20:12:7f:e7:6c:5a:50:58:dd: 27:1a:7c:fa:bb:b3:0d:7f:44:4b:2f:bd:7f:45:9b: 2c:1b:69:f8:9e:3e:3e:a3:91:d7:7c:2e:b6:0c:69: c7:c0:33:cc:ad:a4:0e:a8:a1:91:1f:c1:bf:f0:e0: ba:c5:46:42:fe:85:1a:f9:85:bc:b0:d0:fb:b1:45: 2d:00:f4:80:3f:f9:af:6a:6a:19:d1:a0:89:33:d5: a0:d7:55:81:b8:26:6b:ce:bf:fe:f3:aa:a1:05:9d: 2f:1e:d1:6e:4c:9d:de:75:05:48:7a:cc:e3:59:00: 3d:ee:b9:77:1e:e3:c1:6e:a5:8e:cb:1d:b0:3a:6e: d8:97:18:a3:1c:d6:3e:b9:ce:76:b3:82:c5:c2:f7: 48:3a:13:07:de:32:60:f8:13:c5:9b:46:e7:12:38: 6e:e7:9f:b9:dc:98:cf:d6:c4:57:fe:36:65:6e:b1: 96:c4:71:2c:28:45:ab:60:19:aa:c5:a1:3a:4c:a2: 95:7d:6e:a4:2e:63:d8:2e:af:b0:50:c5:77:0b:fe: ff:43:5a:b7:df:3b:04:75:f0:ff:0a:67:cf:e9:ec: c8:b2:77:be:62:0c:3f:2c:90:6f:c3:bf:5f:66:ae: 75:51:4c:0d:53:ed:cd:df:da:c5:50:27:f8:bb:60: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:50:FB:50:61:E1:B3:EE:5C:6D:A6:F3:61:ED:7F:9F:BA:9A:71:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1fb06752-ee59-3efb-894c-01b3e3a45c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.245.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b9:1a:6d:96:e8:ed:34:1f:de:83:f5:35:df:47:db:27:59: 89:91:79:56:eb:6a:67:8f:46:88:b0:79:6d:f0:e4:6e:c7:b6: dd:3e:55:39:11:4e:63:9a:5b:f0:17:05:e8:d7:8e:4e:f8:f9: d9:3f:47:6c:73:1b:f0:9e:e8:e7:4f:1d:69:f6:75:c0:e5:d4: 8b:4e:6c:84:6b:c5:cd:a7:23:1b:ce:c4:07:a4:2e:12:8e:bd: 31:69:51:0f:ed:96:d5:60:fa:0f:11:89:19:83:04:b9:7c:2e: e7:13:1f:73:11:80:59:fa:95:c8:b8:92:82:ee:82:ce:ab:4b: 70:64:73:bf:c7:07:15:a6:fc:79:d6:ea:12:71:03:ac:12:98: 74:b1:24:2d:7c:3e:a1:96:eb:ed:a6:05:8f:5c:89:75:ba:5d: 7c:f8:d4:de:a3:7a:83:89:c9:90:92:0d:84:69:20:d8:c2:f1: 52:9d:15:a8:36:04:5a:d2:8c:76:af:2f:fb:a2:24:84:d0:7f: bb:26:bd:23:8d:1c:97:30:6a:db:ee:d7:9a:d6:1e:f6:54:fa: 68:c2:de:f4:5c:ad:e5:7d:fc:14:e8:68:f1:f8:47:5c:25:08: 1e:fb:c2:89:dc:24:b1:04:72:b7:1d:bf:3d:90:24:0e:d6:5a: be:1b:50:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sI5rVZcrkGZ1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZmE3YTRjNWUtNGM5MS00MTQ1LTlkOWEtY2M5OGZlMThiMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGpGZD0gEn/nbFpQWN0nGnz6u7MNf0RLL71/ RZssG2n4nj4+o5HXfC62DGnHwDPMraQOqKGRH8G/8OC6xUZC/oUa+YW8sND7sUUt APSAP/mvamoZ0aCJM9Wg11WBuCZrzr/+86qhBZ0vHtFuTJ3edQVIeszjWQA97rl3 HuPBbqWOyx2wOm7YlxijHNY+uc52s4LFwvdIOhMH3jJg+BPFm0bnEjhu55+53JjP 1sRX/jZlbrGWxHEsKEWrYBmqxaE6TKKVfW6kLmPYLq+wUMV3C/7/Q1q33zsEdfD/ CmfP6ezIsne+Ygw/LJBvw79fZq51UUwNU+3N39rFUCf4u2AnMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1Q+1Bh4bPuXG2m82Htf5+6mnGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWZiMDY3NTItZWU1OS0z ZWZiLTg5NGMtMDFiM2UzYTQ1YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa5Gm2W6O00H96D9TXfR9snWYmReVbramePRoiweW3w5G7Htt0+VTkR TmOaW/AXBejXjk74+dk/R2xzG/Ce6OdPHWn2dcDl1ItObIRrxc2nIxvOxAekLhKO vTFpUQ/tltVg+g8RiRmDBLl8LucTH3MRgFn6lci4koLugs6rS3Bkc7/HBxWm/HnW 6hJxA6wSmHSxJC18PqGW6+2mBY9ciXW6XXz41N6jeoOJyZCSDYRpINjC8VKdFag2 BFrSjHavL/uiJITQf7smvSONHJcwatvu15rWHvZU+mjC3vRcreV9/BToaPH4R1wl CB77woncJLEEcrcdvz2QJA7WWr4bUCg= -----END CERTIFICATE-----Generated at Mon Sep 15 14:27:41 2025 by rpki-client