$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa File: 43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json) Hash identifier: uRrJ2atb3xM+lGbS+Wq4x6rKN0rXwQNY2pkkWSsONwg= Subject key identifier: 6B:D3:47:41:91:59:C1:59:FA:A5:DD:C0:C2:16:17:41:81:AF:95:67 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C27ABFE831D3DCBB0900 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 104.200.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c2:7a:bf:e8:31:d3:dc:bb:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=158b36e4-1ceb-4da6-9db5-8436f485942e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:7b:6b:a7:2c:2c:97:4a:a5:66:4c:c3:9a: 9f:be:06:ab:fc:70:1c:ed:b5:40:bc:f6:ea:62:de: f7:d8:9a:e8:af:14:d3:99:82:69:f6:eb:7b:07:81: 54:92:3a:ae:3b:38:7f:e9:f8:62:48:71:da:e6:e8: aa:02:36:b5:6d:10:1d:12:0d:5a:22:c5:35:b0:67: 71:51:3e:ed:06:48:12:34:c7:c0:35:8f:1a:6f:02: 0a:cc:3e:dd:34:4b:b9:0c:24:9e:03:b7:32:01:d0: 3f:16:fa:25:2a:91:bc:b9:d0:74:d4:4c:13:72:c9: 7f:bb:7f:3f:cd:1f:e3:d9:e3:8a:04:0c:c2:a1:38: b8:3f:21:12:5b:a2:7d:3e:68:ce:ba:be:db:d5:03: 13:4c:f7:50:bd:b5:4f:e2:2c:30:59:f2:62:0e:af: 25:dd:3d:e6:00:c3:3b:b2:44:37:76:33:14:8c:f2: 29:bd:72:81:5b:f0:c8:6e:12:9d:2f:d6:63:a8:28: c8:20:e1:20:6a:84:7b:8b:15:52:e2:56:8f:f6:ac: 97:60:66:6a:10:1c:be:eb:2b:aa:3c:3a:09:cb:91: 2f:22:e9:90:aa:a0:99:95:20:6c:91:8c:2d:33:02: 6a:ab:d0:24:b3:ce:5b:47:c1:79:50:db:3f:88:69: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D3:47:41:91:59:C1:59:FA:A5:DD:C0:C2:16:17:41:81:AF:95:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.200.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5f:05:57:8a:16:99:35:d4:45:32:96:60:cb:73:e5:2e:46: 69:12:2c:27:eb:59:2b:d0:88:80:54:f4:f9:7e:1f:e3:0c:94: df:fd:a0:af:8c:5a:66:90:0d:7d:c2:cf:2a:56:1e:58:2f:70: e8:5c:5c:43:09:d0:3f:57:73:23:06:a0:4c:8e:77:b5:98:cc: fd:50:46:e4:e5:15:32:6f:9d:85:9e:28:e8:06:e7:3f:fd:9e: c9:7e:ab:45:2d:99:07:7e:6f:27:7a:26:13:4e:ac:67:e1:59: a8:c5:17:7f:02:b7:d3:92:75:6b:49:8b:a6:37:4c:46:36:25: 1f:b1:be:2e:03:5a:05:b8:23:c1:6f:df:11:2c:84:2e:01:97: 35:35:0e:06:48:a7:78:f0:59:69:ae:00:45:1a:ac:f3:fb:a0: e2:bd:25:ac:4c:98:99:17:cf:8b:ee:92:08:bf:5e:3b:15:ba: c5:33:e6:4b:23:ba:3c:cb:3a:7f:6c:78:da:d1:c1:91:cf:0a: 75:c9:6c:cc:7c:82:1b:8a:db:f0:2b:eb:fa:67:c7:db:4f:10: da:34:8f:b8:e8:0e:df:3f:6b:d7:2c:8d:0a:14:6b:06:42:f7: 38:f5:22:de:d5:46:df:b6:68:89:c2:71:45:14:ce:87:ce:fe: e2:99:d9:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sJ6v+gx09y7CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MTU4YjM2ZTQtMWNlYi00ZGE2LTlkYjUtODQzNmY0ODU5NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowV7a6csLJdKpWZMw5qfvgar/HAc7bVAvPbq Yt732JrorxTTmYJp9ut7B4FUkjquOzh/6fhiSHHa5uiqAja1bRAdEg1aIsU1sGdx UT7tBkgSNMfANY8abwIKzD7dNEu5DCSeA7cyAdA/FvolKpG8udB01EwTcsl/u38/ zR/j2eOKBAzCoTi4PyESW6J9PmjOur7b1QMTTPdQvbVP4iwwWfJiDq8l3T3mAMM7 skQ3djMUjPIpvXKBW/DIbhKdL9ZjqCjIIOEgaoR7ixVS4laP9qyXYGZqEBy+6yuq PDoJy5EvIumQqqCZlSBskYwtMwJqq9Aks85bR8F5UNs/iGk/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvTR0GRWcFZ+qXdwMIWF0GBr5VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNDNkNjk4YTktZjM2NC0z ZjExLTkxOGUtYTNmNWE1N2VkNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRfBVeKFpk11EUylmDLc+UuRmkSLCfrWSvQiIBU9Pl+H+MMlN/9oK+M WmaQDX3CzypWHlgvcOhcXEMJ0D9XcyMGoEyOd7WYzP1QRuTlFTJvnYWeKOgG5z/9 nsl+q0UtmQd+byd6JhNOrGfhWajFF38Ct9OSdWtJi6Y3TEY2JR+xvi4DWgW4I8Fv 3xEshC4BlzU1DgZIp3jwWWmuAEUarPP7oOK9JaxMmJkXz4vukgi/XjsVusUz5ksj ujzLOn9seNrRwZHPCnXJbMx8ghuK2/Ar6/pnx9tPENo0j7joDt8/a9csjQoUawZC 9zj1It7VRt+2aInCcUUUzofO/uKZ2T4= -----END CERTIFICATE-----Generated at Mon Nov 3 14:44:58 2025 by rpki-client