$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa File: 4d58ad68-e72d-3144-8f6b-f06127b90f33.roa (raw, json) Hash identifier: KMVLyWMekBP+9rCBphESAU2luIhRR6c9aa6zpaF3toA= Subject key identifier: 53:6C:90:21:BF:77:AB:34:4F:4F:1D:B2:57:19:B9:B0:CB:A2:69:57 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C1FCFF998CEC26828900 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 144.168.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c1:fc:ff:99:8c:ec:26:82:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=907b1474-4883-4ff4-a887-f79d74fd6a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:57:65:38:f9:9f:e1:7e:ab:cb:bf:6b:3e: 4d:74:30:72:2f:c1:b3:b7:e9:1d:58:0d:3f:98:e8: 05:e7:92:c7:08:53:73:a9:62:6a:81:a3:d6:f2:24: e3:42:58:b4:51:2c:16:a3:fb:2f:72:08:3a:7d:7f: 1a:66:84:f7:23:74:8f:52:a0:a4:67:3d:51:0f:05: a0:4f:d9:a7:34:09:ba:11:9a:2d:8a:73:3c:eb:c4: 59:3a:c5:7b:39:37:c1:a3:95:83:d7:4a:2b:eb:de: 51:a6:aa:1d:8a:80:fb:74:57:4a:f4:b9:77:8d:d5: ff:aa:db:fd:b5:76:f9:cf:25:6c:8c:ea:e1:d6:47: 6c:1b:65:d0:2a:41:15:15:d8:23:b7:6f:dc:12:eb: 10:aa:48:29:09:ae:f2:30:b6:59:9c:a3:4b:e9:a0: 3e:48:8b:d5:46:5f:da:fe:ab:0f:71:84:33:fa:73: d5:be:e6:5e:e6:f8:6d:7d:05:49:cd:d7:81:9c:56: 3d:ba:88:1b:8a:a8:dc:df:06:93:ce:e6:00:63:15: b6:9b:36:fc:7a:95:19:96:aa:95:04:53:5b:62:ee: 91:3d:d2:9d:9c:be:3c:fd:13:d8:97:9b:c7:e5:41: 51:e2:f1:2e:1c:b9:98:2f:6e:56:06:a9:96:8f:a8: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6C:90:21:BF:77:AB:34:4F:4F:1D:B2:57:19:B9:B0:CB:A2:69:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 144.168.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e8:03:d3:d6:f1:99:fa:e4:39:ed:f3:05:90:5a:72:2e:2a: bf:b4:ca:1a:6f:cb:9b:cc:3a:2b:c5:19:f9:a2:f3:0f:1d:44: 4c:85:fb:be:b1:86:d3:dd:cb:4b:bc:24:1b:8f:66:f6:a7:46: 27:12:86:9c:c1:1e:09:14:00:9b:ec:80:8b:35:66:bc:92:63: 9d:83:fb:96:93:bd:b9:78:a9:39:7b:f4:80:54:3a:3e:91:ce: 47:44:2e:a8:94:78:cc:97:ed:01:70:e3:66:86:7f:11:e3:67: 1a:c1:42:28:00:e0:a2:8a:72:22:98:e1:1a:de:d8:71:6c:74: ad:9d:3d:80:9f:a6:54:59:3d:32:57:ac:f0:4b:38:89:5b:eb: 0d:c8:a3:ce:84:56:59:6f:60:6f:ae:14:87:11:b3:c2:dd:68: 39:c2:98:c6:dc:fd:cd:13:07:46:c7:05:cc:bb:d9:71:1b:63: 21:a4:ec:db:c9:74:94:f9:05:8b:21:15:5f:a3:12:26:da:42: 26:44:6a:f5:7d:bb:f3:d8:8c:1b:cf:68:22:52:93:87:7c:5c: 22:ff:f0:c0:3c:8a:c5:c0:dd:86:0d:c2:68:3c:25:3a:a7:e2: f2:17:65:29:b3:ff:15:2b:fd:ea:71:3a:3b:77:b0:05:4b:14: bd:aa:34:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sH8/5mM7CaCiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OTA3YjE0NzQtNDg4My00ZmY0LWE4ODctZjc5ZDc0ZmQ2YTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR9XZTj5n+F+q8u/az5NdDByL8Gzt+kdWA0/ mOgF55LHCFNzqWJqgaPW8iTjQli0USwWo/svcgg6fX8aZoT3I3SPUqCkZz1RDwWg T9mnNAm6EZotinM868RZOsV7OTfBo5WD10or695RpqodioD7dFdK9Ll3jdX/qtv9 tXb5zyVsjOrh1kdsG2XQKkEVFdgjt2/cEusQqkgpCa7yMLZZnKNL6aA+SIvVRl/a /qsPcYQz+nPVvuZe5vhtfQVJzdeBnFY9uogbiqjc3waTzuYAYxW2mzb8epUZlqqV BFNbYu6RPdKdnL48/RPYl5vH5UFR4vEuHLmYL25WBqmWj6iLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNskCG/d6s0T08dslcZubDLomlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNGQ1OGFkNjgtZTcyZC0z MTQ0LThmNmItZjA2MTI3YjkwZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/oA9PW8Zn65Dnt8wWQWnIuKr+0yhpvy5vMOivFGfmi8w8dREyF+76x htPdy0u8JBuPZvanRicShpzBHgkUAJvsgIs1ZrySY52D+5aTvbl4qTl79IBUOj6R zkdELqiUeMyX7QFw42aGfxHjZxrBQigA4KKKciKY4Rre2HFsdK2dPYCfplRZPTJX rPBLOIlb6w3Io86EVllvYG+uFIcRs8LdaDnCmMbc/c0TB0bHBcy72XEbYyGk7NvJ dJT5BYshFV+jEibaQiZEavV9u/PYjBvPaCJSk4d8XCL/8MA8isXA3YYNwmg8JTqn 4vIXZSmz/xUr/epxOjt3sAVLFL2qNCQ= -----END CERTIFICATE-----Generated at Mon Sep 15 14:28:55 2025 by rpki-client