$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/5359b938-c0f2-342d-8e6a-27b4ca320880.roa File: 5359b938-c0f2-342d-8e6a-27b4ca320880.roa (raw, json) Hash identifier: d171bScxT3Df0oxAFDjUU3YrTX43sHgM6dSRA1EsErI= Subject key identifier: 1A:3E:28:DE:02:91:55:0A:58:15:49:65:98:AD:DB:DA:95:C3:2C:B3 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DFE03E48B0F8FB51B5E0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/5359b938-c0f2-342d-8e6a-27b4ca320880.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:df:e0:3e:48:b0:f8:fb:51:b5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=c9fd23c3-64f4-44d3-a8ab-de1985e6bc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:05:04:06:d8:da:22:51:45:a2:5f:3c:ef: 11:3f:77:01:b3:64:98:24:c4:b5:8d:41:b7:6c:b1: 87:25:16:ba:71:96:b0:e1:56:e0:80:2d:f4:7a:d9: 10:ea:99:89:09:94:b7:58:3c:5b:cb:85:98:2b:d4: d0:6c:c4:c2:89:e3:cb:cd:ab:21:a5:08:ef:89:d5: 9d:bc:cc:be:2b:06:1c:90:2b:cb:d4:61:c5:de:e4: 7c:0d:6b:d4:06:78:59:73:ee:18:0e:d3:44:66:21: 30:86:c2:18:d4:11:d9:ef:e3:21:ce:01:ed:43:4e: 3d:3c:b3:d1:bd:c4:9e:98:e0:ba:ca:5b:8e:d8:0b: 62:2d:c4:b2:de:df:64:01:fa:98:c6:80:f4:6c:72: ef:71:bd:f4:72:93:e9:af:5c:a6:4a:b1:5d:c1:15: ef:53:45:70:a9:0f:74:8d:02:f6:ed:ed:8a:c1:8c: ee:10:33:f3:da:43:71:82:1c:ef:95:53:32:06:40: b0:53:2d:a7:a5:b3:6c:f4:ac:02:14:2a:37:44:01: 71:ba:1c:15:b9:ab:ed:11:e1:c1:b0:99:87:08:91: 50:c4:6c:0f:f9:1b:8e:f5:56:f2:8c:cb:c8:e1:c4: ff:e6:7d:2e:6f:5e:d3:20:a3:f1:23:fa:9a:bf:08: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3E:28:DE:02:91:55:0A:58:15:49:65:98:AD:DB:DA:95:C3:2C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/5359b938-c0f2-342d-8e6a-27b4ca320880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0d:c3:14:85:4d:c8:00:f2:75:46:8c:d4:d1:0c:89:ad:b8: 12:a2:7f:74:40:a2:80:3d:18:a3:f1:be:31:50:ed:7d:3a:8a: d5:93:e3:1b:13:b8:72:d0:64:1f:41:10:d4:eb:c6:d1:b5:d4: 15:a6:83:cc:5d:db:fe:3b:a7:7b:19:aa:21:61:e3:55:93:1d: 1b:b5:9e:96:37:6a:79:ab:f0:b3:86:ef:95:cf:68:50:d8:bb: ac:6c:c8:43:b8:93:5a:02:a0:63:62:04:e2:3f:db:8d:09:65: 7d:fb:41:df:6e:6e:37:3e:e4:e8:34:60:84:9e:bf:39:c5:03: 8b:40:00:83:c0:1b:9f:a8:72:2a:0e:71:5b:ef:2e:6c:6f:b3: df:e0:18:df:e4:f5:62:68:b5:b6:52:60:b9:e7:0a:21:77:21: a5:e2:86:48:8b:c7:72:9d:b6:b9:a4:d6:bf:22:f0:70:fa:53: f9:b3:38:6d:cd:ac:40:a6:1e:c2:64:26:62:d4:30:c3:46:7d: 09:8d:ad:b2:99:a7:b5:bd:5c:b0:1f:52:ac:02:b1:7c:ff:a1: 31:6f:9a:b3:e3:8a:37:78:c5:92:f4:2e:7a:62:43:26:51:68: c7:f6:2d:26:66:cf:27:ed:f3:e9:a6:76:77:cb:a5:04:ea:47: 69:07:41:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt/gPkiw+PtRteAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzlmZDIzYzMtNjRmNC00NGQzLWE4YWItZGUxOTg1ZTZiYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmMFBAbY2iJRRaJfPO8RP3cBs2SYJMS1jUG3 bLGHJRa6cZaw4VbggC30etkQ6pmJCZS3WDxby4WYK9TQbMTCiePLzashpQjvidWd vMy+KwYckCvL1GHF3uR8DWvUBnhZc+4YDtNEZiEwhsIY1BHZ7+MhzgHtQ049PLPR vcSemOC6yluO2AtiLcSy3t9kAfqYxoD0bHLvcb30cpPpr1ymSrFdwRXvU0VwqQ90 jQL27e2KwYzuEDPz2kNxghzvlVMyBkCwUy2npbNs9KwCFCo3RAFxuhwVuavtEeHB sJmHCJFQxGwP+RuO9VbyjMvI4cT/5n0ub17TIKPxI/qavwgi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo+KN4CkVUKWBVJZZit29qVwyyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNTM1OWI5MzgtYzBmMi0z NDJkLThlNmEtMjdiNGNhMzIwODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIINwxSFTcgA8nVGjNTRDImtuBKif3RAooA9GKPxvjFQ7X06itWT4xsT uHLQZB9BENTrxtG11BWmg8xd2/47p3sZqiFh41WTHRu1npY3anmr8LOG75XPaFDY u6xsyEO4k1oCoGNiBOI/240JZX37Qd9ubjc+5Og0YISevznFA4tAAIPAG5+ocioO cVvvLmxvs9/gGN/k9WJotbZSYLnnCiF3IaXihkiLx3Kdtrmk1r8i8HD6U/mzOG3N rECmHsJkJmLUMMNGfQmNrbKZp7W9XLAfUqwCsXz/oTFvmrPjijd4xZL0LnpiQyZR aMf2LSZmzyft8+mmdnfLpQTqR2kHQa8= -----END CERTIFICATE-----Generated at Mon Nov 3 14:50:17 2025 by rpki-client