$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa File: 61aaa91e-0584-333d-91c2-07c52729d2cf.roa (raw, json) Hash identifier: kjcrPfFwoGXJcTfNjaBll9c3utxwlFu0thYVRmF9EfA= Subject key identifier: 1B:7E:7C:2E:8F:D5:1C:30:01:E2:B5:F2:C4:29:30:94:0A:44:FB:FE Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C2A73265F26D7BD60080 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 104.37.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c2:a7:32:65:f2:6d:7b:d6:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=aa7a3d77-819c-46cb-8850-ad4e34115262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:0c:3b:49:57:b4:51:0e:9b:2a:48:d9:49: dc:b3:39:28:f5:20:67:74:2f:4f:4e:0c:be:52:96: 3b:28:f4:80:a2:c1:29:5a:62:a6:83:00:25:3c:21: c5:d5:d6:04:31:22:76:ce:c2:70:f6:ff:e7:1b:b0: 60:f3:a7:2c:c2:74:06:d5:e4:e7:49:e2:09:65:d4: 38:1c:ec:cd:99:1b:63:ce:c6:e4:73:45:f7:e4:d4: cf:e1:e9:21:67:f6:a3:6b:69:ea:45:5b:8a:1a:9a: d3:55:57:d3:e5:80:4d:a3:dc:7a:fe:68:6d:c2:c3: 92:9f:b4:85:26:69:e4:7c:ad:d2:c5:7e:2c:08:10: f1:4d:df:e7:4b:90:0c:4e:3c:ac:6b:ae:75:f1:4c: d7:fc:e4:ab:da:92:92:0b:c2:88:d7:73:30:32:48: 7f:90:2b:ff:ad:3f:2d:9e:4a:d6:83:23:2f:74:06: ab:eb:6a:4e:a5:a0:a3:12:93:41:a4:8c:e5:3b:bd: 92:80:a9:46:43:af:1c:85:e6:27:10:c2:b4:26:5f: de:3e:a0:4e:52:0b:f1:a2:a9:71:96:47:98:5a:88: a7:71:fd:98:a3:c5:21:b6:64:32:cc:02:0a:69:c4: cc:79:aa:ce:0b:1c:00:6e:4e:e5:97:3a:a6:f7:e1: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7E:7C:2E:8F:D5:1C:30:01:E2:B5:F2:C4:29:30:94:0A:44:FB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.37.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ca:0b:7c:81:b1:42:d0:e5:07:ce:06:e2:eb:23:a9:e9:a3: c2:1e:0b:7c:4e:15:ae:c5:5e:d4:79:25:0f:44:3d:e6:3d:4a: 79:c4:7e:ed:69:90:9a:fc:40:a1:8f:ce:ff:91:8d:5d:81:03: c4:d0:c3:71:8c:40:be:76:da:79:94:45:d4:75:b6:c4:f6:47: 89:66:19:f6:0c:9b:f2:d4:99:7d:de:68:af:82:6a:b0:60:2f: a4:95:94:0f:50:73:79:a7:35:3d:b1:47:f8:4c:a4:a2:d3:21: 6f:6d:76:6e:43:3a:0b:3c:ab:d2:74:7a:64:f5:c1:b6:ed:43: b3:06:e5:07:1e:7c:ca:3e:ab:d4:97:76:86:3d:c0:7b:f8:4a: 1e:44:d3:7f:d4:fe:0f:a9:56:42:1e:e2:52:aa:f3:d1:bb:bb: 02:a5:b0:f2:04:a2:5b:7e:bd:d4:08:c7:e0:af:87:03:bf:4e: cf:c1:db:34:a1:83:93:43:80:40:52:af:d7:7c:e8:7c:be:75: a8:f2:52:aa:ed:08:dc:74:37:d0:85:ed:a5:b9:5c:03:5d:b2: 0b:29:3f:99:4a:5c:18:b2:f4:2e:4f:7c:b9:d8:c6:d0:d3:24: 7d:af:50:2f:d8:16:e7:22:49:09:18:44:a5:45:46:73:bf:ea: e1:68:4f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sKnMmXybXvWAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWE3YTNkNzctODE5Yy00NmNiLTg4NTAtYWQ0ZTM0MTE1MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w8MO0lXtFEOmypI2Uncszko9SBndC9PTgy+ UpY7KPSAosEpWmKmgwAlPCHF1dYEMSJ2zsJw9v/nG7Bg86cswnQG1eTnSeIJZdQ4 HOzNmRtjzsbkc0X35NTP4ekhZ/aja2nqRVuKGprTVVfT5YBNo9x6/mhtwsOSn7SF JmnkfK3SxX4sCBDxTd/nS5AMTjysa6518UzX/OSr2pKSC8KI13MwMkh/kCv/rT8t nkrWgyMvdAar62pOpaCjEpNBpIzlO72SgKlGQ68cheYnEMK0Jl/ePqBOUgvxoqlx lkeYWoincf2Yo8UhtmQyzAIKacTMearOCxwAbk7llzqm9+E4EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt+fC6P1RwwAeK18sQpMJQKRPv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjFhYWE5MWUtMDU4NC0z MzNkLTkxYzItMDdjNTI3MjlkMmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjKC3yBsULQ5QfOBuLrI6npo8IeC3xOFa7FXtR5JQ9EPeY9SnnEfu1p kJr8QKGPzv+RjV2BA8TQw3GMQL522nmURdR1tsT2R4lmGfYMm/LUmX3eaK+CarBg L6SVlA9Qc3mnNT2xR/hMpKLTIW9tdm5DOgs8q9J0emT1wbbtQ7MG5QcefMo+q9SX doY9wHv4Sh5E03/U/g+pVkIe4lKq89G7uwKlsPIEolt+vdQIx+CvhwO/Ts/B2zSh g5NDgEBSr9d86Hy+dajyUqrtCNx0N9CF7aW5XANdsgspP5lKXBiy9C5PfLnYxtDT JH2vUC/YFuciSQkYRKVFRnO/6uFoT3I= -----END CERTIFICATE-----Generated at Mon Sep 15 14:18:53 2025 by rpki-client