$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa File: 7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa (raw, json) Hash identifier: Ardei2h1Ok3oouR+hdVCQ/MszJtvDY/fl8xRH5Ug4ak= Subject key identifier: 87:47:90:EA:4F:6A:1B:0B:A8:6F:6E:3F:F0:EA:88:F1:78:58:2B:31 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DFF3CD12975557874300 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:df:f3:cd:12:97:55:57:87:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=bda45834-78c5-4631-b82b-51661af5a7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:cd:3f:85:dc:d0:5e:e2:22:a0:c0:9c:02: 45:83:6b:41:fc:d9:d6:0d:3d:ce:91:5a:d7:86:2e: 22:2a:a6:28:1a:83:36:a5:17:4b:cf:c3:42:81:f9: 4f:ae:88:95:89:f0:a8:63:1f:b3:2a:a3:a0:9c:7a: ab:86:91:d5:b5:e2:d7:92:13:7f:42:4c:64:b5:e0: c6:b4:a6:2e:3b:ec:c1:85:b6:6c:4b:6e:59:95:14: 0d:f1:6a:5e:31:ba:91:39:21:ca:8b:34:6f:9a:bb: a0:ec:e0:a8:6a:64:44:6c:cd:53:68:7c:b7:cf:ef: 69:1a:ae:5f:17:de:51:1f:7d:3e:7d:41:16:59:a0: a0:c5:93:1e:07:9d:12:7e:57:de:9c:65:70:77:99: ce:3a:e0:f3:64:d2:49:8b:ae:ad:5b:a2:23:e4:5b: 88:fb:e4:58:76:7b:cc:70:0f:f7:5d:6c:5a:1e:5c: d6:30:3d:f4:60:3c:4e:72:a8:1a:b0:c1:f3:d7:d9: 14:e8:b6:74:8c:94:af:de:64:e3:8d:8b:0c:1d:89: 40:b4:96:44:37:f0:c1:d4:ad:14:2e:4d:15:05:60: 59:89:0e:a2:45:1d:e3:74:11:54:39:f1:76:a4:5e: 21:e4:aa:10:67:cc:2d:c0:af:14:55:55:c5:92:ae: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:47:90:EA:4F:6A:1B:0B:A8:6F:6E:3F:F0:EA:88:F1:78:58:2B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/7cf4934a-5acb-33be-88d6-c0ee5ba15915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:bf:12:12:27:7b:0f:78:e9:87:31:94:9d:d6:aa:dd:a9:73: 6a:39:c9:9e:df:1f:78:6c:b5:b8:cc:90:01:77:82:53:15:a1: 0e:68:72:5e:13:4f:0f:01:32:ef:06:c9:ec:3b:c1:b4:dc:3a: 31:2e:0f:95:dd:02:49:eb:d0:eb:56:67:2c:cb:d9:a8:5c:ea: 6b:ab:59:f2:23:a6:95:85:1b:66:f6:95:e7:c7:11:d4:1a:1c: b1:e1:22:99:1b:ec:4a:68:a5:ef:8b:b9:0d:86:01:42:a1:88: 6a:3c:98:8e:f0:8c:db:64:7c:02:16:40:15:0f:6a:6c:a7:d6: a2:07:13:e6:44:a3:e8:16:b7:55:e6:f4:7e:cc:69:cc:da:ae: 85:0f:04:00:20:b1:5d:6c:0c:b6:ea:13:9b:9b:ca:6b:0c:4b: af:ea:31:e1:f7:a0:01:9a:bc:b0:56:88:8d:1e:87:a4:05:80: a0:2e:85:78:c4:e5:73:b3:92:87:a7:04:b2:e5:2b:19:77:51: c1:ad:29:b9:f9:97:f6:a1:cd:ea:8d:b4:7b:47:f5:a4:d7:2e: 9d:8b:1e:14:e7:22:c2:0f:14:18:24:cb:2a:fa:4c:11:0c:84: 37:e9:5b:c5:66:76:e3:17:fd:b3:ad:18:01:17:14:d1:27:60: 9c:3b:dd:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt/zzRKXVVeHQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YmRhNDU4MzQtNzhjNS00NjMxLWI4MmItNTE2NjFhZjVhN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYLNP4Xc0F7iIqDAnAJFg2tB/NnWDT3OkVrX hi4iKqYoGoM2pRdLz8NCgflProiVifCoYx+zKqOgnHqrhpHVteLXkhN/QkxkteDG tKYuO+zBhbZsS25ZlRQN8WpeMbqROSHKizRvmrug7OCoamREbM1TaHy3z+9pGq5f F95RH30+fUEWWaCgxZMeB50SflfenGVwd5nOOuDzZNJJi66tW6Ij5FuI++RYdnvM cA/3XWxaHlzWMD30YDxOcqgasMHz19kU6LZ0jJSv3mTjjYsMHYlAtJZEN/DB1K0U Lk0VBWBZiQ6iRR3jdBFUOfF2pF4h5KoQZ8wtwK8UVVXFkq5cUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdHkOpPahsLqG9uP/DqiPF4WCsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvN2NmNDkzNGEtNWFjYi0z M2JlLTg4ZDYtYzBlZTViYTE1OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG/EhInew946YcxlJ3Wqt2pc2o5yZ7fH3hstbjMkAF3glMVoQ5ocl4T Tw8BMu8Gyew7wbTcOjEuD5XdAknr0OtWZyzL2ahc6murWfIjppWFG2b2lefHEdQa HLHhIpkb7Epope+LuQ2GAUKhiGo8mI7wjNtkfAIWQBUPamyn1qIHE+ZEo+gWt1Xm 9H7MaczaroUPBAAgsV1sDLbqE5ubymsMS6/qMeH3oAGavLBWiI0eh6QFgKAuhXjE 5XOzkoenBLLlKxl3UcGtKbn5l/ahzeqNtHtH9aTXLp2LHhTnIsIPFBgkyyr6TBEM hDfpW8VmduMX/bOtGAEXFNEnYJw73dc= -----END CERTIFICATE-----Generated at Mon Nov 3 14:50:16 2025 by rpki-client