$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa File: 8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa (raw, json) Hash identifier: 7dGnc94icK5OlSUtg+udhoWxJP/5qyX9/+xNpLaCViE= Subject key identifier: CF:F0:B6:4F:56:BF:45:F2:E9:68:6F:6D:B3:7C:B1:3B:D0:57:C1:A9 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C1157FC406C6D8DE27C0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 173.0.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c1:15:7f:c4:06:c6:d8:de:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b7fe9462-7f44-4568-a6f5-012d609fb939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:99:b2:f0:c2:b6:2d:ab:e6:2d:d5:06:6a: 54:ca:2e:55:90:b0:a3:8b:7f:15:be:9d:ff:c1:d5: 75:87:bc:be:d6:26:e5:e0:81:cb:8c:cd:f5:38:bb: a3:8a:dc:f6:4d:14:b2:ad:5f:26:36:f9:07:ee:3c: b1:05:39:22:38:dd:7c:c8:46:c2:01:ba:75:4c:e7: a6:07:74:ba:54:28:c7:e6:d5:80:9f:89:b5:60:cb: 37:54:67:e2:d5:63:2e:00:e1:3a:c7:68:f1:43:43: 63:3a:89:4d:f4:21:c7:26:f5:bd:49:0b:3b:03:42: 5d:e9:ae:c3:a4:0a:30:b2:48:b1:ea:57:b8:39:47: d6:ba:d4:8a:b4:2a:82:da:a8:a6:d8:9c:f1:18:cb: 94:7b:4b:c4:49:20:f1:88:33:f4:98:e6:f6:d5:1b: c4:d3:3c:65:14:5e:4d:65:a4:e5:9d:7d:4c:98:c5: 95:1e:1b:27:55:f5:da:31:b6:2b:b8:52:e2:e1:79: e5:1c:42:38:10:41:12:66:ca:25:40:75:c7:1e:ec: b2:d6:ac:c3:51:68:d1:b9:a7:13:c8:2c:c1:13:4d: 22:84:a4:4e:e0:68:24:f6:50:36:89:97:94:63:97: 9a:ff:9c:f1:0b:d3:4f:d1:1f:1c:2b:32:29:33:f7: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F0:B6:4F:56:BF:45:F2:E9:68:6F:6D:B3:7C:B1:3B:D0:57:C1:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e0:7a:07:df:b2:df:50:20:4c:3b:fb:e9:ea:4b:0a:95:63: 7d:73:12:7c:65:8e:9e:cf:49:6d:cc:4b:4c:0e:5f:96:18:2a: c9:38:34:2c:61:aa:d3:57:f0:99:a4:3c:14:05:0f:de:7a:d6: 77:41:cd:3d:a8:f4:a8:92:a4:ce:87:79:03:16:eb:d8:e3:fb: cf:b6:f5:3e:21:78:79:1b:3f:af:88:83:e6:02:13:c2:1a:1f: 51:22:85:c1:17:ee:64:7b:71:cf:c1:41:14:f7:51:4d:12:6b: ed:82:a6:7f:a1:71:4e:e0:e2:9b:3f:f7:a5:81:f9:63:16:de: 13:24:59:66:21:18:e8:cf:4e:47:ac:23:b0:09:0a:6d:1f:ec: 07:1f:68:07:c0:f5:90:fe:1b:8b:6a:d7:e4:91:c6:e4:d8:1c: c5:9b:e1:b6:83:5c:ef:b4:9b:9e:e1:03:e5:b6:89:51:6b:41: 4c:7c:2b:88:0f:7e:50:ec:9f:b4:2e:dc:f4:71:48:85:09:67: e7:8b:e8:2d:de:9d:43:a1:2d:ab:66:6f:4a:38:26:e0:16:1f: a8:b4:96:88:10:6f:2f:f0:1e:6f:27:0a:ff:84:4f:7f:8c:10: bf:3f:c6:66:b8:64:aa:b5:0b:97:1a:54:1c:c9:cd:b0:1d:27: 7a:6a:8a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sEVf8QGxtjeJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjdmZTk0NjItN2Y0NC00NTY4LWE2ZjUtMDEyZDYwOWZiOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAyZsvDCti2r5i3VBmpUyi5VkLCji38Vvp3/ wdV1h7y+1ibl4IHLjM31OLujitz2TRSyrV8mNvkH7jyxBTkiON18yEbCAbp1TOem B3S6VCjH5tWAn4m1YMs3VGfi1WMuAOE6x2jxQ0NjOolN9CHHJvW9SQs7A0Jd6a7D pAowskix6le4OUfWutSKtCqC2qim2JzxGMuUe0vESSDxiDP0mOb21RvE0zxlFF5N ZaTlnX1MmMWVHhsnVfXaMbYruFLi4XnlHEI4EEESZsolQHXHHuyy1qzDUWjRuacT yCzBE00ihKRO4Ggk9lA2iZeUY5ea/5zxC9NP0R8cKzIpM/cwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/wtk9Wv0Xy6WhvbbN8sTvQV8GpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOGQ5OGM3NGUtZGJmMy0z MmJmLTlhMzEtYjUxOTdhM2I0NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErQDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGngegffst9QIEw7++nqSwqVY31zEnxljp7PSW3MS0wOX5YYKsk4NCxh qtNX8JmkPBQFD9561ndBzT2o9KiSpM6HeQMW69jj+8+29T4heHkbP6+Ig+YCE8Ia H1EihcEX7mR7cc/BQRT3UU0Sa+2Cpn+hcU7g4ps/96WB+WMW3hMkWWYhGOjPTkes I7AJCm0f7AcfaAfA9ZD+G4tq1+SRxuTYHMWb4baDXO+0m57hA+W2iVFrQUx8K4gP flDsn7Qu3PRxSIUJZ+eL6C3enUOhLatmb0o4JuAWH6i0logQby/wHm8nCv+ET3+M EL8/xma4ZKq1C5caVBzJzbAdJ3pqitE= -----END CERTIFICATE-----Generated at Mon Sep 15 14:27:43 2025 by rpki-client