$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa File: c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa (raw, json) Hash identifier: bSp+saeTgHwEhrXSdgoIIPHVSSrhgs5A0X6xhuX40/c= Subject key identifier: AF:97:C1:C5:95:40:58:6B:4F:4E:F2:6C:EE:00:17:51:92:02:9E:0D Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C0DEC0F74D781E0CAB00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 199.102.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c0:de:c0:f7:4d:78:1e:0c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=a2d3c8df-b4a9-4811-8d42-ab5349a51c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:8e:c9:1e:d8:42:f0:d7:ca:a6:af:67:e8: a0:78:9c:73:d0:f9:60:f6:54:f3:f1:65:3a:68:43: f6:7f:c3:dc:cb:71:19:69:87:0e:f7:30:04:65:f7: 49:5e:ca:3e:60:e7:8d:de:16:e7:80:0e:e6:0e:19: de:64:ce:67:0e:4b:da:5c:99:b3:d0:69:45:01:f5: da:88:57:3e:b6:5e:3f:91:18:4f:db:33:86:af:02: a2:e0:da:06:83:e6:8f:b8:bd:af:ca:8c:b2:2e:85: ca:c2:d7:8e:5f:39:d9:76:7a:ee:0e:56:35:c7:47: 77:76:b4:23:ea:1f:7e:04:6a:77:ac:3b:0c:de:3b: 39:fe:df:35:0b:d4:72:d9:01:d2:db:de:61:48:01: 0c:88:00:ac:e9:e3:14:04:23:4c:43:e8:bc:3d:be: 91:2b:02:57:a6:49:b8:0c:d3:13:48:ad:08:b8:0b: ec:ee:c9:d1:c1:4d:74:89:f0:32:81:ed:a4:86:1b: 7c:ce:84:e9:49:27:4d:02:5a:d8:cf:9f:76:49:96: 28:67:eb:a7:98:f1:cd:ff:0c:9c:78:ab:3b:ec:d0: 5c:45:9f:05:b3:51:97:a0:12:25:80:51:89:69:e6: d0:b5:82:02:ba:e3:dd:2d:f8:a9:91:2e:25:9e:c7: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:97:C1:C5:95:40:58:6B:4F:4E:F2:6C:EE:00:17:51:92:02:9E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.102.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b8:e8:51:0a:1a:08:48:97:c8:1c:02:cc:91:7d:8c:79:05: e4:69:e3:b4:5d:a2:6e:8b:72:3b:26:55:d1:59:d3:de:e7:0f: ef:12:ba:d3:b9:9b:91:ae:58:57:d7:27:99:8e:5e:9d:47:b0: 31:bb:a5:56:d7:5d:48:a1:f6:a1:7d:db:c8:10:06:e9:b9:33: e0:57:d3:8d:bf:a7:cf:56:d8:bd:2b:94:a9:16:5e:a5:ba:6c: 9e:d0:db:80:ff:43:02:1c:1c:0a:e2:27:98:ef:15:6f:9c:9c: dd:a9:d0:b4:17:ef:c4:f1:35:13:0f:e9:95:4e:ea:e4:68:bb: 7e:40:63:6e:f5:37:df:ed:d5:13:c3:90:14:36:80:f4:49:24: 9b:81:a9:c2:88:ee:90:48:ce:b2:8d:7a:e0:55:b1:aa:58:b0: 1c:26:80:6a:1d:7e:b4:60:98:13:4c:49:2f:79:f0:4e:95:3d: cd:20:06:25:e2:17:1d:53:07:28:6d:b3:13:ac:9e:08:f9:da: af:7d:f5:b8:1b:97:ba:3f:6e:1d:aa:79:d8:16:26:bc:b0:6b: 05:c4:3f:f7:6e:ac:e7:23:c5:94:b3:ce:a1:de:56:f7:44:4c: bd:76:3a:88:c5:d5:cc:05:93:5c:35:43:d5:e4:28:a1:1b:b9: c0:87:6b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sDewPdNeB4MqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YTJkM2M4ZGYtYjRhOS00ODExLThkNDItYWI1MzQ5YTUxYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviKOyR7YQvDXyqavZ+igeJxz0Plg9lTz8WU6 aEP2f8Pcy3EZaYcO9zAEZfdJXso+YOeN3hbngA7mDhneZM5nDkvaXJmz0GlFAfXa iFc+tl4/kRhP2zOGrwKi4NoGg+aPuL2vyoyyLoXKwteOXznZdnruDlY1x0d3drQj 6h9+BGp3rDsM3js5/t81C9Ry2QHS295hSAEMiACs6eMUBCNMQ+i8Pb6RKwJXpkm4 DNMTSK0IuAvs7snRwU10ifAyge2khht8zoTpSSdNAlrYz592SZYoZ+unmPHN/wyc eKs77NBcRZ8Fs1GXoBIlgFGJaebQtYICuuPdLfipkS4lnsfoswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+XwcWVQFhrT07ybO4AF1GSAp4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzQ0NTZiYzgtMGQ5MS0z YThiLTk4YzQtMTlmZjA1NjhkNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2bIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK46FEKGghIl8gcAsyRfYx5BeRp47Rdom6LcjsmVdFZ097nD+8SutO5 m5GuWFfXJ5mOXp1HsDG7pVbXXUih9qF928gQBum5M+BX042/p89W2L0rlKkWXqW6 bJ7Q24D/QwIcHAriJ5jvFW+cnN2p0LQX78TxNRMP6ZVO6uRou35AY271N9/t1RPD kBQ2gPRJJJuBqcKI7pBIzrKNeuBVsapYsBwmgGodfrRgmBNMSS958E6VPc0gBiXi Fx1TByhtsxOsngj52q999bgbl7o/bh2qedgWJrywawXEP/durOcjxZSzzqHeVvdE TL12OojF1cwFk1w1Q9XkKKEbucCHa2Y= -----END CERTIFICATE-----Generated at Mon Sep 15 14:27:41 2025 by rpki-client