$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa File: c4844797-2886-3b62-adf1-6833cad88a33.roa (raw, json) Hash identifier: Mml6Q2nQGikIWyu3x3aa4GQYki9kYEVkWtCOPtUFoCs= Subject key identifier: 23:8C:C6:6B:28:04:C0:40:FA:77:BB:DC:3C:2C:2C:4D:75:0E:F8:84 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806DF93466CF64C4C119C00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:df:93:46:6c:f6:4c:4c:11:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=80e3db77-67e7-40fd-88d9-f27dcbc7a5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:39:4d:52:5f:e4:a1:0e:9b:98:bf:db:e1: 08:d5:53:16:7c:13:8b:b1:3c:f2:d2:f6:98:ea:27: 51:1d:98:8e:26:4a:24:22:3e:03:f6:3c:6e:12:1d: fa:d2:2f:80:14:c3:c3:40:e1:e8:99:29:6f:6f:bb: db:e1:ba:09:c0:48:f8:9b:39:64:ac:f1:68:ad:70: 02:dc:b6:1a:c5:ea:de:b7:30:c5:1c:08:6a:04:b4: fc:2a:8d:f0:63:79:9b:d5:ed:4a:09:b6:29:7b:88: 61:33:c4:a2:bd:4c:21:33:5d:bb:ad:81:88:36:62: 86:d6:16:c9:e2:00:1d:f4:10:f8:a9:de:9c:5d:29: c4:42:82:c2:f7:83:17:9c:2c:5d:bd:f8:d2:44:79: 85:1a:a6:6d:73:f1:b8:fa:85:d9:ff:a9:b1:c6:20: 17:71:84:2c:09:6d:0b:e6:ac:7c:32:29:66:e9:53: 33:90:c8:ad:fc:c2:33:4e:6c:89:e4:66:0c:fc:d8: bd:ee:fc:12:88:03:25:ba:41:f8:f6:85:ca:68:fa: 40:b2:4f:e8:66:fb:db:18:5e:42:32:86:cd:f7:a4: 7b:0c:4f:8d:3a:df:da:f8:55:e9:9f:bd:d2:5e:1d: d8:44:48:c6:44:7f:ac:77:48:9d:69:59:f1:3d:dd: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8C:C6:6B:28:04:C0:40:FA:77:BB:DC:3C:2C:2C:4D:75:0E:F8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f5:50:c9:e7:7e:bf:c6:87:8b:79:05:f9:e9:d6:51:34:32: 55:97:c2:a6:37:78:fd:41:7f:c4:e7:c1:2b:a0:dc:c8:1b:3d: c1:de:b9:88:7d:6a:ce:f4:ce:2e:3d:34:ee:0a:c3:34:07:24: 02:1e:aa:66:08:35:bd:1b:53:f8:50:0c:b2:c9:42:64:73:58: 56:15:90:59:73:5e:c8:7a:12:36:0e:30:21:b4:30:bd:bb:91: 35:72:3f:42:f0:21:3d:39:d4:1f:f4:59:71:40:9c:14:ab:1f: 77:6d:10:68:42:39:ac:48:c6:b3:56:4b:b5:b0:3e:85:52:8a: 86:8c:23:a0:f8:58:cd:7d:bc:60:b0:7f:b8:c2:78:7d:89:85: 56:06:28:09:c2:ed:f4:72:53:cb:53:6f:1f:4f:a3:b6:32:12: e0:ea:00:bc:9a:ad:74:fa:2f:da:3c:7c:18:89:af:dd:bd:1e: 4e:fb:da:b4:a5:37:c1:c6:8c:43:5a:4b:ab:0e:ca:0d:ac:37: 4a:0f:48:c5:95:5e:93:b0:84:23:d4:7a:28:03:89:18:9c:30: 74:1a:fe:45:08:66:1a:ae:1e:0e:49:6a:09:3b:f1:b2:52:85: 37:f9:c4:a3:43:96:db:7c:6a:fc:6c:d1:cd:e3:a6:5a:6f:e7: 06:a8:79:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBt+TRmz2TEwRnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ODBlM2RiNzctNjdlNy00MGZkLTg4ZDktZjI3ZGNiYzdhNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKc5TVJf5KEOm5i/2+EI1VMWfBOLsTzy0vaY 6idRHZiOJkokIj4D9jxuEh360i+AFMPDQOHomSlvb7vb4boJwEj4mzlkrPForXAC 3LYaxeretzDFHAhqBLT8Ko3wY3mb1e1KCbYpe4hhM8SivUwhM127rYGINmKG1hbJ 4gAd9BD4qd6cXSnEQoLC94MXnCxdvfjSRHmFGqZtc/G4+oXZ/6mxxiAXcYQsCW0L 5qx8Milm6VMzkMit/MIzTmyJ5GYM/Ni97vwSiAMlukH49oXKaPpAsk/oZvvbGF5C MobN96R7DE+NOt/a+FXpn73SXh3YREjGRH+sd0idaVnxPd2U2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOMxmsoBMBA+ne73DwsLE11DviEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzQ4NDQ3OTctMjg4Ni0z YjYyLWFkZjEtNjgzM2NhZDg4YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj1UMnnfr/Gh4t5Bfnp1lE0MlWXwqY3eP1Bf8TnwSug3MgbPcHeuYh9 as70zi49NO4KwzQHJAIeqmYINb0bU/hQDLLJQmRzWFYVkFlzXsh6EjYOMCG0ML27 kTVyP0LwIT051B/0WXFAnBSrH3dtEGhCOaxIxrNWS7WwPoVSioaMI6D4WM19vGCw f7jCeH2JhVYGKAnC7fRyU8tTbx9Po7YyEuDqALyarXT6L9o8fBiJr929Hk772rSl N8HGjENaS6sOyg2sN0oPSMWVXpOwhCPUeigDiRicMHQa/kUIZhquHg5Jagk78bJS hTf5xKNDltt8avxs0c3jplpv5waoeZQ= -----END CERTIFICATE-----Generated at Mon Sep 15 14:18:56 2025 by rpki-client