$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c5ba30e8-212b-3fc8-a292-e605be207c97.roa File: c5ba30e8-212b-3fc8-a292-e605be207c97.roa (raw, json) Hash identifier: x+7aHBFUb34as0s5WLSwN7mPGjMpxGAkMFIBxrtxZ30= Subject key identifier: D7:E9:10:58:47:A7:12:12:91:15:9B:28:07:77:0D:2B:9B:99:32:59 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C28E44239596B813C000 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c5ba30e8-212b-3fc8-a292-e605be207c97.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 104.192.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c2:8e:44:23:95:96:b8:13:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c2a5f039-ec70-474b-b30f-fe0afc6b1098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:c3:06:e9:f2:ca:e1:32:e1:58:7b:c5:7f: 50:dc:92:cd:f5:1e:02:6d:e8:bf:13:01:3d:86:85: 4f:66:e5:6b:f6:c2:b4:8d:2a:fd:a5:4c:bd:f4:ac: b6:56:c4:ef:3a:2b:e4:25:5e:2c:55:8c:81:73:03: c2:2d:9f:30:87:fe:fc:90:db:da:b2:87:cf:24:23: fd:43:44:f5:3b:45:72:07:55:77:89:87:cc:70:38: 07:e0:65:48:28:62:4e:da:e5:65:6e:4e:52:49:c8: 98:e9:98:b9:d3:45:0e:76:e3:fa:2c:9e:bd:ab:a0: 37:33:bf:05:a9:ec:ca:41:27:66:ac:17:a4:22:e9: c4:47:ff:ea:4d:97:42:68:b7:f7:ee:f4:92:21:8b: 2c:17:d1:a6:36:cf:67:7c:32:d3:07:41:ce:f8:e8: 9d:4d:c4:f9:fc:98:1e:c5:31:47:3c:b6:0c:6a:ef: d3:bf:12:57:c3:92:a5:a5:29:30:47:6f:51:09:4e: 1f:ad:63:ed:96:85:be:58:56:c7:23:ba:b3:3b:54: 5a:13:90:de:8a:a0:d4:67:98:8d:b7:35:17:d0:ad: d9:f0:75:b1:8a:f0:1f:e2:bd:ba:8f:2e:6e:76:1a: 81:a7:f4:c1:93:27:ee:6f:ba:60:43:2f:cc:17:b1: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E9:10:58:47:A7:12:12:91:15:9B:28:07:77:0D:2B:9B:99:32:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c5ba30e8-212b-3fc8-a292-e605be207c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.192.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:77:85:d9:86:7d:2a:ad:18:23:58:3c:f2:30:e0:95:9d:6d: b0:ec:5b:73:f4:39:16:86:5e:ea:23:48:27:17:f7:a9:e8:71: 3e:b4:7b:17:01:ee:a0:93:8f:ae:06:e6:27:ab:54:cf:65:c8: 85:be:da:2c:d4:52:9a:7c:f5:2e:a2:60:25:51:5b:a9:83:34: 08:cd:70:ee:4f:1b:97:ef:b0:33:10:ce:db:98:ef:48:06:2b: 93:05:ac:64:e2:89:f9:69:e9:86:df:31:d4:bf:c1:e9:26:9e: ad:a4:4b:c8:b2:d5:d8:d5:3b:33:8a:83:fb:49:c4:f2:12:42: 9d:6f:20:ef:cd:2b:99:e9:07:e6:e6:c5:ef:db:99:e5:78:fd: ef:e4:fe:2b:2f:ca:62:c0:1f:3b:45:64:33:41:55:92:b1:ff: 34:8e:cf:28:ff:43:3e:ce:f9:b6:d4:dd:32:e9:93:e0:82:fd: 17:5d:ed:87:3b:6a:3f:46:f4:f4:ad:4e:9e:3b:e2:ec:c4:2d: 31:69:70:03:29:54:ee:9f:ff:ae:c9:f9:5e:8c:10:40:0a:10: 0e:9a:15:59:ae:e8:80:3d:1f:ee:f6:b2:06:c2:c9:29:58:b4: 37:0b:f8:3f:cb:1c:90:a7:6c:2a:f7:3e:ac:bb:28:38:f1:da: 18:54:bf:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sKORCOVlrgTwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzJhNWYwMzktZWM3MC00NzRiLWIzMGYtZmUwYWZjNmIxMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvHDBunyyuEy4Vh7xX9Q3JLN9R4Cbei/EwE9 hoVPZuVr9sK0jSr9pUy99Ky2VsTvOivkJV4sVYyBcwPCLZ8wh/78kNvasofPJCP9 Q0T1O0VyB1V3iYfMcDgH4GVIKGJO2uVlbk5SSciY6Zi500UOduP6LJ69q6A3M78F qezKQSdmrBekIunER//qTZdCaLf37vSSIYssF9GmNs9nfDLTB0HO+OidTcT5/Jge xTFHPLYMau/TvxJXw5KlpSkwR29RCU4frWPtloW+WFbHI7qzO1RaE5DeiqDUZ5iN tzUX0K3Z8HWxivAf4r26jy5udhqBp/TBkyfub7pgQy/MF7EG1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfpEFhHpxISkRWbKAd3DSubmTJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzViYTMwZTgtMjEyYi0z ZmM4LWEyOTItZTYwNWJlMjA3Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ3hdmGfSqtGCNYPPIw4JWdbbDsW3P0ORaGXuojSCcX96nocT60excB 7qCTj64G5ierVM9lyIW+2izUUpp89S6iYCVRW6mDNAjNcO5PG5fvsDMQztuY70gG K5MFrGTiiflp6YbfMdS/wekmnq2kS8iy1djVOzOKg/tJxPISQp1vIO/NK5npB+bm xe/bmeV4/e/k/isvymLAHztFZDNBVZKx/zSOzyj/Qz7O+bbU3TLpk+CC/Rdd7Yc7 aj9G9PStTp474uzELTFpcAMpVO6f/67J+V6MEEAKEA6aFVmu6IA9H+72sgbCySlY tDcL+D/LHJCnbCr3Pqy7KDjx2hhUv8Q= -----END CERTIFICATE-----Generated at Mon Nov 3 14:45:58 2025 by rpki-client