$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa File: c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa (raw, json) Hash identifier: 3dzu7nIp4kmg9ipj6wLwWUGQAWZdwzxcfK98pA8LwHw= Subject key identifier: B2:A3:77:7E:A7:11:83:A7:43:15:2E:2E:45:AB:8A:0E:58:01:FB:71 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806E08968B85F125DFDAF80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e0:89:68:b8:5f:12:5d:fd:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=e6c94639-d0e4-4f9d-b542-f3dc9862542a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:21:3c:ba:47:9f:0c:e3:e0:10:3b:87:13: 73:81:2c:37:ff:96:94:a0:bb:94:19:81:d5:cb:f9: f0:d6:c5:e7:21:e5:f4:bc:88:0b:0b:58:f0:27:2d: 59:5f:f7:d9:dc:11:f5:4e:4e:f3:b6:f1:f0:fa:7e: 09:f5:83:04:61:80:42:2d:89:ba:43:47:ca:70:46: da:80:3a:36:21:c0:cb:40:59:6f:c3:60:f9:13:fe: b4:a3:5b:5d:77:4c:d5:76:03:31:65:29:40:be:c7: 3b:97:85:4d:70:4f:42:14:75:26:c8:17:75:89:31: 8e:e5:0e:e4:42:9d:53:26:52:19:8d:23:65:2e:bc: 08:96:ef:da:e4:10:3f:31:f2:a1:1a:30:87:46:61: 33:12:c9:e4:70:06:a9:b6:42:15:08:7e:15:9d:55: 53:82:c4:5a:8d:03:82:91:ce:89:1f:71:c9:a6:98: 18:2c:98:26:16:ed:21:59:21:b8:ea:63:b4:dc:c0: cd:bd:cb:38:e8:88:ec:0f:3b:2d:fb:6e:0d:6d:50: 35:30:eb:10:08:c2:4f:4f:a3:94:cb:da:b0:00:e6: 54:82:b7:83:02:9b:db:6e:d6:4e:ea:14:54:9a:35: fd:07:64:a1:48:97:a8:9a:09:f9:49:de:64:ac:45: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:77:7E:A7:11:83:A7:43:15:2E:2E:45:AB:8A:0E:58:01:FB:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:36:b4:dd:8a:42:22:08:4b:ae:e4:02:98:be:11:62:0f:cf: 4b:b0:3d:f1:3b:1d:0c:8d:c5:7a:d4:ca:17:9c:7e:c8:26:cd: bf:72:3e:df:e0:61:0e:bd:f5:85:bf:85:7e:b0:1a:f6:a0:f7: 4c:23:a8:98:01:73:0b:95:26:0c:f0:ed:57:36:f1:03:c8:78: d0:d7:4a:ac:a3:97:0b:87:be:01:08:8c:c7:cc:4f:b1:52:32: 3d:f2:20:fd:f6:74:6f:11:b1:6a:1b:79:30:c3:5f:77:dd:be: 0b:39:47:6c:e1:01:47:0d:a3:36:15:2c:2a:97:2b:cd:b9:0d: b9:dd:50:94:e0:9a:a7:d2:6e:be:df:38:02:7d:fd:3e:f2:6e: 9d:14:64:c3:d8:4c:52:31:84:b9:5e:be:66:9f:bb:04:25:78: ce:45:11:ef:04:10:f2:84:3b:d0:9e:33:0f:89:27:6d:d1:95: 8e:ee:9d:47:23:7d:6c:f5:2a:92:2e:ea:63:f6:e7:dc:47:f9: 4d:2a:d6:87:1e:e9:c1:6f:c3:47:3b:c0:31:9b:b6:e5:45:e2: 6a:98:96:a2:e0:3f:8d:11:13:b9:ea:c3:4f:02:1c:68:0e:04: a3:88:fb:39:cf:52:79:9c:93:33:3e:38:a3:b8:de:69:e9:f1: cd:c1:ff:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuCJaLhfEl39r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTZjOTQ2MzktZDBlNC00ZjlkLWI1NDItZjNkYzk4NjI1NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvishPLpHnwzj4BA7hxNzgSw3/5aUoLuUGYHV y/nw1sXnIeX0vIgLC1jwJy1ZX/fZ3BH1Tk7ztvHw+n4J9YMEYYBCLYm6Q0fKcEba gDo2IcDLQFlvw2D5E/60o1tdd0zVdgMxZSlAvsc7l4VNcE9CFHUmyBd1iTGO5Q7k Qp1TJlIZjSNlLrwIlu/a5BA/MfKhGjCHRmEzEsnkcAaptkIVCH4VnVVTgsRajQOC kc6JH3HJppgYLJgmFu0hWSG46mO03MDNvcs46IjsDzst+24NbVA1MOsQCMJPT6OU y9qwAOZUgreDApvbbtZO6hRUmjX9B2ShSJeomgn5Sd5krEX8uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKjd36nEYOnQxUuLkWrig5YAftxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzc5YmVmMDMtOWMxYS0z MmQ1LThlOWItMjg4M2JjMDY4MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA42tN2KQiIIS67kApi+EWIPz0uwPfE7HQyNxXrUyhecfsgmzb9yPt/g YQ699YW/hX6wGvag90wjqJgBcwuVJgzw7Vc28QPIeNDXSqyjlwuHvgEIjMfMT7FS Mj3yIP32dG8RsWobeTDDX3fdvgs5R2zhAUcNozYVLCqXK825DbndUJTgmqfSbr7f OAJ9/T7ybp0UZMPYTFIxhLlevmafuwQleM5FEe8EEPKEO9CeMw+JJ23RlY7unUcj fWz1KpIu6mP259xH+U0q1oce6cFvw0c7wDGbtuVF4mqYlqLgP40RE7nqw08CHGgO BKOI+znPUnmckzM+OKO43mnp8c3B/zc= -----END CERTIFICATE-----Generated at Mon Sep 15 14:17:22 2025 by rpki-client