$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa File: cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa (raw, json) Hash identifier: T1JVV3BtAFkWE7R3p4VtX9YTOHOLNB0qjCHfBsWisDI= Subject key identifier: 54:71:E0:96:6F:97:45:95:26:88:1C:7D:C1:F0:42:27:CE:D6:D3:5D Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806E065A0328AE9CA66DC80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e0:65:a0:32:8a:e9:ca:66:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=94b47df9-bb93-4753-a238-32d5345a933c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:f6:23:15:dc:3d:e8:3e:5f:c4:43:c8:e1: c7:c4:4e:48:71:56:bb:9b:69:32:fe:56:15:99:44: 64:5a:ca:be:d6:0c:9f:97:97:d7:48:36:a5:c9:f3: 10:d6:6a:e6:62:a9:f2:4f:43:88:c1:c0:a2:55:db: 6a:68:2d:05:13:c5:3c:be:61:f8:5f:7f:c1:40:bf: 3e:58:a4:c7:ca:b9:ad:41:f3:da:6a:97:dd:4b:b6: 0c:6d:0f:b8:6c:71:96:23:f0:9c:00:f2:99:f8:63: 64:b0:25:3c:23:44:74:c3:f7:8f:94:a1:b7:bc:65: b4:cb:68:4a:aa:40:86:16:17:62:08:10:e8:e4:68: e4:c4:b2:35:b9:61:d7:0c:11:3b:02:43:df:1b:41: 0b:7c:bf:14:0b:ff:15:b0:4c:85:2b:33:b5:54:9b: 05:ac:ff:3e:62:f0:95:1d:8d:20:0a:d1:a1:cc:17: 0c:13:f3:4e:46:76:a9:3f:11:6a:17:64:36:85:a1: b6:7f:cc:a5:d9:53:c2:3e:5d:42:37:8f:14:46:b0: 2e:1c:2a:4b:0f:a5:09:d6:23:f6:c0:6a:1a:d1:9d: 74:83:62:49:64:99:bf:51:02:4c:72:97:b2:5e:1d: 01:a2:d3:ff:af:66:34:c7:c5:d1:9c:5c:a3:eb:b0: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:E0:96:6F:97:45:95:26:88:1C:7D:C1:F0:42:27:CE:D6:D3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:43:30:cf:a0:30:18:6b:94:fd:de:3c:e4:d1:0f:ed:a4:14: fd:bc:5b:f2:c0:f6:b6:8a:59:c7:02:5e:ba:33:26:d1:ce:70: 8d:b2:a5:d8:45:ca:15:3a:87:30:8c:b1:97:39:36:b2:f3:1b: d3:69:21:f6:3a:e5:d5:69:0b:a0:f2:a0:86:e7:ac:2a:1c:ff: e1:91:f9:e4:78:37:e0:c3:5f:81:96:66:80:fd:f1:75:9f:a5: 0f:be:58:42:8a:1a:c4:5a:08:33:c1:a2:d0:b7:52:bb:57:22: 25:1c:04:32:4e:b5:5f:81:24:e9:97:9f:42:f2:d1:94:43:3e: 5c:4d:fe:4d:09:d9:8b:9a:a8:89:a5:3c:d3:2d:85:a6:e4:b0: 3c:c2:cc:8a:97:bb:4d:a5:02:4d:85:82:46:01:79:f7:ce:31: 9a:93:34:25:ec:55:70:88:82:ef:0e:07:99:54:bf:9d:e4:68: 95:01:74:71:76:8b:f0:24:02:93:38:a3:c9:73:26:55:27:2e: f9:10:3f:24:f3:db:44:37:9a:83:6e:f4:2a:d6:a6:e6:7b:82: 76:9c:50:19:3c:c1:fb:42:cb:3d:b8:19:04:54:19:1f:d2:3e: 83:80:77:dc:73:26:0d:4a:60:e9:ba:71:e3:0a:dc:93:e6:07: 74:2e:49:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuBloDKK6cpm3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OTRiNDdkZjktYmI5My00NzUzLWEyMzgtMzJkNTM0NWE5MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgb2IxXcPeg+X8RDyOHHxE5IcVa7m2ky/lYV mURkWsq+1gyfl5fXSDalyfMQ1mrmYqnyT0OIwcCiVdtqaC0FE8U8vmH4X3/BQL8+ WKTHyrmtQfPaapfdS7YMbQ+4bHGWI/CcAPKZ+GNksCU8I0R0w/ePlKG3vGW0y2hK qkCGFhdiCBDo5GjkxLI1uWHXDBE7AkPfG0ELfL8UC/8VsEyFKzO1VJsFrP8+YvCV HY0gCtGhzBcME/NORnapPxFqF2Q2haG2f8yl2VPCPl1CN48URrAuHCpLD6UJ1iP2 wGoa0Z10g2JJZJm/UQJMcpeyXh0BotP/r2Y0x8XRnFyj67BypwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRx4JZvl0WVJogcfcHwQifO1tNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvY2JiYmNjZWUtMzVlNC0z YjNkLTk4YzAtN2FlNzBiZDM4YjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5DMM+gMBhrlP3ePOTRD+2kFP28W/LA9raKWccCXrozJtHOcI2ypdhF yhU6hzCMsZc5NrLzG9NpIfY65dVpC6DyoIbnrCoc/+GR+eR4N+DDX4GWZoD98XWf pQ++WEKKGsRaCDPBotC3UrtXIiUcBDJOtV+BJOmXn0Ly0ZRDPlxN/k0J2YuaqIml PNMthabksDzCzIqXu02lAk2FgkYBeffOMZqTNCXsVXCIgu8OB5lUv53kaJUBdHF2 i/AkApM4o8lzJlUnLvkQPyTz20Q3moNu9CrWpuZ7gnacUBk8wftCyz24GQRUGR/S PoOAd9xzJg1KYOm6ceMK3JPmB3QuSYc= -----END CERTIFICATE-----Generated at Mon Sep 15 14:27:48 2025 by rpki-client