$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa File: cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa (raw, json) Hash identifier: Q2tDUkSL+sqINnSi70MRRz+ry10E/JuFNMkobuXyRfs= Subject key identifier: EF:7D:8D:A9:45:03:E3:F9:1B:B6:B7:94:AC:D2:46:E4:49:C9:5E:97 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B110C0D9124FFA41200376840 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 205.151.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0d:91:24:ff:a4:12:00:37:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=ec088c35-8047-4d62-9e20-6f575a47d7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:26:20:18:69:cb:db:3b:67:fb:f8:3d:c4:bb: 3a:93:00:9d:bf:b5:62:db:9e:da:51:d0:92:ec:d2: b6:34:74:d9:b2:aa:08:b4:77:5a:d6:90:ee:5d:a2: 05:1d:7c:c5:4d:a6:db:93:d6:ef:75:17:9e:8e:ec: 3a:51:c4:43:d9:e5:5e:1f:17:41:18:f6:36:7c:30: d2:65:e2:57:ca:8a:cb:61:9f:91:2f:5f:f8:21:bf: e2:e5:84:aa:d7:d9:d8:40:10:ea:6e:0d:4b:8c:90: 60:df:fb:73:48:6b:6d:9d:5b:86:c5:d4:28:03:ef: 60:6a:04:ab:b5:3c:cd:c1:d1:52:8e:2b:54:dd:17: 26:78:cb:b3:98:7c:f6:ac:dc:93:58:42:9b:bd:d2: 82:20:92:ba:49:f3:42:62:7d:36:40:03:94:2d:64: 57:1c:db:f0:99:28:9b:16:b2:4b:9f:e8:01:83:f9: c6:3a:ac:d3:0b:71:cc:cc:7d:e4:54:34:3f:b4:a5: b8:19:17:1c:59:d3:ce:f7:c5:ab:a6:c4:e8:1a:95: b2:71:39:2e:56:50:64:97:27:08:45:a9:e2:ab:23: 15:ab:ff:c1:d0:71:29:f7:83:77:81:4d:02:d7:b7: c4:32:0c:79:ef:25:51:bd:6b:a1:54:d9:b2:92:89: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7D:8D:A9:45:03:E3:F9:1B:B6:B7:94:AC:D2:46:E4:49:C9:5E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cd516a63-a4fd-3564-b30c-4202f4d3bb48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 205.151.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a9:69:05:b4:1d:f7:f7:2f:e7:48:f9:d3:d1:55:25:8c:5e: 02:a7:3b:60:11:05:49:52:f0:af:77:32:0a:b3:7b:92:4d:58: a1:88:77:56:ff:e5:87:11:eb:4a:47:83:88:29:f1:52:c2:0f: fe:00:3d:28:ad:34:97:a4:f7:2d:ec:5e:f8:8e:6a:c5:91:ca: f1:b1:ee:77:c6:5c:68:28:0d:ab:11:4b:1c:f8:6a:0f:36:99: 11:e6:12:bd:5b:b0:42:b9:1d:2e:4c:bd:ad:64:83:66:fd:33: ab:5d:2b:d4:09:f4:78:04:d7:ff:ee:09:e4:96:4d:33:00:f0: 3e:b8:47:08:65:8c:96:bd:fe:c9:c7:9d:82:31:ae:15:c3:77: ec:3b:9f:26:98:1e:cc:43:65:99:72:f2:cc:d5:a6:17:f0:db: e5:70:b1:52:fc:e6:44:12:a3:65:0e:0c:9a:ec:0d:0a:f3:47: 8e:9f:12:6b:a1:4c:50:88:2f:f2:b5:58:1b:6f:9d:00:51:f0: df:0c:89:57:8b:e8:e5:54:96:ca:d9:c0:cc:6d:42:d4:b3:4c: 37:af:2e:d7:f7:ab:c7:20:db:ec:11:e0:f3:ce:81:b0:52:d0: a0:73:8d:db:db:e1:15:0f:d8:d8:8c:ac:af:3a:e0:be:09:bf: 8f:e3:3a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDA2RJP+kEgA3aEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWMwODhjMzUtODA0Ny00ZDYyLTllMjAtNmY1NzVhNDdkN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliYgGGnL2ztn+/g9xLs6kwCdv7Vi257aUdCS 7NK2NHTZsqoItHda1pDuXaIFHXzFTabbk9bvdReejuw6UcRD2eVeHxdBGPY2fDDS ZeJXyorLYZ+RL1/4Ib/i5YSq19nYQBDqbg1LjJBg3/tzSGttnVuGxdQoA+9gagSr tTzNwdFSjitU3RcmeMuzmHz2rNyTWEKbvdKCIJK6SfNCYn02QAOULWRXHNvwmSib FrJLn+gBg/nGOqzTC3HMzH3kVDQ/tKW4GRccWdPO98WrpsToGpWycTkuVlBklycI RaniqyMVq//B0HEp94N3gU0C17fEMgx57yVRvWuhVNmykonsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO99jalFA+P5G7a3lKzSRuRJyV6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvY2Q1MTZhNjMtYTRmZC0z NTY0LWIzMGMtNDIwMmY0ZDNiYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzZdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWpaQW0Hff3L+dI+dPRVSWMXgKnO2ARBUlS8K93Mgqze5JNWKGId1b/ 5YcR60pHg4gp8VLCD/4APSitNJek9y3sXviOasWRyvGx7nfGXGgoDasRSxz4ag82 mRHmEr1bsEK5HS5Mva1kg2b9M6tdK9QJ9HgE1//uCeSWTTMA8D64RwhljJa9/snH nYIxrhXDd+w7nyaYHsxDZZly8szVphfw2+VwsVL85kQSo2UODJrsDQrzR46fEmuh TFCIL/K1WBtvnQBR8N8MiVeL6OVUlsrZwMxtQtSzTDevLtf3q8cg2+wR4PPOgbBS 0KBzjdvb4RUP2NiMrK864L4Jv4/jOso= -----END CERTIFICATE-----Generated at Mon Sep 15 14:17:19 2025 by rpki-client