$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e23bb973-0891-396b-99bd-f58e74b62fdf.roa File: e23bb973-0891-396b-99bd-f58e74b62fdf.roa (raw, json) Hash identifier: jUEl4dvs5CUrL5U0xzHNE4F+qqGf/eLc5ioaqAq4ZTo= Subject key identifier: 10:6B:18:B7:1D:39:43:EA:1C:16:9F:B0:AA:52:32:51:F3:78:22:FD Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806E0D8904E2F837D21BE80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e23bb973-0891-396b-99bd-f58e74b62fdf.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.49.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e0:d8:90:4e:2f:83:7d:21:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=b992603c-00cd-4f68-8daa-0753ed10fa18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:e7:82:82:b7:38:72:bc:75:23:c6:f6:f2: 0e:ec:12:9d:e6:59:73:54:b1:b1:50:9f:3c:cd:0e: ba:c5:49:7f:03:04:1e:ee:58:48:2f:a9:8a:be:c4: 4b:59:ab:f8:6b:78:26:d3:51:24:56:4e:5f:5e:80: ae:ba:9b:41:a9:5a:a2:66:7f:92:33:ad:aa:3c:0c: ef:a0:21:2e:a7:75:96:68:d2:be:37:15:84:39:de: 0f:36:da:8b:d9:95:53:5e:21:57:ce:ae:3d:79:10: 7d:cc:fc:35:b9:ef:f4:4f:65:cb:7c:6b:a3:78:da: 87:31:34:82:3f:2e:d5:9b:71:c0:5f:de:c8:f3:44: ca:9f:b0:43:83:f4:f6:9c:66:76:31:63:16:e0:1f: f4:43:48:61:a4:3a:97:b5:23:26:71:a0:74:a6:e4: 2c:97:f3:1a:d5:41:ad:a4:bc:35:41:89:81:fc:de: 0c:02:66:e8:9d:eb:ad:27:0e:cd:cf:f9:14:28:1e: 63:9b:ba:ee:d8:92:b3:da:f6:e3:88:08:16:c2:55: 7c:cb:12:88:e6:e1:99:54:c7:fb:08:06:37:fb:66: e2:c3:97:80:27:93:b3:a1:bf:8b:07:6f:03:60:4a: 67:a1:9d:ea:12:55:c2:e2:15:fe:7c:de:84:35:64: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6B:18:B7:1D:39:43:EA:1C:16:9F:B0:AA:52:32:51:F3:78:22:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e23bb973-0891-396b-99bd-f58e74b62fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.49.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:05:65:95:74:f3:3f:a0:f0:87:c9:5c:43:32:12:e3:30:22: 89:b5:14:00:ac:f2:6d:57:17:31:5f:73:54:62:49:c7:40:68: 7e:4e:bb:5d:e8:41:fb:69:66:6f:f5:78:0d:d7:3d:1c:61:48: b1:fc:8d:8c:bd:4d:42:2d:52:53:ab:0b:90:68:1d:b5:22:dc: 1d:8e:65:fd:cb:21:ca:41:fe:73:e2:48:59:2e:18:5b:14:5b: cc:94:e3:f0:5f:3c:34:02:2a:6c:c8:89:97:f1:38:c9:54:9e: 3c:e6:62:d2:e9:cb:72:1f:15:10:78:2d:77:9d:6a:60:ad:15: fc:3e:7c:75:a7:34:1b:5e:1f:79:51:e8:40:24:47:cd:25:ff: 22:47:1d:d2:b3:18:6d:da:ec:32:52:3a:c4:21:32:e0:20:07: 7b:4e:5f:03:f3:28:53:e3:96:24:41:47:2e:73:4f:83:b0:63: d0:e9:ee:ff:4b:61:74:f5:6c:c1:7f:35:b1:73:36:32:e4:af: 70:76:95:c1:a7:24:ac:50:ea:8e:58:6b:77:cb:ff:50:0e:da: 6b:97:02:a1:48:d8:6b:59:6c:1f:56:78:0b:01:d1:48:1b:59: 46:50:f4:11:82:e9:90:8c:38:91:2c:e9:18:79:03:a2:84:b1: d3:81:e1:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuDYkE4vg30hvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Yjk5MjYwM2MtMDBjZC00ZjY4LThkYWEtMDc1M2VkMTBmYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo73ngoK3OHK8dSPG9vIO7BKd5llzVLGxUJ88 zQ66xUl/AwQe7lhIL6mKvsRLWav4a3gm01EkVk5fXoCuuptBqVqiZn+SM62qPAzv oCEup3WWaNK+NxWEOd4PNtqL2ZVTXiFXzq49eRB9zPw1ue/0T2XLfGujeNqHMTSC Py7Vm3HAX97I80TKn7BDg/T2nGZ2MWMW4B/0Q0hhpDqXtSMmcaB0puQsl/Ma1UGt pLw1QYmB/N4MAmboneutJw7Nz/kUKB5jm7ru2JKz2vbjiAgWwlV8yxKI5uGZVMf7 CAY3+2biw5eAJ5Ozob+LB28DYEpnoZ3qElXC4hX+fN6ENWQqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBrGLcdOUPqHBafsKpSMlHzeCL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZTIzYmI5NzMtMDg5MS0z OTZiLTk5YmQtZjU4ZTc0YjYyZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGDHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwFZZV08z+g8IfJXEMyEuMwIom1FACs8m1XFzFfc1RiScdAaH5Ou13o QftpZm/1eA3XPRxhSLH8jYy9TUItUlOrC5BoHbUi3B2OZf3LIcpB/nPiSFkuGFsU W8yU4/BfPDQCKmzIiZfxOMlUnjzmYtLpy3IfFRB4LXedamCtFfw+fHWnNBteH3lR 6EAkR80l/yJHHdKzGG3a7DJSOsQhMuAgB3tOXwPzKFPjliRBRy5zT4OwY9Dp7v9L YXT1bMF/NbFzNjLkr3B2lcGnJKxQ6o5Ya3fL/1AO2muXAqFI2GtZbB9WeAsB0Ugb WUZQ9BGC6ZCMOJEs6Rh5A6KEsdOB4RI= -----END CERTIFICATE-----Generated at Mon Sep 15 14:18:30 2025 by rpki-client