$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa File: f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa (raw, json) Hash identifier: thB2uS0DZagz5Mg0pz3/i9fw0zpjTdm6xG6JaZkElzc= Subject key identifier: 1F:BB:1E:A6:63:BA:7D:C7:EC:23:EE:54:77:84:83:D3:6A:BD:C3:5E Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B1806E02D3AFAC1C204127F40 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11290 IP address blocks: 24.122.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e0:2d:3a:fa:c1:c2:04:12:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=c7e1baca-2795-4bc3-a409-e9fcb67b0ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:79:3b:b3:04:80:d7:e9:2c:7f:35:28:b4:45: 0b:c4:6d:f4:df:a9:19:c7:ea:a4:1a:1f:12:7d:f2: 74:de:f5:ff:36:42:e4:80:7f:b2:7c:fb:93:5a:41: a4:58:8e:43:39:75:49:9a:20:b6:90:1a:7d:13:b9: de:5d:5b:bf:3b:80:c9:fb:fc:f3:22:c2:13:ea:92: 13:f0:47:df:a3:42:ea:09:40:eb:6e:cf:05:25:c5: 97:db:39:8a:cc:e2:22:45:e2:1d:3c:26:92:92:ef: 30:95:a2:ba:71:c4:5d:0a:d4:98:37:1b:80:b9:31: 84:78:45:4f:ff:42:a0:cd:cb:f0:66:3b:e6:db:bf: 94:48:aa:0a:b3:98:87:04:00:20:fe:ad:d3:04:91: 10:85:cc:1f:6e:97:a7:bc:35:c7:d6:d1:3a:4c:9c: 67:b5:4b:33:34:a5:2a:f1:c5:8b:6d:a2:06:39:25: 4d:2c:8f:12:f9:5b:b5:54:2f:7c:2a:4d:02:5d:f7: 7c:e8:9b:a9:82:f1:59:46:aa:5f:8f:20:69:fd:fe: 6a:ec:e8:d3:50:97:f6:07:6e:59:9e:fd:79:91:06: 6f:f3:fe:bd:61:16:17:cd:14:25:31:48:6a:9c:cb: e6:5d:e4:60:8a:38:9f:56:c1:3f:3a:13:e6:df:17: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BB:1E:A6:63:BA:7D:C7:EC:23:EE:54:77:84:83:D3:6A:BD:C3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f5dd0a35-899b-33dc-a5ab-328e3333ecf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:00:6c:03:38:40:df:ae:67:a5:1a:c8:d9:b5:ed:4a:77:53: 52:89:18:dc:2c:f7:c4:03:62:54:af:1d:1c:d4:23:d5:e0:3d: 21:d3:fd:5e:8a:ee:62:dc:f7:7c:c2:51:40:6c:9d:5e:8d:62: d6:b1:84:9f:b2:01:92:ff:97:89:06:0b:ff:28:40:14:4e:a4: d0:b0:cf:25:e3:90:52:f5:1a:86:fe:52:49:a5:eb:c9:ea:14: d1:e5:1e:b3:13:d0:ef:99:6f:af:85:4d:1a:0b:39:b5:29:76: 31:d4:ae:b3:a6:0c:44:03:6f:c9:97:40:21:29:cc:4c:d8:6e: 3b:64:6c:fb:46:f6:64:a6:e0:89:fd:9a:e1:a6:e8:16:9d:3f: e1:5e:9e:51:25:bf:8a:d1:67:87:b5:f8:ff:0d:4e:51:5d:51: a2:2e:41:d4:e1:c8:72:59:3e:ba:47:cb:aa:d4:6a:8a:87:69: ec:e9:1d:da:5c:32:b2:58:a7:19:7a:b5:c0:f1:2b:0a:46:cd: 76:88:81:b9:89:a2:7a:e0:cc:e1:51:be:e9:ee:36:50:99:6c: 1f:1c:f4:6f:ce:22:fe:33:5f:b2:bf:60:c1:a8:40:a2:87:73: d0:4e:59:d2:c1:bd:47:f2:e2:47:77:7f:1a:9f:ab:a0:81:c1: 3f:0e:4c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuAtOvrBwgQSf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzdlMWJhY2EtMjc5NS00YmMzLWE0MDktZTlmY2I2N2IwZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXk7swSA1+ksfzUotEULxG3036kZx+qkGh8S ffJ03vX/NkLkgH+yfPuTWkGkWI5DOXVJmiC2kBp9E7neXVu/O4DJ+/zzIsIT6pIT 8Effo0LqCUDrbs8FJcWX2zmKzOIiReIdPCaSku8wlaK6ccRdCtSYNxuAuTGEeEVP /0KgzcvwZjvm27+USKoKs5iHBAAg/q3TBJEQhcwfbpenvDXH1tE6TJxntUszNKUq 8cWLbaIGOSVNLI8S+Vu1VC98Kk0CXfd86JupgvFZRqpfjyBp/f5q7OjTUJf2B25Z nv15kQZv8/69YRYXzRQlMUhqnMvmXeRgijifVsE/OhPm3xf9+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+7HqZjun3H7CPuVHeEg9NqvcNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZjVkZDBhMzUtODk5Yi0z M2RjLWE1YWItMzI4ZTMzMzNlY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsAbAM4QN+uZ6UayNm17Up3U1KJGNws98QDYlSvHRzUI9XgPSHT/V6K 7mLc93zCUUBsnV6NYtaxhJ+yAZL/l4kGC/8oQBROpNCwzyXjkFL1Gob+Ukml68nq FNHlHrMT0O+Zb6+FTRoLObUpdjHUrrOmDEQDb8mXQCEpzEzYbjtkbPtG9mSm4In9 muGm6BadP+FenlElv4rRZ4e1+P8NTlFdUaIuQdThyHJZPrpHy6rUaoqHaezpHdpc MrJYpxl6tcDxKwpGzXaIgbmJonrgzOFRvunuNlCZbB8c9G/OIv4zX7K/YMGoQKKH c9BOWdLBvUfy4kd3fxqfq6CBwT8OTKc= -----END CERTIFICATE-----Generated at Mon Nov 3 14:50:17 2025 by rpki-client