$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa File: a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa (raw, json) Hash identifier: 4GPkdeCPumdqLrsWKZ41cE4gGxSUI2+U6AP1RgfN9jk= Subject key identifier: 07:71:59:5A:B4:D3:1D:D9:CA:2E:11:AA:BF:37:80:4B:51:89:0A:41 Certificate issuer: /CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Certificate serial: 010D0C9F4328584B2B918B878D134E54F7D58580 Authority key identifier: E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 11370 IP address blocks: 199.201.225.0/24 maxlen: 24 2602:fa50::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:8b:87:8d:13:4e:54:f7:d5:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=b0988f6b-3c6a-4b47-becd-e45ae6b5d496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:39:c3:cd:c7:f8:f7:79:8e:9a:78:c0:75: cf:7b:17:38:10:0b:3e:bb:02:86:16:13:4d:7a:63: 01:5c:a6:3f:c1:9b:a0:c2:0f:26:c4:2e:ce:b9:b2: 68:5b:26:50:84:ca:18:ad:3d:df:8f:9e:3b:18:33: bf:a3:a1:49:fc:8a:e2:7e:e0:f9:84:b7:6c:a5:89: 50:68:f1:a9:46:90:7b:88:32:94:d9:2d:2b:1d:9a: 4d:04:c3:1b:24:6f:3f:36:d6:2b:41:38:82:7e:1f: bd:b2:48:53:72:b9:24:d8:51:08:33:00:06:72:ea: 56:fc:f3:85:c1:f4:a6:95:c8:80:89:99:3f:10:d1: 56:a4:66:46:ea:43:26:b7:6c:50:51:98:54:2d:8b: 9c:44:07:5d:be:59:c4:dc:27:15:2f:a8:cc:06:6c: 65:86:55:82:92:58:38:b8:0b:85:8b:70:e8:25:b7: ae:08:8f:a6:db:97:61:f2:b3:2f:0c:e4:ec:50:03: b4:9b:f3:9d:fa:54:a1:a0:94:2c:7e:0d:19:8b:b9: af:25:57:94:eb:49:23:a6:b7:59:e6:e3:14:b1:6f: 81:ef:10:22:08:7a:ce:ea:db:85:02:28:cd:fa:ce: 74:8c:a2:78:6a:a0:89:08:74:bd:0b:83:96:62:d8: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:71:59:5A:B4:D3:1D:D9:CA:2E:11:AA:BF:37:80:4B:51:89:0A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl X509v3 Authority Key Identifier: keyid:E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer sbgp-ipAddrBlock: critical IPv4: 199.201.225.0/24 IPv6: 2602:fa50::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:17:c5:42:8e:9e:9d:f2:30:47:96:b9:fe:2c:da:02:36:f6: ef:c0:2c:b2:33:de:45:b1:71:28:43:35:af:dd:ff:cb:4f:d2: 8c:ca:94:b3:6a:df:41:84:a5:a8:7e:97:38:e7:06:f6:0e:53: dc:34:6c:d5:1c:ce:e5:a5:64:7d:d0:f0:19:ae:c4:d6:6b:e3: 5c:c6:b2:b4:c0:69:0b:47:2d:9d:a8:46:11:f8:40:b6:c0:9a: df:87:7a:8b:4b:96:7a:c7:17:0f:d8:15:8e:18:24:85:75:0c: e8:24:12:09:43:8a:8d:81:9d:19:69:04:25:1d:b3:fa:c9:c0: fa:87:3f:4f:9a:2d:cb:76:f8:ef:c7:f6:94:fc:8e:7c:a5:5a: 56:88:e6:1c:d2:ef:b4:ba:2f:3c:95:e0:ff:93:5d:40:b3:2b: 0d:17:d7:67:65:6a:eb:f3:f5:8d:ea:8e:42:5d:e1:0a:7c:64: 50:06:1f:b9:cb:d7:15:ba:ac:82:84:37:1f:26:a3:8d:aa:e6: 75:52:33:57:b8:b7:de:81:a0:5c:a3:cb:7f:41:34:79:b2:ea: 91:57:a1:78:be:2e:d5:f0:88:fb:89:f5:0d:eb:54:e5:6f:97: 72:d3:25:c9:bb:46:d5:8e:5b:5b:3d:46:45:03:9b:ea:b5:94: 75:cf:0c:70 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsrkYuHjRNOVPfVhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZWY3NDAtODU5MS00MWU1LTg5ZDAtOWIwMjY2ZDNm Y2Y3MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YjA5ODhmNmItM2M2YS00YjQ3LWJlY2QtZTQ1YWU2YjVkNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqQ5w83H+Pd5jpp4wHXPexc4EAs+uwKGFhNN emMBXKY/wZugwg8mxC7OubJoWyZQhMoYrT3fj547GDO/o6FJ/IrifuD5hLdspYlQ aPGpRpB7iDKU2S0rHZpNBMMbJG8/NtYrQTiCfh+9skhTcrkk2FEIMwAGcupW/POF wfSmlciAiZk/ENFWpGZG6kMmt2xQUZhULYucRAddvlnE3CcVL6jMBmxlhlWCklg4 uAuFi3DoJbeuCI+m25dh8rMvDOTsUAO0m/Od+lShoJQsfg0Zi7mvJVeU60kjprdZ 5uMUsW+B7xAiCHrO6tuFAijN+s50jKJ4aqCJCHS9C4OWYtjMtQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAdxWVq00x3Zyi4Rqr83gEtRiQpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBl Zjc0MC04NTkxLTQxZTUtODlkMC05YjAyNjZkM2ZjZjcvYTE5ZWNiNGMtMWRiZi0z NmUzLWExOGEtYmRjMzVkMTI1NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwZWY3NDAtODU5MS00MWU1LTg5 ZDAtOWIwMjY2ZDNmY2Y3LzA0MGVmNzQwLTg1OTEtNDFlNS04OWQwLTliMDI2NmQz ZmNmNy5jcmwwHwYDVR0jBBgwFoAU5tlFAqSd+xLR9T9J8Vll47R/gUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBlZjc0MC04NTkxLTQxZTUtODlkMC05YjAy NjZkM2ZjZjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx8nhMA4E AgACMAgDBgAmAvpQADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtF8VCjp6d8jBHlrn+LNoCNvbvwCyyM95F sXEoQzWv3f/LT9KMypSzat9BhKWofpc45wb2DlPcNGzVHM7lpWR90PAZrsTWa+Nc xrK0wGkLRy2dqEYR+EC2wJrfh3qLS5Z6xxcP2BWOGCSFdQzoJBIJQ4qNgZ0ZaQQl HbP6ycD6hz9Pmi3Ldvjvx/aU/I58pVpWiOYc0u+0ui88leD/k11AsysNF9dnZWrr 8/WN6o5CXeEKfGRQBh+5y9cVuqyChDcfJqONquZ1UjNXuLfegaBco8t/QTR5suqR V6F4vi7V8Ij7ifUN61Tlb5dy0yXJu0bVjltbPUZFA5vqtZR1zwxw -----END CERTIFICATE-----Generated at Tue Oct 28 13:17:50 2025 by rpki-client