$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa File: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (raw, json) Hash identifier: 52FRMKzBWUFzhMjtE1+5Jph0naVnNTbMec73zOufACs= Subject key identifier: 2B:E5:9A:8F:02:80:9B:84:2C:A7:F3:0A:36:22:A6:D9:B5:B9:BA:51 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584B1AD174A5CF3DFB619E189654 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 15177 IP address blocks: 199.102.60.0/22 maxlen: 24 199.191.120.0/21 maxlen: 24 208.74.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:74:a5:cf:3d:fb:61:9e:18:96:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=cc26829e-9585-43af-82e4-046f95e29ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:0e:f8:a9:0e:d8:66:3c:87:a6:8d:b2:39: 62:8e:ae:f3:71:c5:b0:ec:12:ae:ff:db:c6:54:88: 74:01:70:b5:2f:d2:34:0e:e8:ed:57:2c:be:ae:9a: 5d:0c:0f:a3:e4:32:95:fd:0b:db:60:31:36:a0:a5: ba:62:65:09:f8:20:44:1a:ce:7c:86:fb:af:72:9e: a3:e8:9f:b8:c2:bb:85:d3:f1:c2:21:6a:7f:52:1f: 7f:e4:73:a0:bd:b0:15:27:06:4c:f9:41:cc:60:ac: ed:0a:9a:e5:49:5c:2a:7b:93:9e:2d:dc:6c:67:dc: 08:81:cd:8a:16:59:87:57:ac:14:7a:e8:20:c7:21: 34:dd:fe:3f:0b:0f:5f:c2:23:e1:36:17:3b:22:75: bf:00:34:44:68:3a:65:c4:a2:0a:af:66:21:41:35: ae:58:a4:be:7c:73:d8:b8:d8:bd:75:9e:33:aa:64: 5a:76:de:11:22:4a:49:c2:a6:ba:28:dc:43:1c:2d: 7f:46:c9:14:72:69:63:23:5c:0d:ff:b1:d3:ee:45: dd:3a:d6:c0:e5:88:f2:4e:68:64:56:15:a5:0e:36: e5:50:b3:a5:13:f3:ab:e0:21:ad:c5:bf:6d:9e:2d: 36:50:38:ab:17:43:69:ca:84:0d:63:37:99:80:44: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E5:9A:8F:02:80:9B:84:2C:A7:F3:0A:36:22:A6:D9:B5:B9:BA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/3296796c-a812-3fd9-8b79-c617f853bf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: 199.102.60.0/22 199.191.120.0/21 208.74.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1f:bb:49:d9:7a:e2:5e:31:58:2b:02:4b:2a:2a:83:08:da: 9b:8b:c4:fa:27:7e:09:99:4e:0a:35:49:32:ce:68:5f:d2:c9: 8b:0c:e9:6d:41:1a:aa:2d:45:cc:f6:28:c0:37:9b:57:e5:71: 1d:81:63:e3:5f:3c:6c:b7:2e:a4:f7:22:82:75:d6:29:4e:2e: 6e:da:97:25:85:2c:67:e0:8d:16:d7:7c:bf:27:08:01:c4:62: f3:4e:1c:35:9e:2e:75:36:49:16:3d:e5:4f:12:f8:f4:a6:9b: 5f:c9:b5:de:e7:9f:26:35:dd:39:30:ae:eb:2c:2b:83:32:3a: 3d:08:4c:8b:2c:20:f4:76:01:6d:7f:5f:fe:39:e3:1f:1c:ac: 29:ec:b1:eb:72:9e:b4:fb:e2:f5:ce:2f:ec:9c:26:95:42:b5: 59:aa:eb:68:16:a8:15:f0:49:b3:78:98:d8:5d:ab:6e:15:46: d4:80:a0:d5:bb:b4:a0:a4:a1:e0:e2:d1:fb:30:38:55:d8:71: 44:30:f2:a8:44:03:7d:de:98:f8:1a:45:f9:b7:19:9f:91:c7: 3b:d8:33:79:27:c8:6f:25:84:18:32:11:a7:aa:2e:1b:7b:5a: 11:08:3d:da:e8:39:64:f6:af:77:12:a9:ae:23:82:4e:96:b0: e8:7b:d4:24 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsa0XSlzz37YZ4YllQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2MyNjgyOWUtOTU4NS00M2FmLTgyZTQtMDQ2Zjk1ZTI5YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRAO+KkO2GY8h6aNsjlijq7zccWw7BKu/9vG VIh0AXC1L9I0DujtVyy+rppdDA+j5DKV/QvbYDE2oKW6YmUJ+CBEGs58hvuvcp6j 6J+4wruF0/HCIWp/Uh9/5HOgvbAVJwZM+UHMYKztCprlSVwqe5OeLdxsZ9wIgc2K FlmHV6wUeuggxyE03f4/Cw9fwiPhNhc7InW/ADREaDplxKIKr2YhQTWuWKS+fHPY uNi9dZ4zqmRadt4RIkpJwqa6KNxDHC1/RskUcmljI1wN/7HT7kXdOtbA5YjyTmhk VhWlDjblULOlE/Or4CGtxb9tni02UDirF0NpyoQNYzeZgEQsDQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCvlmo8CgJuELKfzCjYiptm1ubpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvMzI5Njc5NmMtYTgxMi0z ZmQ5LThiNzktYzYxN2Y4NTNiZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCx2Y8AwQD x794AwQD0EqYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABgfu0nZeuJeMVgrAksqKoMI2puLxPonfgmZTgo1 STLOaF/SyYsM6W1BGqotRcz2KMA3m1flcR2BY+NfPGy3LqT3IoJ11ilOLm7alyWF LGfgjRbXfL8nCAHEYvNOHDWeLnU2SRY95U8S+PSmm1/Jtd7nnyY13TkwrussK4My Oj0ITIssIPR2AW1/X/454x8crCnssetynrT74vXOL+ycJpVCtVmq62gWqBXwSbN4 mNhdq24VRtSAoNW7tKCkoeDi0fswOFXYcUQw8qhEA33emPgaRfm3GZ+RxzvYM3kn yG8lhBgyEaeqLht7WhEIPdroOWT2r3cSqa4jgk6WsOh71CQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:03 2025 by rpki-client