$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa File: b36d5e8f-bac8-378b-8482-3e6f208fa162.roa (raw, json) Hash identifier: IEfpKIgIm3yEpPwcj3olKp48s7oi5to/xG48Qhzj0ZY= Subject key identifier: 83:FC:9E:26:8D:AF:56:D3:E7:AE:5F:F7:DF:C2:D6:00:47:80:0B:32 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584B84E787C59C1F7BC05A3AB480 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 22065 IP address blocks: 40.143.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:87:c5:9c:1f:7b:c0:5a:3a:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5d9fe1b8-dd89-48e3-9f15-d1b61ea71cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7f:68:c8:7a:97:4b:aa:6a:23:32:02:21:51: a2:f8:57:40:f7:4a:5e:7f:77:c6:50:2c:c8:3c:72: ba:f6:82:0a:5c:a9:0e:6f:a6:d4:09:2a:a6:a9:c3: 92:c9:cd:40:99:84:da:aa:fb:be:48:be:47:e9:5a: 91:0d:5f:7d:32:54:d2:71:8f:6f:5e:f9:bc:ba:c0: 86:97:c3:1c:63:34:38:05:2d:54:00:31:a4:3a:bf: d3:22:b5:21:32:38:de:a1:c3:6b:64:32:7a:b2:4f: 14:be:40:25:91:53:0f:26:d3:22:7a:68:c6:90:38: c1:f0:bc:6b:75:78:76:0d:7f:19:b9:36:18:fc:e3: 52:49:48:7c:b5:21:b6:b1:8d:52:1e:56:a8:5f:83: 07:0d:82:69:f2:e3:5e:f6:17:bd:68:ce:49:7b:c4: 13:ae:4f:74:e0:00:56:de:b4:c7:55:da:77:67:d3: ee:3d:63:c5:4b:ed:0e:f5:6a:c7:4c:fa:e5:0e:49: 52:71:d8:f6:94:31:46:a6:a4:af:ce:a8:3e:36:9f: b5:e0:cf:e2:ce:a2:7d:16:46:57:2e:c5:00:59:7e: 32:6c:26:65:3c:78:a1:c3:bb:07:04:64:58:86:38: c6:4e:5d:8a:49:65:bd:e2:db:33:06:6f:e6:3d:f0: 32:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:9E:26:8D:AF:56:D3:E7:AE:5F:F7:DF:C2:D6:00:47:80:0B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:94:fe:bc:c9:26:d0:d3:bc:c5:e6:e7:7f:34:0d:da:d0:34: 5c:89:e5:28:8a:d9:89:b5:98:b8:06:b1:1b:7b:2d:39:9d:55: f6:e7:b4:c4:3c:ff:9f:ee:01:48:df:89:aa:48:47:64:50:fd: c9:5a:2f:8c:ad:ae:5c:cf:a4:22:45:63:a5:c2:f5:8d:8a:c2: 7a:eb:a1:94:8d:59:90:cd:6f:3d:99:a2:fe:06:ae:df:90:b6: 31:a4:24:ed:e3:8e:29:40:51:5e:d4:0a:b1:c6:a9:c6:b3:d6: 79:8a:79:f4:0f:b9:16:38:38:94:78:84:a4:25:9e:9e:ff:bf: ee:ee:53:18:bf:83:92:b9:1b:83:89:b4:19:09:6d:08:04:19: b2:3c:b9:c9:39:3f:9f:73:6d:02:52:d6:d3:80:1b:1a:9c:30: 12:93:4d:b0:11:6b:8b:90:c5:aa:c2:dc:ab:23:66:9e:82:34: 3f:23:e3:6b:33:70:27:6f:31:14:f9:74:dd:aa:19:48:ea:81: ef:87:64:cd:d8:c3:d1:f8:00:5d:86:ae:b6:ca:c9:ab:37:78: 5c:40:26:aa:ba:22:b0:63:81:f6:88:ef:3f:e6:79:41:d5:f5: 45:6a:a2:8c:8c:ab:20:5a:3e:17:16:48:96:f8:6e:49:7c:5e: 71:1d:5f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54fFnB97wFo6tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NWQ5ZmUxYjgtZGQ4OS00OGUzLTlmMTUtZDFiNjFlYTcxY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA539oyHqXS6pqIzICIVGi+FdA90pef3fGUCzI PHK69oIKXKkOb6bUCSqmqcOSyc1AmYTaqvu+SL5H6VqRDV99MlTScY9vXvm8usCG l8McYzQ4BS1UADGkOr/TIrUhMjjeocNrZDJ6sk8UvkAlkVMPJtMiemjGkDjB8Lxr dXh2DX8ZuTYY/ONSSUh8tSG2sY1SHlaoX4MHDYJp8uNe9he9aM5Je8QTrk904ABW 3rTHVdp3Z9PuPWPFS+0O9WrHTPrlDklScdj2lDFGpqSvzqg+Np+14M/izqJ9FkZX LsUAWX4ybCZlPHihw7sHBGRYhjjGTl2KSWW94tszBm/mPfAyowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP8niaNr1bT565f99/C1gBHgAsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYjM2ZDVlOGYtYmFjOC0z NzhiLTg0ODItM2U2ZjIwOGZhMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI8dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuU/rzJJtDTvMXm5380DdrQNFyJ5SiK2Ym1mLgGsRt7LTmdVfbntMQ8 /5/uAUjfiapIR2RQ/claL4ytrlzPpCJFY6XC9Y2KwnrroZSNWZDNbz2Zov4Grt+Q tjGkJO3jjilAUV7UCrHGqcaz1nmKefQPuRY4OJR4hKQlnp7/v+7uUxi/g5K5G4OJ tBkJbQgEGbI8uck5P59zbQJS1tOAGxqcMBKTTbARa4uQxarC3KsjZp6CND8j42sz cCdvMRT5dN2qGUjqge+HZM3Yw9H4AF2GrrbKyas3eFxAJqq6IrBjgfaI7z/meUHV 9UVqooyMqyBaPhcWSJb4bkl8XnEdXy8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:08 2025 by rpki-client