$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa File: c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa (raw, json) Hash identifier: fbsR4fa4Zz4vECN3kQWoEPnU0n25qYUfoSBJlgfOwuE= Subject key identifier: 29:2B:9F:7C:CA:4D:16:65:CA:2C:26:92:10:39:4B:64:6D:D5:D8:91 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AF0F1435D49CD76445CAF13C4 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 63189 IP address blocks: 40.143.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:43:5d:49:cd:76:44:5c:af:13:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=15a5f17e-caed-4380-9c13-59842461b10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:35:7f:b5:6f:65:99:fb:44:53:1c:46:c9: 51:85:98:3c:96:19:95:8e:40:4a:be:d9:34:22:0c: 76:4b:66:87:37:0d:a2:a9:40:93:23:36:72:8a:4c: 9a:1d:25:ac:cd:f9:f7:99:4e:61:ce:43:29:2e:d3: be:19:4b:6c:f0:5c:19:51:ad:b9:41:32:2f:02:8d: 3b:eb:0d:6e:19:8a:ea:c2:ba:9c:bd:87:c6:70:c0: 50:68:36:24:7d:46:c7:00:27:0d:ed:b9:63:67:c8: 6d:36:f3:04:28:2c:06:1d:49:87:03:9c:8b:a1:92: ec:97:55:04:96:97:92:6a:38:b4:fb:a6:19:99:86: b9:9a:b2:c4:04:e4:98:d4:28:84:05:94:82:1c:21: 9e:0d:fa:52:11:9a:54:56:32:55:0c:1c:13:21:4e: 6d:14:03:bb:cf:f9:ac:94:03:0d:86:3a:2a:6c:e5: 79:73:58:46:68:f6:0f:db:aa:e5:ed:1e:80:1b:c2: 48:a5:fd:61:54:c3:9e:a1:5f:b8:10:34:8b:16:6a: 26:96:61:ab:f2:51:48:95:0e:6e:42:bc:1a:be:85: 14:c9:cf:14:55:46:45:52:57:d0:10:b1:32:0d:42: e0:1d:1d:1c:99:90:e3:50:32:7a:14:2b:eb:fe:c5: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:9F:7C:CA:4D:16:65:CA:2C:26:92:10:39:4B:64:6D:D5:D8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/c5dd281f-4c36-3e1c-b841-e2fabdf3123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.143.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:19:3f:fe:a2:54:23:49:e2:d7:f2:38:16:3f:d4:79:de:94: 68:60:ec:82:41:d2:32:db:df:97:8c:d0:b4:ed:53:31:a5:9e: 1c:69:be:d8:bd:63:2b:32:91:4d:02:ee:37:6d:10:3c:3d:d3: fa:70:9a:8f:15:51:c7:e9:29:7d:8b:16:4b:27:03:a2:52:df: 0e:2c:78:02:3c:43:ee:c6:9e:aa:5b:d9:4a:5f:98:f1:b1:e8: 84:f3:b2:21:91:53:cb:c3:2b:35:5e:94:72:01:e5:b4:33:f6: 9c:6a:e3:80:c3:b4:c9:9d:00:61:96:e1:49:07:a0:5c:24:03: 6d:8b:37:27:f3:e8:80:18:9e:7f:51:af:e3:d2:89:52:f2:7b: 04:8d:7f:66:7f:b4:c1:47:fb:4c:81:16:1c:61:44:6b:fc:77: 5b:d1:99:9a:57:68:a7:f6:b6:b0:31:87:49:9c:d9:a5:ad:15: 60:a1:69:d2:fb:55:5f:54:c1:99:db:43:36:c7:26:23:b2:0e: 3a:26:c0:b9:3d:01:5f:29:29:38:56:0d:45:29:ff:82:11:d9: 18:72:a2:63:1e:ea:8c:2a:f0:74:93:20:c9:84:db:ba:b9:27: 87:e1:39:2c:67:27:c4:ad:9c:39:3a:17:5d:5d:e8:49:31:26: fd:0e:ba:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UNdSc12RFyvE8QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MTVhNWYxN2UtY2FlZC00MzgwLTljMTMtNTk4NDI0NjFiMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRM1f7VvZZn7RFMcRslRhZg8lhmVjkBKvtk0 Igx2S2aHNw2iqUCTIzZyikyaHSWszfn3mU5hzkMpLtO+GUts8FwZUa25QTIvAo07 6w1uGYrqwrqcvYfGcMBQaDYkfUbHACcN7bljZ8htNvMEKCwGHUmHA5yLoZLsl1UE lpeSaji0+6YZmYa5mrLEBOSY1CiEBZSCHCGeDfpSEZpUVjJVDBwTIU5tFAO7z/ms lAMNhjoqbOV5c1hGaPYP26rl7R6AG8JIpf1hVMOeoV+4EDSLFmomlmGr8lFIlQ5u QrwavoUUyc8UVUZFUlfQELEyDULgHR0cmZDjUDJ6FCvr/sWLPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkrn3zKTRZlyiwmkhA5S2Rt1diRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYzVkZDI4MWYtNGMzNi0z ZTFjLWI4NDEtZTJmYWJkZjMxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI+PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgZP/6iVCNJ4tfyOBY/1HnelGhg7IJB0jLb35eM0LTtUzGlnhxpvti9 YysykU0C7jdtEDw90/pwmo8VUcfpKX2LFksnA6JS3w4seAI8Q+7Gnqpb2UpfmPGx 6ITzsiGRU8vDKzVelHIB5bQz9pxq44DDtMmdAGGW4UkHoFwkA22LNyfz6IAYnn9R r+PSiVLyewSNf2Z/tMFH+0yBFhxhRGv8d1vRmZpXaKf2trAxh0mc2aWtFWChadL7 VV9UwZnbQzbHJiOyDjomwLk9AV8pKThWDUUp/4IR2RhyomMe6owq8HSTIMmE27q5 J4fhOSxnJ8StnDk6F11d6EkxJv0Our4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:02:57 2025 by rpki-client