$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json) Hash identifier: eYjuclWJ366/pwdXZgD0JpScOowKsuf4PjBfiOkzXd4= Subject key identifier: F7:67:09:71:A7:20:71:FA:8B:2D:20:40:13:D8:89:B2:7D:15:98:87 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584AECC14B6A50741483A86DFA80 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 53281 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4b:6a:50:74:14:83:a8:6d:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=29e1b8b2-8bdb-4b8c-92a8-b11c4d9ebe4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:27:72:64:03:56:8e:d2:cf:fd:4c:22:37:df: 1e:3d:fb:1e:04:a7:cc:5c:78:95:5b:4f:e6:b0:37: c0:ed:00:f8:b7:62:12:74:e5:cf:4a:6b:1d:64:49: 34:0f:9f:72:c2:41:3c:1c:b6:ac:ef:21:d1:a7:a5: bf:14:13:4c:8d:88:30:90:6c:5e:0d:bc:ae:da:cb: 75:34:7c:c7:bf:b4:7b:a3:54:53:46:ae:1f:23:8f: dd:a6:e0:fd:8d:f6:ff:ab:33:fe:f5:b6:e0:de:72: e3:f9:99:68:e1:4d:35:76:14:cc:96:36:cc:25:2e: 70:6a:bc:b2:43:b0:a1:0c:14:5d:4a:04:fb:39:16: 42:9c:49:4e:77:17:29:c8:cf:8e:b3:50:69:2b:46: ea:67:a6:10:d2:c3:36:94:44:b0:6c:a3:bc:b2:74: 2e:9c:a1:64:25:28:fe:53:b2:52:e0:dd:65:fa:07: 69:d5:70:79:0c:8f:ea:bc:2c:46:9c:0b:0b:a9:2c: df:70:2f:a2:60:f9:2d:5f:7d:9c:3b:1d:35:1a:0d: 63:2f:f6:41:3d:19:cf:1c:7c:42:8e:f0:d2:d4:a4: eb:fe:b6:53:21:82:25:ac:b5:aa:80:f4:28:f5:f9: cb:13:a7:d9:0e:37:a5:9d:1a:bf:9e:f7:7a:23:5e: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:67:09:71:A7:20:71:FA:8B:2D:20:40:13:D8:89:B2:7D:15:98:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8a:aa:8a:27:d8:c9:ee:30:93:35:e3:9a:f3:37:57:24:a4: c7:69:45:d1:19:c1:07:14:3a:c3:1b:94:5b:e2:f9:40:8e:13: 7c:76:db:25:6d:42:67:f1:5a:b2:07:79:5b:79:03:b1:09:f6: 6a:30:6b:8a:69:be:51:42:d9:aa:f1:59:b0:48:bb:e9:87:cb: b3:0d:f5:94:36:c8:8d:ca:c6:a4:5d:4c:db:f0:db:38:57:8f: 8a:24:22:b1:21:84:54:21:1c:d3:0d:42:c4:47:fd:15:c5:18: a9:aa:3f:31:ae:de:07:b9:fd:f6:22:65:a9:68:fc:27:17:65: bf:61:09:25:e0:51:b9:7d:ae:98:87:de:45:5c:23:ac:a7:81: 18:c3:40:df:8a:01:ce:95:80:66:81:3c:ee:5f:a1:1e:b2:3d: d3:43:c4:cc:81:f8:8b:cc:ce:1d:9c:e1:22:f0:b3:cc:bb:fa: ec:1c:dc:cb:77:50:31:86:41:c8:b6:06:04:38:fd:bc:a5:2e: 5a:b2:d9:ba:dc:8f:a2:26:3c:2e:16:71:38:e6:86:00:77:a3: 7e:d7:09:5d:7e:f6:db:a5:d6:93:0d:d3:76:ea:45:7d:b9:2c: e0:0e:5f:85:dc:ff:e7:6a:21:28:de:a7:e1:ec:1f:35:01:3e: f9:ee:33:ec -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErswUtqUHQUg6ht+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjllMWI4YjItOGJkYi00YjhjLTkyYTgtYjExYzRkOWViZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhydyZANWjtLP/UwiN98ePfseBKfMXHiVW0/m sDfA7QD4t2ISdOXPSmsdZEk0D59ywkE8HLas7yHRp6W/FBNMjYgwkGxeDbyu2st1 NHzHv7R7o1RTRq4fI4/dpuD9jfb/qzP+9bbg3nLj+Zlo4U01dhTMljbMJS5waryy Q7ChDBRdSgT7ORZCnElOdxcpyM+Os1BpK0bqZ6YQ0sM2lESwbKO8snQunKFkJSj+ U7JS4N1l+gdp1XB5DI/qvCxGnAsLqSzfcC+iYPktX32cOx01Gg1jL/ZBPRnPHHxC jvDS1KTr/rZTIYIlrLWqgPQo9fnLE6fZDjelnRq/nvd6I140kQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPdnCXGnIHH6iy0gQBPYibJ9FZiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvM2M2MWM0NGEtYjNmYy0z MDRmLWIyMzItY2YwZjE0YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACmKqoon2MnuMJM145rzN1ckpMdpRdEZwQcUOsMblFvi+UCO E3x22yVtQmfxWrIHeVt5A7EJ9mowa4ppvlFC2arxWbBIu+mHy7MN9ZQ2yI3KxqRd TNvw2zhXj4okIrEhhFQhHNMNQsRH/RXFGKmqPzGu3ge5/fYiZalo/CcXZb9hCSXg Ubl9rpiH3kVcI6yngRjDQN+KAc6VgGaBPO5foR6yPdNDxMyB+IvMzh2c4SLws8y7 +uwc3Mt3UDGGQci2BgQ4/bylLlqy2brcj6ImPC4WcTjmhgB3o37XCV1+9tul1pMN 03bqRX25LOAOX4Xc/+dqISjep+HsHzUBPvnuM+w= -----END CERTIFICATE-----Generated at Sun Aug 24 01:31:43 2025 by rpki-client