$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa File: 40d3479d-bb5f-3869-8420-fee0194d4e25.roa (raw, json) Hash identifier: XCDyVnyBVv0TSAf7FThOHBp9pi00B2PirSd124aZH2Y= Subject key identifier: 7B:3D:51:0E:1B:CB:0B:19:A7:87:C6:6A:F7:D1:F3:78:0E:C7:7A:D9 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4D11C88A0DAB56DC77E50500 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 30610 IP address blocks: 209.166.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c8:8a:0d:ab:56:dc:77:e5:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=5e255b7e-f63f-4fc9-9d35-9bfd836e3805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:18:96:9a:f2:52:ea:c0:1d:55:46:09:3d:73: 37:75:18:88:cd:a9:97:bb:87:61:d1:a1:72:71:2a: 61:63:0f:bb:d1:2a:57:98:59:11:10:09:7b:44:93: 9e:8f:d7:4a:d9:cf:c7:a2:ac:46:7a:f0:79:5e:2d: 51:f6:f2:52:ea:86:8a:85:ea:23:ff:77:da:3f:eb: 28:b9:2f:df:2c:f5:e2:d0:52:3e:47:cb:ed:14:46: b9:81:b4:16:2c:73:4c:2b:f5:b9:31:02:62:d6:36: 83:0c:dc:e4:56:6b:bb:3e:d0:52:71:f2:0e:78:bf: e0:1f:d2:a2:e4:6c:20:90:bd:c4:27:84:e2:db:51: 8e:50:48:9d:98:86:4b:7f:b0:b8:81:08:61:ac:43: f6:cb:e5:c3:81:51:40:a3:56:58:ec:3d:39:66:ef: 36:86:ca:8e:6f:73:0d:a6:7a:a0:13:5d:1a:37:04: 8a:d9:8c:bb:9c:77:a4:b2:2c:ae:0a:6e:28:93:ad: 69:f9:9f:03:d7:a9:05:d3:54:17:71:ee:79:9b:d1: 20:04:90:a4:f7:eb:57:6c:e5:a9:d9:57:20:98:42: a1:6c:01:3c:aa:ef:9b:b1:6e:dc:60:05:2a:1c:d7: 9c:e7:f5:fc:f7:5d:3d:c6:86:d3:68:15:5b:8e:de: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3D:51:0E:1B:CB:0B:19:A7:87:C6:6A:F7:D1:F3:78:0E:C7:7A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/40d3479d-bb5f-3869-8420-fee0194d4e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:33:0d:5c:da:5b:cd:d0:1b:3c:94:6b:88:b1:ae:ea:9a:44: 09:7e:20:19:64:e7:f4:9d:3d:b8:a0:90:5a:0e:3f:06:be:a1: 0e:44:c6:b3:61:1a:3e:91:d8:2b:f1:d4:09:d9:46:7e:ab:e1: 14:12:09:d8:d6:20:fe:62:88:8c:45:94:27:fa:7d:21:93:cb: 52:a6:79:90:96:3f:6b:88:14:16:59:2b:5a:2c:8b:92:2f:1f: 3b:b3:1d:a9:e5:5f:e8:00:04:80:e7:4c:82:9b:5f:2a:4f:84: 58:c7:9b:a6:20:ff:22:38:b4:27:d3:07:d1:e3:73:24:2d:d7: 9d:b9:95:a8:c8:b7:ac:98:c0:a7:0b:55:dd:c3:a0:3a:76:57: 77:66:d8:7c:09:c8:52:13:e8:f5:a1:98:5f:53:03:b1:61:e0: 1e:59:82:3d:0e:0a:72:6c:88:2b:7a:81:2f:ee:31:ca:bd:34: af:0d:6d:88:d3:36:00:35:56:b7:a3:85:f1:74:04:08:5a:41: b8:03:ee:f1:91:d9:5a:aa:ba:6b:57:33:ac:8b:d4:ad:2a:00: 4c:0d:78:60:e2:8c:5b:d8:0a:0a:43:36:91:10:e9:3e:77:50: 51:0d:d1:dc:4d:d0:c0:f6:a5:71:65:b3:9c:94:d1:28:93:ab: d2:92:a3:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEciKDatW3HflBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NWUyNTViN2UtZjYzZi00ZmM5LTlkMzUtOWJmZDgzNmUzODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhiWmvJS6sAdVUYJPXM3dRiIzamXu4dh0aFy cSphYw+70SpXmFkREAl7RJOej9dK2c/HoqxGevB5Xi1R9vJS6oaKheoj/3faP+so uS/fLPXi0FI+R8vtFEa5gbQWLHNMK/W5MQJi1jaDDNzkVmu7PtBScfIOeL/gH9Ki 5GwgkL3EJ4Ti21GOUEidmIZLf7C4gQhhrEP2y+XDgVFAo1ZY7D05Zu82hsqOb3MN pnqgE10aNwSK2Yy7nHeksiyuCm4ok61p+Z8D16kF01QXce55m9EgBJCk9+tXbOWp 2VcgmEKhbAE8qu+bsW7cYAUqHNec5/X89109xobTaBVbjt5izQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHs9UQ4bywsZp4fGavfR83gOx3rZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNDBkMzQ3OWQtYmI1Zi0z ODY5LTg0MjAtZmVlMDE5NGQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgzDVzaW83QGzyUa4ixruqaRAl+IBlk5/SdPbigkFoOPwa+oQ5ExrNh Gj6R2Cvx1AnZRn6r4RQSCdjWIP5iiIxFlCf6fSGTy1KmeZCWP2uIFBZZK1osi5Iv HzuzHanlX+gABIDnTIKbXypPhFjHm6Yg/yI4tCfTB9HjcyQt1525lajIt6yYwKcL Vd3DoDp2V3dm2HwJyFIT6PWhmF9TA7Fh4B5Zgj0OCnJsiCt6gS/uMcq9NK8NbYjT NgA1VrejhfF0BAhaQbgD7vGR2VqqumtXM6yL1K0qAEwNeGDijFvYCgpDNpEQ6T53 UFEN0dxN0MD2pXFls5yU0SiTq9KSo6k= -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:06 2025 by rpki-client