$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa File: 2e383e3e-0344-3c61-8718-33b9fa1deed1.roa (raw, json) Hash identifier: M3pOnEPtUjV4hfnfv1SIKNgcUa19+nLtejM8XqSwQfg= Subject key identifier: 36:38:A0:42:69:4B:FF:58:20:84:77:C5:DB:B8:C2:C5:C8:AD:02:C7 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B110C0525BE1A5315749D8F10 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 208.118.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:05:25:be:1a:53:15:74:9d:8f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=df16c9a7-7d18-4b17-8ea4-986ebb49c529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:72:19:e5:1f:f6:a2:3d:47:69:aa:ba:84: cc:63:3c:a5:ee:c7:10:0b:9a:93:09:33:71:57:99: fc:c9:a3:3b:a4:0c:0b:dd:d4:1b:3d:41:07:ca:8e: f0:4d:23:8b:94:99:3e:a7:15:70:2e:23:e3:44:3e: 72:ad:7e:04:f4:7c:d3:34:81:45:e1:44:dd:73:92: 5c:05:0e:f6:a7:96:09:2a:61:35:4f:49:4e:8c:15: 5d:14:1e:2c:30:7c:7e:f3:95:fe:80:1d:ab:59:b0: ce:cc:3a:19:cd:3d:88:b3:ea:b3:61:b6:0a:05:4f: 10:df:7d:52:87:97:a7:be:36:f7:66:2c:55:47:f3: 8d:cf:be:f6:02:1b:5f:d3:8f:95:a1:22:e8:86:9f: 1f:d0:46:ea:45:b4:ec:72:b5:9f:86:19:43:df:89: e2:76:97:c5:34:90:b8:c3:72:3f:71:de:b9:e1:d9: 64:ad:48:68:4d:a7:d1:65:cb:0c:3b:fb:da:5c:85: fa:c1:14:8c:b3:4b:e6:fd:79:49:b0:9d:6c:77:26: 8d:53:3e:e3:76:ae:a0:b7:23:99:1c:46:1f:cf:35: cc:31:f1:3f:ae:9f:e6:70:ba:8c:de:a2:1e:b0:77: cd:75:f4:d5:19:b0:8e:17:66:c2:c7:5c:3a:b6:0d: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:38:A0:42:69:4B:FF:58:20:84:77:C5:DB:B8:C2:C5:C8:AD:02:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2e383e3e-0344-3c61-8718-33b9fa1deed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 208.118.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:76:eb:f4:63:bb:ae:f6:33:96:e0:06:b3:76:3b:dc:74:3c: 92:68:b9:55:95:04:d8:c6:a9:4e:49:1b:4f:94:34:a6:5f:45: e3:e5:1a:53:82:51:6e:b0:5f:a7:fc:79:c5:70:05:fe:20:dc: 7a:36:47:84:a8:ca:e1:bb:8d:c3:ca:bd:62:e0:8c:70:aa:89: 32:d1:96:ef:d3:9a:90:e1:12:36:b8:80:6d:7e:f5:b1:31:87: 4e:df:bf:72:d3:48:89:4a:cf:f9:b0:f8:7b:13:a4:1e:c5:87: 8d:60:18:93:14:ec:47:1f:4e:86:e6:74:be:96:19:34:f7:cf: 62:53:a4:0c:99:1d:83:f1:aa:ad:f9:ea:81:bf:5a:24:0f:5c: d4:00:b8:33:d3:93:23:a8:0b:8c:08:36:65:2b:31:c4:90:55: 40:5d:63:5e:a6:3f:b0:01:bb:12:7c:97:8e:e1:e1:2c:32:bb: ce:81:89:b9:8e:0d:6c:e1:94:b1:cf:d4:2b:b0:9f:c4:ba:42: aa:1c:43:e1:69:d3:12:54:73:99:ad:64:b3:e9:09:b9:3b:97: d5:22:9e:66:6a:ee:8d:20:25:2c:aa:48:90:16:6c:b3:7e:96: a0:d3:f1:a9:67:e2:15:53:00:9f:8c:ab:c8:d9:ce:48:01:d6: b4:1c:ee:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAUlvhpTFXSdjxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGYxNmM5YTctN2QxOC00YjE3LThlYTQtOTg2ZWJiNDljNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLVyGeUf9qI9R2mquoTMYzyl7scQC5qTCTNx V5n8yaM7pAwL3dQbPUEHyo7wTSOLlJk+pxVwLiPjRD5yrX4E9HzTNIFF4UTdc5Jc BQ72p5YJKmE1T0lOjBVdFB4sMHx+85X+gB2rWbDOzDoZzT2Is+qzYbYKBU8Q331S h5envjb3ZixVR/ONz772Ahtf04+VoSLohp8f0EbqRbTscrWfhhlD34nidpfFNJC4 w3I/cd654dlkrUhoTafRZcsMO/vaXIX6wRSMs0vm/XlJsJ1sdyaNUz7jdq6gtyOZ HEYfzzXMMfE/rp/mcLqM3qIesHfNdfTVGbCOF2bCx1w6tg0XTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY4oEJpS/9YIIR3xdu4wsXIrQLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMmUzODNlM2UtMDM0NC0z YzYxLTg3MTgtMzNiOWZhMWRlZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF26/Rju672M5bgBrN2O9x0PJJouVWVBNjGqU5JG0+UNKZfRePlGlOC UW6wX6f8ecVwBf4g3Ho2R4SoyuG7jcPKvWLgjHCqiTLRlu/TmpDhEja4gG1+9bEx h07fv3LTSIlKz/mw+HsTpB7Fh41gGJMU7EcfTobmdL6WGTT3z2JTpAyZHYPxqq35 6oG/WiQPXNQAuDPTkyOoC4wINmUrMcSQVUBdY16mP7ABuxJ8l47h4Swyu86BibmO DWzhlLHP1Cuwn8S6QqocQ+Fp0xJUc5mtZLPpCbk7l9UinmZq7o0gJSyqSJAWbLN+ lqDT8aln4hVTAJ+Mq8jZzkgB1rQc7i8= -----END CERTIFICATE-----Generated at Mon Sep 15 14:20:36 2025 by rpki-client