$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa File: 3eff0cfa-371f-32f7-9a45-34628c453640.roa (raw, json) Hash identifier: kqtT/FYNG5K0122maY2TlM7nasl0vkF9ieXC+uDinQM= Subject key identifier: 98:59:B6:57:07:03:AD:01:D2:7E:10:7D:30:59:14:B6:33:BA:9F:31 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C22486EA9F9933E85B90 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 108.171.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c2:24:86:ea:9f:99:33:e8:5b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=4a5b9946-f8c5-434c-9f3e-0e6bc760b0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:01:ca:f2:4d:2a:f7:52:48:61:71:df:09: f3:0c:69:21:dc:79:89:2b:76:a5:c7:f2:13:7a:47: 96:bc:ab:de:88:28:1b:8c:ce:10:26:01:e1:a5:26: be:1e:45:3b:99:37:1e:54:cb:08:7d:06:01:3a:e9: 0d:a4:ec:36:9c:ef:81:6a:5a:89:12:eb:f0:1d:74: 60:cb:d3:f2:0d:2a:34:b7:18:23:1c:3e:75:cf:53: bb:e3:ac:f3:8f:be:0e:bd:95:75:0a:af:28:1b:c3: 5f:4c:7a:cf:24:4c:22:10:bb:09:5a:4d:d2:2a:f9: b1:f3:e5:41:23:bf:f9:57:00:25:56:d9:b6:fb:31: 5c:ec:25:59:62:42:c4:9c:4e:3b:44:8f:48:36:8a: 0a:64:64:e1:39:ca:16:4f:8b:27:b4:7d:51:37:1f: 14:a5:3f:2b:39:30:7f:43:6f:6e:2e:44:0a:40:c6: 8e:57:9e:fd:3e:39:e9:dc:6b:a3:1f:4a:b2:11:bb: 5b:76:da:04:4a:4b:03:28:8a:a6:86:b1:33:8c:a7: ee:ae:86:92:5d:30:ce:77:1d:de:a3:9d:d9:22:73: ff:db:04:01:66:63:62:e7:46:3c:23:90:8c:c0:68: 6f:c9:be:4c:16:10:82:de:ae:48:de:e3:07:e6:74: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:59:B6:57:07:03:AD:01:D2:7E:10:7D:30:59:14:B6:33:BA:9F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 108.171.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:74:49:0c:c0:5e:ac:14:a1:11:b0:d9:66:9b:03:03:97:14: f3:c4:cf:23:c5:e2:01:e4:c4:10:f4:00:5a:38:14:6e:a6:4d: 76:01:80:f4:be:3b:14:00:7f:1b:2f:65:21:6d:f4:e7:e8:09: 48:00:64:e2:26:78:55:00:c4:e3:d4:e8:bb:5e:ea:ae:ce:79: ef:bb:84:73:e7:07:d6:e3:10:3e:97:9e:e7:6e:e2:f0:ca:0c: b6:16:c2:7d:ac:4f:23:22:a5:77:50:af:20:16:c3:56:0f:26: 6f:dc:71:30:1a:c7:5f:0e:51:2c:e8:58:bb:92:41:21:e4:d4: fe:22:3e:39:39:fd:25:99:d8:9a:fe:1a:bf:3f:f4:76:f9:b0: e2:b3:83:32:9b:e9:87:01:8e:a9:d2:2b:bc:e3:8e:c5:7d:f7: 6e:ea:e7:10:df:5f:ba:af:44:82:cf:cc:ed:bb:ef:b8:0b:90: 58:26:dc:d6:31:87:85:0e:88:ae:6b:18:97:7d:73:19:ce:15: ed:1e:fc:11:12:96:fc:3b:09:39:4a:1f:70:eb:01:fa:67:92: fb:2d:d0:f3:b3:5f:34:b0:cc:4a:1b:6d:ea:ba:05:b6:76:a0: 11:33:6c:98:4a:3a:22:d9:bb:2b:c3:e0:4a:6f:2e:a9:2b:8d: a5:06:2a:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sIkhuqfmTPoW5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NGE1Yjk5NDYtZjhjNS00MzRjLTlmM2UtMGU2YmM3NjBiMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMMByvJNKvdSSGFx3wnzDGkh3HmJK3alx/IT ekeWvKveiCgbjM4QJgHhpSa+HkU7mTceVMsIfQYBOukNpOw2nO+BalqJEuvwHXRg y9PyDSo0txgjHD51z1O746zzj74OvZV1Cq8oG8NfTHrPJEwiELsJWk3SKvmx8+VB I7/5VwAlVtm2+zFc7CVZYkLEnE47RI9INooKZGThOcoWT4sntH1RNx8UpT8rOTB/ Q29uLkQKQMaOV579Pjnp3GujH0qyEbtbdtoESksDKIqmhrEzjKfuroaSXTDOdx3e o53ZInP/2wQBZmNi50Y8I5CMwGhvyb5MFhCC3q5I3uMH5nSojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhZtlcHA60B0n4QfTBZFLYzup8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvM2VmZjBjZmEtMzcxZi0z MmY3LTlhNDUtMzQ2MjhjNDUzNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx0SQzAXqwUoRGw2WabAwOXFPPEzyPF4gHkxBD0AFo4FG6mTXYBgPS+ OxQAfxsvZSFt9OfoCUgAZOImeFUAxOPU6Lte6q7Oee+7hHPnB9bjED6Xnudu4vDK DLYWwn2sTyMipXdQryAWw1YPJm/ccTAax18OUSzoWLuSQSHk1P4iPjk5/SWZ2Jr+ Gr8/9Hb5sOKzgzKb6YcBjqnSK7zjjsV9927q5xDfX7qvRILPzO2777gLkFgm3NYx h4UOiK5rGJd9cxnOFe0e/BESlvw7CTlKH3DrAfpnkvst0POzXzSwzEobbeq6BbZ2 oBEzbJhKOiLZuyvD4EpvLqkrjaUGKqA= -----END CERTIFICATE-----Generated at Mon Sep 15 14:18:31 2025 by rpki-client