$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa File: 65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa (raw, json) Hash identifier: OfSV5kaAagkbij3T8R1eQSeC2SukfpC74Lb1il7pSDk= Subject key identifier: BC:FB:4C:22:1C:50:F4:A0:80:37:67:04:D7:1A:31:8D:FF:8F:52:62 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B110C057BF3D36987CDF5C100 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 209.169.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:05:7b:f3:d3:69:87:cd:f5:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=40fffe9e-2d68-498d-96ea-736fbbe60e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:d7:f3:84:78:d1:bb:30:f7:b3:cf:2c:65: d0:22:92:a2:88:54:4d:20:02:4d:27:79:6b:90:5c: 5b:55:f0:57:6d:0c:62:9a:0e:1b:8b:ce:55:ed:6c: a3:5b:95:2b:68:85:54:8a:28:a9:59:45:89:d2:0c: e0:4c:d4:e6:9b:40:91:f6:b1:72:b7:8b:db:f6:f4: 03:31:f6:82:ce:12:e1:32:4f:fe:9f:fc:0a:40:50: d5:09:68:d7:c0:54:71:21:ec:af:05:66:b0:4c:6c: 46:fd:d1:74:1c:23:c6:02:49:17:b3:fe:94:3a:6e: d8:83:00:69:0c:6f:89:b8:b0:46:68:45:fb:d0:35: 16:ad:45:d8:84:42:13:5b:02:55:79:33:5a:a5:34: 54:88:61:d1:40:75:7e:09:e5:5b:73:08:08:c0:4a: 24:b3:1a:e6:56:0f:34:66:e6:ed:ec:9f:8f:d9:99: 4d:f3:f5:9e:76:cb:ae:b2:d8:5f:8a:53:d1:74:ba: d2:65:80:85:1d:ce:85:04:ec:26:f1:24:7b:31:34: 55:2f:75:c7:4d:8b:f4:16:01:bc:a7:c5:15:41:70: 06:f5:f1:13:e7:17:1b:ac:ae:ad:0f:f4:7c:f4:ac: 98:44:31:d4:c6:60:4c:8b:00:91:d7:99:79:72:f3: eb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FB:4C:22:1C:50:F4:A0:80:37:67:04:D7:1A:31:8D:FF:8F:52:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.169.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:62:b9:ac:a2:04:e7:2f:20:a6:60:74:21:1e:a8:e2:7b:9f: 3b:cb:a7:b3:24:87:ef:d3:16:4a:a5:49:5c:51:58:21:1b:6a: 5d:91:23:16:89:c0:1d:24:10:e9:ff:6b:f8:05:aa:8a:d2:9d: 19:dc:4a:50:db:ca:b2:38:69:0a:05:d9:b5:44:ba:16:f4:65: d8:bc:1f:49:d4:84:70:18:08:09:f1:d1:e7:de:04:fc:e5:0b: ca:04:97:84:61:ab:31:1e:53:67:ce:fd:1b:fd:91:7c:98:fb: ff:4d:f2:b8:fe:e3:4e:d2:42:b1:74:90:82:b7:e0:fd:91:7b: 6d:36:e8:77:b7:f4:33:11:a7:3e:a7:6b:80:a7:4b:f7:9c:a9: f4:40:7f:1a:ca:a6:5a:0c:bd:7e:bb:83:2d:67:32:53:ab:a3: 87:b6:4c:48:f3:43:33:82:57:4d:36:69:2a:6a:09:c3:a3:08: a9:ef:a8:c8:b2:44:78:a3:36:a1:5a:f2:af:62:20:a1:c4:80: 5c:89:5e:01:8d:74:dd:7c:33:6e:2b:5c:e7:f0:29:2a:20:e7: a5:ec:51:92:1a:3b:ea:ee:54:8a:97:fd:03:4f:18:20:a7:76: fd:6c:ba:47:52:0a:d6:3f:19:75:02:b3:44:d6:42:10:ee:c1: bd:d6:82:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAV789Nph831wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDBmZmZlOWUtMmQ2OC00OThkLTk2ZWEtNzM2ZmJiZTYwZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyjX84R40bsw97PPLGXQIpKiiFRNIAJNJ3lr kFxbVfBXbQximg4bi85V7WyjW5UraIVUiiipWUWJ0gzgTNTmm0CR9rFyt4vb9vQD MfaCzhLhMk/+n/wKQFDVCWjXwFRxIeyvBWawTGxG/dF0HCPGAkkXs/6UOm7YgwBp DG+JuLBGaEX70DUWrUXYhEITWwJVeTNapTRUiGHRQHV+CeVbcwgIwEoksxrmVg80 Zubt7J+P2ZlN8/WedsuusthfilPRdLrSZYCFHc6FBOwm8SR7MTRVL3XHTYv0FgG8 p8UVQXAG9fET5xcbrK6tD/R89KyYRDHUxmBMiwCR15l5cvPr6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz7TCIcUPSggDdnBNcaMY3/j1JiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjViZjhhMjgtZDNhNy0z ZTM1LWExNjAtMjdiZmFhY2RlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0amAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5iuayiBOcvIKZgdCEeqOJ7nzvLp7Mkh+/TFkqlSVxRWCEbal2RIxaJ wB0kEOn/a/gFqorSnRncSlDbyrI4aQoF2bVEuhb0Zdi8H0nUhHAYCAnx0efeBPzl C8oEl4RhqzEeU2fO/Rv9kXyY+/9N8rj+407SQrF0kIK34P2Re2026He39DMRpz6n a4CnS/ecqfRAfxrKploMvX67gy1nMlOro4e2TEjzQzOCV002aSpqCcOjCKnvqMiy RHijNqFa8q9iIKHEgFyJXgGNdN18M24rXOfwKSog56XsUZIaO+ruVIqX/QNPGCCn dv1sukdSCtY/GXUCs0TWQhDuwb3Wguk= -----END CERTIFICATE-----Generated at Mon Sep 15 14:18:54 2025 by rpki-client