$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa File: df6816a7-143c-392b-bc92-0828868a384a.roa (raw, json) Hash identifier: N0n/2nD4dI8i5rKisBU1AJkDDx2d0qep0C97Y8aVpLk= Subject key identifier: 9C:C5:AC:4D:51:85:44:08:A1:EE:36:3F:6C:6E:7B:66:F5:68:13:2E Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C07DB110D542898CD000 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 2001:18c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c0:7d:b1:10:d5:42:89:8c:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=e45876bf-77b5-40a6-b536-31e041422cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:e8:90:c5:d7:5b:24:c4:b3:85:e0:00:86: 9f:7e:6d:b2:7c:9d:83:af:de:96:a2:9a:19:5a:26: 0b:75:73:ca:66:36:44:eb:b6:46:16:0a:79:b6:a3: ed:59:80:c4:3e:1d:fc:6c:9b:56:5c:3b:0a:48:39: a2:18:c9:44:f6:db:80:12:98:10:99:e8:0a:64:f8: 52:10:3b:07:90:68:a3:8f:f3:8d:7f:71:30:cc:9b: 49:48:7f:d4:89:e7:33:1d:73:80:b5:96:a1:53:6e: 64:87:1d:c8:d4:c6:8b:d6:02:40:05:c7:9f:7b:6a: 09:34:2d:c5:3c:02:43:f4:6e:21:72:6f:04:ae:44: a7:16:5c:f4:42:dd:bf:63:9c:65:6b:c5:3f:44:d0: 7f:54:6b:ce:92:e0:41:c1:6e:48:91:78:b5:e0:e9: 6a:05:25:7d:25:ed:08:be:ec:bc:b5:0d:f8:af:51: a9:70:8e:61:9e:78:93:fb:63:02:20:01:7f:3a:6c: 45:ee:1f:d9:9d:7c:40:a6:1f:cc:9e:6a:24:3b:df: d6:a2:e7:38:3f:b6:23:73:d3:13:b4:5b:40:47:c5: d0:5b:00:4a:c7:aa:d0:3d:76:25:60:91:0d:5a:25: fa:8f:10:d5:46:6a:83:e2:d1:b5:46:3c:5f:1c:58: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:AC:4D:51:85:44:08:A1:EE:36:3F:6C:6E:7B:66:F5:68:13:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv6: 2001:18c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:72:e4:fc:2c:e0:ce:fd:55:a5:77:f1:e5:f7:fd:86:03:f4: fc:6f:01:c2:a0:25:b5:07:2b:b0:89:bf:82:f5:2d:c8:0c:21: e9:ca:89:0e:8e:0f:57:d3:8f:b8:48:68:fe:7e:d7:8c:1a:7c: 8f:1a:97:7b:ef:2a:66:32:2e:79:d5:d9:fe:af:12:f2:c0:63: d4:2f:b4:df:bf:02:3d:0f:7d:fb:e2:1c:e0:be:3e:ef:65:4a: 5f:7a:32:ef:98:85:72:e7:c6:aa:bf:28:73:88:73:d4:51:21: 9c:21:c1:d8:2b:be:da:98:9a:f9:47:32:27:08:ed:ca:80:3e: 40:81:d2:9d:55:51:c5:d2:78:53:b4:34:bf:33:86:84:98:63: b4:08:9d:f0:3f:89:c5:b7:ea:20:da:c2:91:1a:d9:93:96:5e: 7e:08:bb:95:78:87:4c:1b:62:7f:41:2a:ec:4c:88:d2:c1:a2: 4e:af:32:3d:c6:04:09:d3:ca:02:eb:3c:25:dc:73:a9:21:1b: 20:0e:dc:08:7b:b0:5e:45:d2:1a:51:a2:8b:82:05:f2:ee:b8: 82:55:da:95:26:01:50:16:56:fa:bb:2a:aa:eb:27:64:cb:41: 5c:04:65:6e:34:77:5a:a9:e5:c0:96:a7:dd:07:62:40:87:f6: f2:27:e5:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1sB9sRDVQomM0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTQ1ODc2YmYtNzdiNS00MGE2LWI1MzYtMzFlMDQxNDIyY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9zokMXXWyTEs4XgAIaffm2yfJ2Dr96WopoZ WiYLdXPKZjZE67ZGFgp5tqPtWYDEPh38bJtWXDsKSDmiGMlE9tuAEpgQmegKZPhS EDsHkGijj/ONf3EwzJtJSH/UieczHXOAtZahU25khx3I1MaL1gJABcefe2oJNC3F PAJD9G4hcm8ErkSnFlz0Qt2/Y5xla8U/RNB/VGvOkuBBwW5IkXi14OlqBSV9Je0I vuy8tQ34r1GpcI5hnniT+2MCIAF/OmxF7h/ZnXxAph/MnmokO9/Wouc4P7Yjc9MT tFtAR8XQWwBKx6rQPXYlYJENWiX6jxDVRmqD4tG1RjxfHFgyzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJzFrE1RhUQIoe42P2xue2b1aBMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGY2ODE2YTctMTQzYy0z OTJiLWJjOTItMDgyODg2OGEzODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwcuT8LODO/VWld/Hl9/2GA/T8bwHCoCW1Byuwib+C9S3IDCHpyokO jg9X04+4SGj+fteMGnyPGpd77ypmMi551dn+rxLywGPUL7TfvwI9D3374hzgvj7v ZUpfejLvmIVy58aqvyhziHPUUSGcIcHYK77amJr5RzInCO3KgD5AgdKdVVHF0nhT tDS/M4aEmGO0CJ3wP4nFt+og2sKRGtmTll5+CLuVeIdMG2J/QSrsTIjSwaJOrzI9 xgQJ08oC6zwl3HOpIRsgDtwIe7BeRdIaUaKLggXy7riCVdqVJgFQFlb6uyqq6ydk y0FcBGVuNHdaqeXAlqfdB2JAh/byJ+Ug -----END CERTIFICATE-----Generated at Mon Nov 3 14:44:55 2025 by rpki-client