$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa File: 18e83aa2-2384-3c89-b95f-7230e577205d.roa (raw, json) Hash identifier: yL7hEa9bm/JIVgh96cwvo4onOTMYT4A00pxy/VqsZSg= Subject key identifier: 49:D6:9F:B2:1F:B4:D9:D0:08:0C:E5:45:5A:76:67:CD:9A:F0:50:CE Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584B13D6C1500E528B47538FC700 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 11290 IP address blocks: 170.249.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c1:50:0e:52:8b:47:53:8f:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c2cabda2-7bfd-4373-98fd-303db83f9d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:f4:e6:7b:7e:b9:39:93:1e:3d:ac:5d:5b: 24:0a:c6:ea:cd:11:5f:98:cc:3a:a6:ce:cd:5d:67: 86:d2:f7:91:45:32:cd:a8:a0:3d:69:57:97:3b:62: 25:3f:f8:6f:c6:85:bc:13:c4:84:16:19:cf:36:d3: a9:b0:87:8b:54:08:71:94:b9:ba:cc:4b:a7:37:ee: 53:af:9b:90:89:08:98:9b:ea:36:b0:55:ea:7b:38: d2:82:3c:d8:ac:03:06:1f:d5:75:12:66:ac:47:0d: 7d:4c:9f:58:21:b5:06:a1:89:ef:26:55:96:c8:ec: ab:e0:36:e2:8b:b6:6d:b5:3c:0f:1b:85:49:a8:4a: 60:1a:9f:0c:e2:50:f3:f3:16:04:d6:54:7e:c6:f2: 58:8d:98:33:5c:8c:64:e3:2a:33:da:cf:ec:6b:b2: f2:81:f2:c9:e5:d0:cc:60:64:ad:5d:01:fc:dc:3f: ac:97:49:d0:dc:3c:09:ea:2b:49:4b:4f:01:4a:df: 4d:b0:4a:c1:da:2c:53:11:a8:4f:e4:d5:41:77:63: b5:46:ff:08:f8:40:e1:1b:eb:bc:ed:ae:86:b6:89: 0e:39:7c:27:00:a7:10:14:25:4c:45:04:ff:83:7e: 93:8c:53:93:73:e6:b1:b3:bf:8e:27:20:25:df:03: 74:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D6:9F:B2:1F:B4:D9:D0:08:0C:E5:45:5A:76:67:CD:9A:F0:50:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 170.249.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d2:b4:3a:2f:00:04:92:66:44:18:f3:95:e4:02:7f:62:7f: 6b:ec:2d:74:25:a4:49:56:72:88:e7:5e:1e:e7:2e:3d:87:b5: 3a:c9:5a:22:a5:96:85:9f:14:d2:26:64:ae:95:e4:57:c7:03: 48:76:bd:64:5c:ee:cd:84:0b:ec:52:46:a2:f8:f9:ce:62:60: 0f:c3:6b:e1:6c:a6:85:f8:84:33:42:0f:cf:f2:88:52:1a:5b: 34:af:1e:ba:3f:b3:01:2a:99:4d:79:21:d4:64:7d:c2:2b:4e: 9f:4b:9d:f7:44:64:ed:d7:7c:23:79:47:c5:29:3c:b4:63:30: 32:17:f7:05:a6:12:5a:b0:fd:dc:84:20:87:45:89:44:24:5c: 37:43:05:9e:f8:8d:4c:a2:ce:ad:c3:bb:42:f6:01:f0:d4:2a: 72:d6:a3:5c:8b:4f:fe:28:71:dd:3e:fd:06:c6:75:04:08:60: 5d:c2:ba:b9:c2:fa:9c:67:97:b4:35:13:c3:ff:38:8e:ad:32: ff:61:fa:6b:6b:8d:14:d6:67:eb:3b:53:90:f4:2e:3e:73:f3: 67:77:99:d8:c7:87:78:6f:58:55:9d:62:b5:20:61:c3:22:29: c8:72:33:41:2c:72:ce:2f:3e:52:0d:94:f7:1b:24:82:97:11: b6:7b:b1:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sFQDlKLR1OPxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzJjYWJkYTItN2JmZC00MzczLTk4ZmQtMzAzZGI4M2Y5ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDj05nt+uTmTHj2sXVskCsbqzRFfmMw6ps7N XWeG0veRRTLNqKA9aVeXO2IlP/hvxoW8E8SEFhnPNtOpsIeLVAhxlLm6zEunN+5T r5uQiQiYm+o2sFXqezjSgjzYrAMGH9V1EmasRw19TJ9YIbUGoYnvJlWWyOyr4Dbi i7ZttTwPG4VJqEpgGp8M4lDz8xYE1lR+xvJYjZgzXIxk4yoz2s/sa7LygfLJ5dDM YGStXQH83D+sl0nQ3DwJ6itJS08BSt9NsErB2ixTEahP5NVBd2O1Rv8I+EDhG+u8 7a6GtokOOXwnAKcQFCVMRQT/g36TjFOTc+axs7+OJyAl3wN0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnWn7IftNnQCAzlRVp2Z82a8FDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMThlODNhYTItMjM4NC0z Yzg5LWI5NWYtNzIzMGU1NzcyMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqvkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzStDovAASSZkQY85XkAn9if2vsLXQlpElWcojnXh7nLj2HtTrJWiKl loWfFNImZK6V5FfHA0h2vWRc7s2EC+xSRqL4+c5iYA/Da+FspoX4hDNCD8/yiFIa WzSvHro/swEqmU15IdRkfcIrTp9LnfdEZO3XfCN5R8UpPLRjMDIX9wWmElqw/dyE IIdFiUQkXDdDBZ74jUyizq3Du0L2AfDUKnLWo1yLT/4ocd0+/QbGdQQIYF3CurnC +pxnl7Q1E8P/OI6tMv9h+mtrjRTWZ+s7U5D0Lj5z82d3mdjHh3hvWFWdYrUgYcMi KchyM0Escs4vPlINlPcbJIKXEbZ7sRg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:39:11 2025 by rpki-client