$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa File: 18e83aa2-2384-3c89-b95f-7230e577205d.roa (raw, json) Hash identifier: zO8GOGQHuJpYGUZRKuQCxMwH0DL8dMcE+o6tf9v9Bxc= Subject key identifier: 3E:E3:B3:E7:81:5D:57:77:6C:93:B3:1D:EF:83:C4:79:CD:70:49:B8 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2B6DF00085C0EF57D040 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 170.249.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2b:6d:f0:00:85:c0:ef:57:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=fd48afcf-7836-40ba-a2b9-35cd81858971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:37:cf:f0:18:e0:37:a7:01:be:f2:b0:c4: 81:9a:9a:49:58:22:04:9f:60:b4:2c:f8:f8:76:97: 2a:b7:27:aa:24:1e:7e:1d:15:69:cb:95:9f:8d:38: d2:20:c3:b4:41:55:cf:4e:25:f3:0f:1d:3f:d0:9b: c9:68:26:1a:da:4a:8f:11:fb:75:89:68:ec:9f:87: e1:a4:39:70:03:04:b1:11:94:cc:15:15:df:d0:8b: 36:f8:13:5e:32:3f:32:9b:85:f3:e1:99:53:ba:13: 05:23:e6:c7:28:66:b4:9a:e9:7f:0a:85:71:b1:a5: f1:af:26:08:bb:df:e9:e5:14:2e:83:2f:d3:fb:a8: 7d:30:04:8e:77:51:43:e0:29:8c:29:14:74:3f:f8: aa:87:d3:ff:ea:0e:cc:5b:4c:29:a2:c9:c4:2f:86: 04:9c:06:8d:eb:57:24:11:29:7d:bf:3a:ca:f9:50: a3:64:b6:10:e4:7b:c3:14:f8:c5:30:8d:ec:1b:09: 19:9c:82:41:73:03:7f:5a:b5:25:ef:77:13:9e:c4: 36:8d:51:e7:25:bf:e6:b5:5e:9c:7f:73:79:7b:ae: 17:cb:56:fb:e7:18:8c:08:c5:f0:d6:a9:8a:d0:bd: 3c:48:84:41:fa:d5:7c:b2:10:76:79:cc:50:69:bd: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E3:B3:E7:81:5D:57:77:6C:93:B3:1D:EF:83:C4:79:CD:70:49:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 170.249.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:da:e6:f5:a9:c2:81:2b:c4:6d:be:7e:3b:6c:57:de:da:ec: 9a:d1:bc:37:df:9d:33:a4:73:e4:25:c8:2c:9b:45:b5:cd:7a: 97:6d:90:dd:89:7f:a4:4c:a6:e0:ef:9a:9b:b2:30:2b:b6:31: a9:77:b3:9e:6b:a1:89:98:0c:00:f6:db:15:6d:0e:db:3a:18: ba:47:c5:6c:ee:58:0c:e6:10:af:f1:d4:43:f8:88:71:45:e6: 09:6e:6b:81:cd:d3:d6:5f:37:0f:77:ae:6c:db:89:99:4d:f8: 80:de:d5:6f:8e:c7:ab:ee:fc:07:1c:e1:2d:02:1c:c4:2f:fc: 2c:52:ec:b9:96:f3:7b:56:12:47:91:c1:3b:cf:7f:19:46:17: 0e:c9:a4:43:7b:f7:d8:59:40:8b:74:f0:30:14:99:c2:e1:b7: 62:da:cb:a2:e1:4f:41:ee:3e:b9:eb:e2:4c:98:9c:3c:f2:48: 66:c3:a5:86:60:8f:fb:b7:df:d3:4a:cd:82:b7:60:08:c3:a6: fb:63:dd:f4:da:68:bb:4f:ed:ab:88:8b:0e:55:e8:83:69:7d: 57:a6:0a:e7:66:c3:c0:3f:5d:bf:57:ef:1b:da:d9:b5:15:7b: bd:cb:e9:ea:73:a7:a2:5c:cd:2c:f0:9a:44:06:e9:b3:ba:d9: e2:54:24:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TStt8ACFwO9X0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ZmQ0OGFmY2YtNzgzNi00MGJhLWEyYjktMzVjZDgxODU4OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgk3z/AY4DenAb7ysMSBmppJWCIEn2C0LPj4 dpcqtyeqJB5+HRVpy5WfjTjSIMO0QVXPTiXzDx0/0JvJaCYa2kqPEft1iWjsn4fh pDlwAwSxEZTMFRXf0Is2+BNeMj8ym4Xz4ZlTuhMFI+bHKGa0mul/CoVxsaXxryYI u9/p5RQugy/T+6h9MASOd1FD4CmMKRR0P/iqh9P/6g7MW0wposnEL4YEnAaN61ck ESl9vzrK+VCjZLYQ5HvDFPjFMI3sGwkZnIJBcwN/WrUl73cTnsQ2jVHnJb/mtV6c f3N5e64Xy1b75xiMCMXw1qmK0L08SIRB+tV8shB2ecxQab2chwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7js+eBXVd3bJOzHe+DxHnNcEm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMThlODNhYTItMjM4NC0z Yzg5LWI5NWYtNzIzMGU1NzcyMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqvkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLa5vWpwoErxG2+fjtsV97a7JrRvDffnTOkc+QlyCybRbXNepdtkN2J f6RMpuDvmpuyMCu2Mal3s55roYmYDAD22xVtDts6GLpHxWzuWAzmEK/x1EP4iHFF 5glua4HN09ZfNw93rmzbiZlN+IDe1W+Ox6vu/Acc4S0CHMQv/CxS7LmW83tWEkeR wTvPfxlGFw7JpEN799hZQIt08DAUmcLht2Lay6LhT0HuPrnr4kyYnDzySGbDpYZg j/u339NKzYK3YAjDpvtj3fTaaLtP7auIiw5V6INpfVemCudmw8A/Xb9X7xva2bUV e73L6epzp6JczSzwmkQG6bO62eJUJNc= -----END CERTIFICATE-----Generated at Thu Sep 24 04:54:01 2026 by rpki-client