$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa File: df6816a7-143c-392b-bc92-0828868a384a.roa (raw, json) Hash identifier: +D0fP9JLjRDEbzHAQnl02Vt+j07HUjTWrZfSq/0lXYA= Subject key identifier: 0C:BD:9D:EE:B2:3A:D9:DB:75:60:FC:F6:70:88:CD:0E:94:8A:58:30 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584CD4076B0A061CFAF516A7DFC0 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 11290 IP address blocks: 2001:18c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6b:0a:06:1c:fa:f5:16:a7:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=bf70b6f1-446c-4b8f-aa6f-36ac12280cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:ea:44:ec:72:99:20:a4:a7:2b:9e:a0:d5: eb:84:02:2c:34:fe:06:d7:be:24:8d:d9:99:6c:b4: 46:e0:1b:f4:74:21:de:26:23:22:78:89:a3:c0:f2: 95:78:00:37:6a:2f:38:94:78:46:db:ee:17:ef:c4: d6:35:95:f9:2c:73:93:a0:b5:29:3b:51:b8:65:64: 2e:dc:82:ef:99:fd:a8:f3:63:ed:79:2c:a0:eb:34: 0f:86:95:3a:44:15:1c:32:74:f6:d0:ba:5f:6b:74: 17:40:ff:45:17:56:aa:e0:d3:0a:3e:ca:36:f3:de: be:a6:d8:76:74:a2:f3:95:73:3e:f5:aa:d1:1e:ee: cf:b8:d9:02:c1:5b:bb:a9:a4:5a:1a:8c:74:e6:29: 35:32:32:20:ab:79:98:78:e6:a2:6f:f5:43:3a:1b: eb:bb:8d:ce:67:b0:4a:f0:e4:79:40:4f:38:4c:ec: 6d:d9:0f:28:82:e1:34:d6:c6:4d:24:36:2a:7e:df: b8:95:06:15:0c:f0:bd:aa:86:31:e5:05:a0:ea:f0: 64:7a:cd:8c:99:ba:9e:b7:48:f6:4e:94:7b:87:0f: 10:21:4f:3e:fc:a7:e4:05:c8:a1:15:df:0f:82:84: 92:e8:e3:d5:c7:ae:7d:09:2f:26:0b:5a:c5:02:7b: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BD:9D:EE:B2:3A:D9:DB:75:60:FC:F6:70:88:CD:0E:94:8A:58:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv6: 2001:18c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d2:b1:75:2b:e1:86:51:70:48:ee:df:73:47:23:ad:89:20: d0:55:7b:5b:7d:4e:10:d4:c5:85:2c:0f:97:e0:f7:aa:91:24: 67:db:24:33:de:19:cd:6d:1b:c7:f2:db:d1:1d:7c:c8:e2:0d: 8f:73:d8:4f:d0:63:ec:39:28:41:29:32:76:3b:3d:87:3e:75: 64:15:6e:b8:b4:97:f3:21:08:91:fa:c1:07:7d:a9:96:d6:4e: a7:54:23:8b:3f:c5:bb:93:1c:9d:09:b5:61:4e:42:35:c0:aa: 11:4e:19:11:9d:13:42:46:12:cb:83:ea:6e:c4:71:3d:ff:af: f3:72:cb:64:79:2a:42:df:0c:8b:84:74:e5:fb:9b:9e:65:d5: 33:60:65:f9:96:7f:54:7d:6a:85:52:48:c4:4a:16:59:4e:26: c2:30:90:e8:67:b4:27:ee:d2:00:c9:d3:8b:87:d0:9d:db:a5: d8:e7:31:16:00:97:3e:87:b2:4e:da:28:c9:ef:0c:17:1b:30: 0f:88:71:c3:c3:3a:6f:8a:1f:90:95:90:9b:c7:09:76:01:f9: 73:ae:90:3d:b1:cd:c8:66:b6:20:3f:17:92:33:79:e5:22:61: bd:cb:ea:c5:ef:49:9a:05:79:fd:ca:45:9d:56:86:ae:32:21: 4b:be:1e:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB2sKBhz69Ran38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk YmY3MGI2ZjEtNDQ2Yy00YjhmLWFhNmYtMzZhYzEyMjgwY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LjqROxymSCkpyueoNXrhAIsNP4G174kjdmZ bLRG4Bv0dCHeJiMieImjwPKVeAA3ai84lHhG2+4X78TWNZX5LHOToLUpO1G4ZWQu 3ILvmf2o82PteSyg6zQPhpU6RBUcMnT20Lpfa3QXQP9FF1aq4NMKPso2896+pth2 dKLzlXM+9arRHu7PuNkCwVu7qaRaGox05ik1MjIgq3mYeOaib/VDOhvru43OZ7BK 8OR5QE84TOxt2Q8oguE01sZNJDYqft+4lQYVDPC9qoYx5QWg6vBkes2Mmbqet0j2 TpR7hw8QIU8+/KfkBcihFd8PgoSS6OPVx659CS8mC1rFAnudoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAy9ne6yOtnbdWD89nCIzQ6UilgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGY2ODE2YTctMTQzYy0z OTJiLWJjOTItMDgyODg2OGEzODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAu0rF1K+GGUXBI7t9zRyOtiSDQVXtbfU4Q1MWFLA+X4PeqkSRn2yQz 3hnNbRvH8tvRHXzI4g2Pc9hP0GPsOShBKTJ2Oz2HPnVkFW64tJfzIQiR+sEHfamW 1k6nVCOLP8W7kxydCbVhTkI1wKoRThkRnRNCRhLLg+puxHE9/6/zcstkeSpC3wyL hHTl+5ueZdUzYGX5ln9UfWqFUkjEShZZTibCMJDoZ7Qn7tIAydOLh9Cd26XY5zEW AJc+h7JO2ijJ7wwXGzAPiHHDwzpvih+QlZCbxwl2AflzrpA9sc3IZrYgPxeSM3nl ImG9y+rF70maBXn9ykWdVoauMiFLvh6h -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:09 2026 by rpki-client