$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa File: df6816a7-143c-392b-bc92-0828868a384a.roa (raw, json) Hash identifier: hOIe9WCpyChs0gWY3B9x/f7v4Br4rqBfEP7QleS3DP4= Subject key identifier: 8B:AD:8D:87:92:AA:1F:EA:5C:5C:36:B7:ED:C8:F1:48:A4:DD:E7:6F Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584F374D2AE33234C67D5FE1BE00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 11290 IP address blocks: 2001:18c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2a:e3:32:34:c6:7d:5f:e1:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=221e9173-908e-42ed-a2be-2108f90a045c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:ff:7b:a9:c8:c9:c2:d2:89:d9:93:da:27: 5f:07:2f:58:e6:49:33:28:14:a8:56:a4:30:67:3c: 08:3f:57:7f:f7:4c:dd:0a:f5:b4:e0:e1:c9:30:5f: ab:97:6c:1f:e8:d1:65:c4:03:50:d1:38:ff:14:96: 8d:a3:d0:b2:71:94:b6:fd:4c:1c:95:d4:cc:cc:af: b0:bb:ed:e1:df:47:32:03:1a:19:18:e8:f2:62:f5: ee:3c:47:1f:c4:02:96:62:bf:88:78:c5:72:a1:d9: 3c:a7:7f:a2:9b:eb:fd:a4:0f:9f:ce:f9:cf:58:23: 8a:70:c4:77:44:fc:34:ac:bd:37:5f:7b:3c:a9:7b: 32:85:bf:41:a1:b0:9e:7f:67:1d:7c:51:eb:a5:f5: 41:e9:20:31:81:54:d0:31:3d:7a:15:e6:95:bb:e9: 66:f9:6e:53:a9:b2:6e:65:89:de:c5:67:a9:3a:c6: d8:b6:d7:da:39:e3:f0:7e:2c:6f:6b:c2:4f:59:e2: 9a:47:76:4a:33:a6:86:d6:0e:84:c0:b9:5f:3c:c0: 26:8b:74:76:3d:10:bc:15:49:fd:4c:7d:9b:5b:7b: f6:97:3f:65:39:67:5e:a8:b1:26:5b:6a:d5:82:17: 44:5d:af:96:00:22:e6:c7:d0:a3:a6:b7:1f:6a:66: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AD:8D:87:92:AA:1F:EA:5C:5C:36:B7:ED:C8:F1:48:A4:DD:E7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv6: 2001:18c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c2:0d:c1:e4:f1:4c:d1:65:49:72:77:34:ce:c1:fc:5d:8c: f8:9f:57:47:35:02:7b:64:d2:36:4b:18:99:45:13:1f:d8:c0: 0e:24:0c:24:ed:01:74:f8:17:09:e6:7e:67:b6:31:6a:da:f3: e1:57:ab:85:fe:a9:06:ad:08:3f:65:ad:10:16:71:08:46:11: 2d:58:3c:86:11:02:c5:81:3f:52:ca:ed:4f:69:d9:fa:c3:72: fc:b2:ae:a1:dd:c5:42:ee:76:0e:47:75:3d:f6:64:bd:b8:4f: 99:e3:1a:1d:1e:63:72:68:31:e0:67:7f:35:e1:a1:bc:fc:59: 00:cf:2b:ab:60:a8:f6:ff:01:a5:ad:5a:bc:7b:22:fe:32:12: af:96:ba:9f:a7:71:29:b1:a2:f4:c3:59:0d:2e:e6:17:39:0b: 31:98:f4:4c:a7:75:cb:b3:0c:32:ac:51:fc:11:ef:cb:a3:ca: 16:e0:1f:e8:bc:38:90:04:06:cc:3b:f7:78:78:44:25:ee:cd: 06:91:42:b2:64:52:a1:62:97:b5:60:f9:4b:76:f6:f9:dd:1e: 4c:88:8c:d9:f4:6c:ab:f5:e5:34:8b:68:56:a5:9a:b0:a0:fe: 4f:cd:76:5a:4c:2a:5d:51:f2:85:e4:1f:38:5d:17:7e:95:b3: 71:bd:ef:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE83TSrjMjTGfV/hvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk MjIxZTkxNzMtOTA4ZS00MmVkLWEyYmUtMjEwOGY5MGEwNDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroX/e6nIycLSidmT2idfBy9Y5kkzKBSoVqQw ZzwIP1d/90zdCvW04OHJMF+rl2wf6NFlxANQ0Tj/FJaNo9CycZS2/UwcldTMzK+w u+3h30cyAxoZGOjyYvXuPEcfxAKWYr+IeMVyodk8p3+im+v9pA+fzvnPWCOKcMR3 RPw0rL03X3s8qXsyhb9BobCef2cdfFHrpfVB6SAxgVTQMT16FeaVu+lm+W5TqbJu ZYnexWepOsbYttfaOePwfixva8JPWeKaR3ZKM6aG1g6EwLlfPMAmi3R2PRC8FUn9 TH2bW3v2lz9lOWdeqLEmW2rVghdEXa+WACLmx9CjprcfamYEQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIutjYeSqh/qXFw2t+3I8Uik3edvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGY2ODE2YTctMTQzYy0z OTJiLWJjOTItMDgyODg2OGEzODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzwg3B5PFM0WVJcnc0zsH8XYz4n1dHNQJ7ZNI2SxiZRRMf2MAOJAwk 7QF0+BcJ5n5ntjFq2vPhV6uF/qkGrQg/Za0QFnEIRhEtWDyGEQLFgT9Syu1Padn6 w3L8sq6h3cVC7nYOR3U99mS9uE+Z4xodHmNyaDHgZ3814aG8/FkAzyurYKj2/wGl rVq8eyL+MhKvlrqfp3EpsaL0w1kNLuYXOQsxmPRMp3XLswwyrFH8Ee/Lo8oW4B/o vDiQBAbMO/d4eEQl7s0GkUKyZFKhYpe1YPlLdvb53R5MiIzZ9Gyr9eU0i2hWpZqw oP5PzXZaTCpdUfKF5B84XRd+lbNxve9c -----END CERTIFICATE-----Generated at Wed Sep 23 09:56:41 2026 by rpki-client