$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa File: 2c733a41-1d85-3fff-a8e9-5ef96865182f.roa (raw, json) Hash identifier: 5vByv1DtcBuDF9IK9sZnHsj0FsGvITi4XrUDsyR+3sY= Subject key identifier: A9:0B:73:6B:87:86:A8:22:95:AF:72:EA:E9:9E:A6:3F:5E:23:10:47 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584A2ABACC645D80CE7C4380B4C0 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 395437 IP address blocks: 143.55.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:cc:64:5d:80:ce:7c:43:80:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=88e438de-3cd2-443c-b4b6-eae598fb2468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:6f:35:e5:44:35:de:0a:be:5f:9f:c0:8e: d5:6e:f7:48:fe:22:1f:ae:ae:db:89:85:ca:b3:f3: 58:17:45:7b:46:71:e3:1c:40:b5:1f:50:71:48:8a: d2:44:7e:2f:31:75:b7:6b:fe:e9:18:c6:0e:bd:dc: 73:f6:70:2d:9a:5f:0d:a5:96:8c:8e:68:3b:39:3c: 9a:15:52:ef:2d:e5:af:9a:8c:7d:eb:e0:21:84:d7: 56:62:72:ba:a3:83:a9:44:ad:8e:41:e0:ee:13:e1: ca:ea:f8:e6:08:88:7f:ed:bd:b6:92:80:cf:76:1f: 0f:d9:e0:cc:0a:18:ea:47:1e:cd:dd:5e:7d:1d:67: 98:f2:c1:83:9d:63:c2:eb:a0:01:25:83:37:5c:36: 8a:4a:08:c8:f4:e7:0a:64:44:cb:de:88:f6:62:74: 2d:d0:29:99:e8:c2:57:d3:1c:19:91:b3:4a:09:2a: 85:e1:37:07:42:23:6b:c8:fc:bf:0a:fd:7d:a3:22: ed:d5:b9:a6:fd:fc:11:7e:9e:98:41:90:87:78:99: cd:6b:50:81:00:60:18:c0:cf:c6:9b:14:80:3d:3e: 70:b7:22:6b:7c:fc:95:91:83:08:59:8f:f5:95:4d: 46:38:56:e5:44:5f:78:0c:d2:10:50:22:3b:65:73: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0B:73:6B:87:86:A8:22:95:AF:72:EA:E9:9E:A6:3F:5E:23:10:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 143.55.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f5:2e:a8:f3:80:f9:08:e7:5e:9a:d3:6a:0a:f2:c2:3b:73: 7a:e7:75:f1:39:d6:d4:6a:a3:c5:00:ee:72:f4:5c:9c:68:cd: 9f:e8:4a:09:b0:6f:68:70:78:a9:4e:28:d4:df:a6:ba:4e:91: ef:8e:cc:6d:ef:01:7e:4c:53:7f:0a:aa:9f:a8:a5:a8:e2:b4: 65:d8:b8:5f:40:e5:5a:39:68:09:2e:28:b7:96:46:fc:f8:3b: ad:50:a6:7c:77:b0:0c:03:88:73:5b:fa:fe:9d:e8:1b:0f:b2: 9c:f1:99:f3:36:3a:ef:66:d2:54:d4:7e:41:bd:5f:ce:4d:c4: 59:8e:11:5d:80:7c:1b:70:27:c4:33:08:6a:2a:d9:be:67:b6: 45:d2:bb:b8:02:90:71:c4:e7:71:dd:57:e4:a4:31:1c:4b:ae: 2e:0b:af:6a:7f:c8:f1:b3:2a:22:67:53:79:f1:eb:7c:4c:9b: e6:0d:af:93:85:00:8f:dd:a4:67:5b:52:24:81:2c:fc:50:b0: 53:87:5e:2d:9e:1f:66:09:86:2b:04:90:8c:3d:9c:63:32:31: db:7e:0b:e7:01:3b:e3:de:11:75:31:e2:fd:68:a4:50:1a:c1: 16:73:29:2b:23:4b:2a:9c:eb:01:00:2d:92:c1:e9:57:29:ec: 82:82:73:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqusxkXYDOfEOAtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ODhlNDM4ZGUtM2NkMi00NDNjLWI0YjYtZWFlNTk4ZmIyNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI9vNeVENd4Kvl+fwI7VbvdI/iIfrq7biYXK s/NYF0V7RnHjHEC1H1BxSIrSRH4vMXW3a/7pGMYOvdxz9nAtml8NpZaMjmg7OTya FVLvLeWvmox96+AhhNdWYnK6o4OpRK2OQeDuE+HK6vjmCIh/7b22koDPdh8P2eDM ChjqRx7N3V59HWeY8sGDnWPC66ABJYM3XDaKSgjI9OcKZETL3oj2YnQt0CmZ6MJX 0xwZkbNKCSqF4TcHQiNryPy/Cv19oyLt1bmm/fwRfp6YQZCHeJnNa1CBAGAYwM/G mxSAPT5wtyJrfPyVkYMIWY/1lU1GOFblRF94DNIQUCI7ZXN8nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkLc2uHhqgila9y6umepj9eIxBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvMmM3MzNhNDEtMWQ4NS0z ZmZmLWE4ZTktNWVmOTY4NjUxODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjzfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn1LqjzgPkI516a02oK8sI7c3rndfE51tRqo8UA7nL0XJxozZ/oSgmw b2hweKlOKNTfprpOke+OzG3vAX5MU38Kqp+opajitGXYuF9A5Vo5aAkuKLeWRvz4 O61Qpnx3sAwDiHNb+v6d6BsPspzxmfM2Ou9m0lTUfkG9X85NxFmOEV2AfBtwJ8Qz CGoq2b5ntkXSu7gCkHHE53HdV+SkMRxLri4Lr2p/yPGzKiJnU3nx63xMm+YNr5OF AI/dpGdbUiSBLPxQsFOHXi2eH2YJhisEkIw9nGMyMdt+C+cBO+PeEXUx4v1opFAa wRZzKSsjSyqc6wEALZLB6Vcp7IKCc/A= -----END CERTIFICATE-----Generated at Sun Jun 15 16:04:07 2025 by rpki-client