$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa File: 43d698a9-f364-3f11-918e-a3f5a57ed484.roa (raw, json) Hash identifier: ZHBH+5sabxu0HX1WyUzAFiu9S+xiD9rDvej5iKI2Alk= Subject key identifier: 23:8E:03:85:83:23:48:3B:21:F2:AC:0A:F4:72:41:B5:A3:D3:28:2D Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A331AF661DA7FE8DB042B8540 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 11290 IP address blocks: 104.200.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f6:61:da:7f:e8:db:04:2b:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=4dacf7c9-f714-4822-92cf-be535b0276db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:1b:30:0c:ed:9e:c0:61:36:ab:ad:cc:1a: c6:3f:42:d4:a1:64:e0:dc:ca:dd:5b:0a:10:44:56: 6d:40:f9:07:ea:4f:06:16:46:1d:1f:61:5a:9b:f4: 32:06:19:f3:79:71:d0:ae:02:0d:a6:b9:2a:04:8e: c1:27:0b:c6:3e:cc:f9:02:d8:25:f9:22:a1:c7:55: 1b:0f:27:4c:25:c7:ba:da:b1:9d:fb:e9:e8:89:d5: bb:de:06:7d:59:42:c7:49:bb:c3:88:34:ed:bd:a9: 2e:59:2d:83:3f:81:e7:b3:74:a3:00:5d:31:65:2b: 7d:84:de:5e:b9:ea:90:9e:3b:2b:b2:d8:78:51:d7: 13:27:6c:7f:67:49:cc:59:32:0d:d4:0d:c2:2e:48: 32:e7:1d:4b:b7:06:3e:14:32:d0:70:17:6b:4c:01: 80:b4:26:29:bb:04:da:c1:b3:4b:ca:a4:e0:57:f5: b3:97:60:b9:39:fe:e6:87:33:4d:b0:48:17:a7:90: 0d:f4:ee:9d:bd:d0:80:3c:13:a0:26:84:c1:8e:50: 03:e1:6e:8d:64:5f:79:85:b4:4e:3f:92:15:16:a7: f2:ae:69:3c:b2:f2:75:45:3d:a3:77:23:49:8d:e8: da:b0:30:75:6a:51:d5:a6:4a:42:d3:5d:fc:3c:fb: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8E:03:85:83:23:48:3B:21:F2:AC:0A:F4:72:41:B5:A3:D3:28:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/43d698a9-f364-3f11-918e-a3f5a57ed484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.200.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e1:15:23:b5:3d:17:d4:84:d2:e8:82:9f:b3:65:9d:3b:f0: 31:59:a4:8a:cd:18:65:dc:e3:1d:b2:7e:a1:4f:80:a0:43:07: 0b:7c:59:02:5d:03:af:ad:92:b8:6e:93:97:62:fb:47:a1:1b: db:6e:e1:8f:78:ff:72:10:c0:95:08:51:d6:44:fa:25:3e:46: 33:8c:a1:5e:7c:b2:a7:cc:61:c0:87:ee:e0:02:05:45:e1:1c: 6d:5d:29:80:da:a8:4c:75:02:f7:87:6a:29:5f:30:28:5d:9a: 1c:68:ee:87:26:a6:0b:18:43:22:bb:d5:06:f2:bf:94:27:e5: 1e:60:ff:b3:83:74:91:46:62:cc:27:8b:4e:16:14:53:6b:ce: cb:71:dd:f9:4f:3a:84:1f:cb:ae:fb:cc:a7:1d:27:45:17:c6: 8c:70:9f:bb:76:a4:1a:b8:81:f8:af:5e:37:13:7a:e9:66:31: 8d:63:af:2a:12:d7:90:01:4c:f5:2a:0b:9b:b1:5f:b5:ca:8e: 6c:0b:f8:18:ce:c3:f4:88:3d:e0:23:b7:91:bc:1b:9b:40:e8: 2d:53:ae:77:73:63:a4:7c:fc:c2:b0:05:f7:13:69:3d:57:4c: 05:ba:c0:fa:9f:3f:4a:eb:fc:f7:c4:12:9a:9e:ff:4c:85:ea: 32:e5:4e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvZh2n/o2wQrhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NGRhY2Y3YzktZjcxNC00ODIyLTkyY2YtYmU1MzViMDI3NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskkbMAztnsBhNqutzBrGP0LUoWTg3MrdWwoQ RFZtQPkH6k8GFkYdH2Fam/QyBhnzeXHQrgINprkqBI7BJwvGPsz5Atgl+SKhx1Ub DydMJce62rGd++noidW73gZ9WULHSbvDiDTtvakuWS2DP4Hns3SjAF0xZSt9hN5e ueqQnjsrsth4UdcTJ2x/Z0nMWTIN1A3CLkgy5x1LtwY+FDLQcBdrTAGAtCYpuwTa wbNLyqTgV/Wzl2C5Of7mhzNNsEgXp5AN9O6dvdCAPBOgJoTBjlAD4W6NZF95hbRO P5IVFqfyrmk8svJ1RT2jdyNJjejasDB1alHVpkpC0138PPu9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOOA4WDI0g7IfKsCvRyQbWj0ygtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNDNkNjk4YTktZjM2NC0z ZjExLTkxOGUtYTNmNWE1N2VkNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDhFSO1PRfUhNLogp+zZZ078DFZpIrNGGXc4x2yfqFPgKBDBwt8WQJd A6+tkrhuk5di+0ehG9tu4Y94/3IQwJUIUdZE+iU+RjOMoV58sqfMYcCH7uACBUXh HG1dKYDaqEx1AveHailfMChdmhxo7ocmpgsYQyK71Qbyv5Qn5R5g/7ODdJFGYswn i04WFFNrzstx3flPOoQfy677zKcdJ0UXxoxwn7t2pBq4gfivXjcTeulmMY1jryoS 15ABTPUqC5uxX7XKjmwL+BjOw/SIPeAjt5G8G5tA6C1TrndzY6R8/MKwBfcTaT1X TAW6wPqfP0rr/PfEEpqe/0yF6jLlTl4= -----END CERTIFICATE-----Generated at Wed Jun 18 19:11:55 2025 by rpki-client