$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa File: 96cfbcf1-b432-3689-8421-0dc518512723.roa (raw, json) Hash identifier: IotPRm2cOkLZOYmJpytua4JkqD+MvJIqpjKjzclRmjY= Subject key identifier: 02:1D:18:5E:C1:CA:21:7F:E8:05:38:7E:72:79:E2:64:E4:B6:4E:4F Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A374ADB05F754905EAB764500 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11290 IP address blocks: 74.210.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:db:05:f7:54:90:5e:ab:76:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=40c02bb5-ef95-4f99-ad3d-0213b76356ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:92:af:f0:dd:65:81:07:f4:4f:86:7c:25: 96:41:ba:3e:df:43:2b:84:d9:73:e1:f3:2f:52:85: 5f:03:30:d0:bc:7a:c1:98:76:81:b7:64:c9:25:d6: db:63:e7:f7:65:b3:9d:5b:e8:ee:43:5c:3d:a3:02: ca:68:b4:0c:00:32:69:5f:92:e6:0c:ee:78:5f:87: 26:22:da:c8:ab:5e:4f:7f:94:4f:11:24:a5:02:4c: 85:c4:a2:61:5d:59:28:f4:a1:08:35:4e:c4:b7:0f: 54:2c:b7:ff:80:94:73:91:83:11:7e:52:66:67:7a: 97:7d:de:ee:3c:fb:61:bb:ac:7f:68:c8:bb:27:08: a7:ed:eb:c3:bc:4f:6e:9c:0b:d0:93:3b:f8:c0:aa: 6b:c2:7a:d4:e4:8e:4b:28:74:70:14:f1:db:b9:90: 59:fc:2d:41:0e:e3:18:8f:64:83:63:e1:76:24:c8: 89:5f:44:be:b2:35:cc:a5:a4:a6:67:3b:93:f7:2e: 9c:70:e6:4c:31:b7:79:3c:20:b4:22:9f:d5:50:85: 9a:26:dd:12:b9:5b:e6:1a:2b:77:46:68:39:db:76: 3d:27:98:3e:b1:7d:5e:1b:39:ae:ff:0e:94:1d:cf: 5a:d1:a4:0d:2d:5b:ba:a2:cc:6e:41:b4:2f:06:10: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1D:18:5E:C1:CA:21:7F:E8:05:38:7E:72:79:E2:64:E4:B6:4E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/96cfbcf1-b432-3689-8421-0dc518512723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 74.210.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:71:02:f9:18:3b:2b:67:b6:44:a9:0e:70:58:9e:43:4f:3e: f3:ea:e4:97:f5:97:b5:7e:12:77:68:db:66:8e:fa:0a:8b:53: 0a:06:09:0a:bf:96:6f:fb:25:bc:e0:18:c6:bc:65:72:29:1d: 2f:07:e4:d7:5f:0e:53:57:28:a4:f8:52:a0:14:99:b3:47:f0: b3:a3:6d:cf:b9:4d:b1:ab:9d:ba:1b:45:40:54:52:37:c6:d5: 5d:df:2f:af:96:b0:0a:a1:4f:ad:73:9b:93:19:c0:76:82:04: e2:c2:41:43:f1:71:d6:d1:5e:42:3e:3c:88:b3:ac:f7:b7:dc: 59:fa:0a:5a:7e:8b:31:e1:f8:83:4d:23:59:06:50:fc:63:68: 2b:e6:35:e0:61:dc:79:2f:c7:6e:e6:31:1e:ba:0c:32:6c:dc: 91:9e:44:c6:ee:45:d6:68:6c:6d:c0:77:e6:ca:8f:a2:51:f5: 26:50:4b:44:37:77:63:b6:1e:35:d4:34:95:c6:8b:35:59:86: be:a6:a8:91:96:22:50:29:42:ab:e2:5d:9c:88:8b:ab:f6:c2: 9b:eb:f0:3d:74:08:d8:99:d9:5d:d2:72:ed:f3:91:76:03:5c: 42:cc:17:1d:b1:a8:8f:7e:da:f5:3c:93:0a:44:dc:0c:5b:5e: c3:c7:ad:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StsF91SQXqt2RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NDBjMDJiYjUtZWY5NS00Zjk5LWFkM2QtMDIxM2I3NjM1NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YOSr/DdZYEH9E+GfCWWQbo+30MrhNlz4fMv UoVfAzDQvHrBmHaBt2TJJdbbY+f3ZbOdW+juQ1w9owLKaLQMADJpX5LmDO54X4cm ItrIq15Pf5RPESSlAkyFxKJhXVko9KEINU7Etw9ULLf/gJRzkYMRflJmZ3qXfd7u PPthu6x/aMi7Jwin7evDvE9unAvQkzv4wKprwnrU5I5LKHRwFPHbuZBZ/C1BDuMY j2SDY+F2JMiJX0S+sjXMpaSmZzuT9y6ccOZMMbd5PCC0Ip/VUIWaJt0SuVvmGit3 Rmg523Y9J5g+sX1eGzmu/w6UHc9a0aQNLVu6osxuQbQvBhDkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIdGF7ByiF/6AU4fnJ54mTktk5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTZjZmJjZjEtYjQzMi0z Njg5LTg0MjEtMGRjNTE4NTEyNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFStLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxxAvkYOytntkSpDnBYnkNPPvPq5Jf1l7V+Endo22aO+gqLUwoGCQq/ lm/7JbzgGMa8ZXIpHS8H5NdfDlNXKKT4UqAUmbNH8LOjbc+5TbGrnbobRUBUUjfG 1V3fL6+WsAqhT61zm5MZwHaCBOLCQUPxcdbRXkI+PIizrPe33Fn6Clp+izHh+INN I1kGUPxjaCvmNeBh3Hkvx27mMR66DDJs3JGeRMbuRdZobG3Ad+bKj6JR9SZQS0Q3 d2O2HjXUNJXGizVZhr6mqJGWIlApQqviXZyIi6v2wpvr8D10CNiZ2V3Scu3zkXYD XELMFx2xqI9+2vU8kwpE3AxbXsPHrVo= -----END CERTIFICATE-----Generated at Wed Jun 18 19:22:49 2025 by rpki-client