$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa File: dff15429-e42a-3405-bd1a-050a2f301bd0.roa (raw, json) Hash identifier: yAssPObvqtrEXSCHHdkfpXdAjmUJcIO3DPeO8hQCYwc= Subject key identifier: 29:BD:9E:37:22:71:40:4A:68:65:0A:C0:28:0D:F3:FD:C1:14:5C:93 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584A331AF4FECC59A9856A4C7300 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 11290 IP address blocks: 199.193.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f4:fe:cc:59:a9:85:6a:4c:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=b407896d-2507-427c-bef6-e01a2a369d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d5:d4:de:16:98:cc:a7:f4:bb:33:88:18:7e: f3:76:9b:9b:67:f2:f2:02:98:81:08:a6:5a:3f:7d: 8d:ab:8b:11:79:5b:8f:6b:4a:ba:bb:cb:71:bf:00: 6c:c8:32:7a:84:a0:47:23:13:5b:6c:dd:24:80:a7: 6a:89:f6:74:08:c9:bf:1e:ba:f4:66:6a:af:55:9c: 79:16:ac:1b:04:f9:68:84:56:40:68:dd:8e:27:3e: 46:0e:1a:44:dd:f1:93:c4:23:bc:15:61:b8:31:ad: 5a:d6:c3:d9:83:bb:ea:cd:90:a5:d7:09:6f:99:3e: 72:82:36:94:3f:d0:0d:70:db:23:0d:e1:04:08:fb: 2b:f3:25:63:bc:86:59:c9:a5:6b:54:1e:70:95:d9: df:43:a5:68:f3:c9:e5:62:a8:45:d9:2d:73:eb:7d: db:ff:b1:c0:66:8a:79:d7:50:8a:68:9f:45:cc:66: 49:b1:9b:fb:38:e4:91:99:3f:df:d4:65:42:1e:a4: 34:29:49:e9:e4:e8:8e:b0:0d:8d:5f:b4:6d:24:bd: 64:e2:b7:35:62:d0:d7:48:df:f5:d1:3e:19:b3:80: e5:7e:bd:e4:af:ec:8c:75:9b:dc:1f:c9:cf:16:d9: 54:dd:17:38:3d:e5:c3:10:49:01:45:d7:57:34:24: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:9E:37:22:71:40:4A:68:65:0A:C0:28:0D:F3:FD:C1:14:5C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 199.193.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:49:51:0a:38:c3:32:8f:70:b4:7d:a5:6b:5c:8d:b7:b0:81: 58:f1:80:e3:eb:15:3b:3e:f4:ac:8a:68:14:e7:5a:51:21:18: 55:5b:43:73:1e:ca:28:b9:18:5f:75:7e:cd:11:15:5c:bb:fe: e7:be:a5:0d:19:00:ed:cc:9a:41:2a:a3:93:a2:0c:87:f6:5c: 05:9e:4d:0a:5d:ba:06:aa:0c:5e:59:e0:b0:5f:cf:45:01:52: 5b:88:04:d6:4f:33:7c:58:33:98:6a:ce:20:65:24:dc:a5:90: 07:bb:fa:96:00:09:a3:dd:bd:e3:53:37:c1:2e:47:f4:9a:6e: 71:c6:e2:8c:fb:5c:49:61:09:5f:42:9e:ee:57:0d:ce:ba:2f: 11:ee:fd:fa:87:79:a1:df:5d:f3:2d:f5:71:cf:06:01:a9:d9: a3:35:f3:1c:38:37:d4:4d:f7:97:0e:26:cc:00:fd:66:2a:e0: d4:50:9f:a3:3d:a2:4f:d2:2b:06:dd:1a:1d:42:44:cd:75:62: 84:4f:47:ad:58:1f:99:cf:8d:e7:df:2f:bd:81:35:92:ad:26: 7e:f7:66:b8:cc:37:f4:28:a4:c5:d5:d2:8f:0e:81:73:a6:4f: 55:40:8e:3a:ff:bf:28:79:5f:e9:2b:53:f1:08:85:ed:bd:af: 81:54:8a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvT+zFmphWpMcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YjQwNzg5NmQtMjUwNy00MjdjLWJlZjYtZTAxYTJhMzY5ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9XU3haYzKf0uzOIGH7zdpubZ/LyApiBCKZa P32Nq4sReVuPa0q6u8txvwBsyDJ6hKBHIxNbbN0kgKdqifZ0CMm/Hrr0ZmqvVZx5 FqwbBPlohFZAaN2OJz5GDhpE3fGTxCO8FWG4Ma1a1sPZg7vqzZCl1wlvmT5ygjaU P9ANcNsjDeEECPsr8yVjvIZZyaVrVB5wldnfQ6Vo88nlYqhF2S1z633b/7HAZop5 11CKaJ9FzGZJsZv7OOSRmT/f1GVCHqQ0KUnp5OiOsA2NX7RtJL1k4rc1YtDXSN/1 0T4Zs4Dlfr3kr+yMdZvcH8nPFtlU3Rc4PeXDEEkBRddXNCREMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm9njcicUBKaGUKwCgN8/3BFFyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGZmMTU0MjktZTQyYS0z NDA1LWJkMWEtMDUwYTJmMzAxYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5JUQo4wzKPcLR9pWtcjbewgVjxgOPrFTs+9KyKaBTnWlEhGFVbQ3Me yii5GF91fs0RFVy7/ue+pQ0ZAO3MmkEqo5OiDIf2XAWeTQpdugaqDF5Z4LBfz0UB UluIBNZPM3xYM5hqziBlJNylkAe7+pYACaPdveNTN8EuR/SabnHG4oz7XElhCV9C nu5XDc66LxHu/fqHeaHfXfMt9XHPBgGp2aM18xw4N9RN95cOJswA/WYq4NRQn6M9 ok/SKwbdGh1CRM11YoRPR61YH5nPjeffL72BNZKtJn73ZrjMN/QopMXV0o8OgXOm T1VAjjr/vyh5X+krU/EIhe29r4FUim8= -----END CERTIFICATE-----Generated at Wed Jun 18 19:14:18 2025 by rpki-client