$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa File: 8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa (raw, json) Hash identifier: EkLaxIva2VbNnvIXlXI9Sz+hFW3UXTHIxQ1WeDgWfTw= Subject key identifier: C5:29:DF:1C:AF:8C:F6:5A:3B:51:6A:76:B2:5C:6C:A4:49:EA:36:4A Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B8505FAE886F55426B3F0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 204.152.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:85:05:fa:e8:86:f5:54:26:b3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=afba9740-0ed3-4e2a-94ae-028f346d2cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:cf:36:bf:98:5a:90:95:8f:67:91:9c:a0: 5f:85:a8:06:c5:44:27:07:2e:f0:65:50:a2:26:4b: 65:25:91:07:c8:ed:8f:30:ec:c5:57:13:20:9a:eb: 21:3d:0d:66:8e:6b:16:f5:e8:0c:a6:a3:c1:c0:ac: 8b:01:97:39:9a:03:da:3a:6e:ce:c8:7c:a3:e8:9f: c6:57:a5:cd:f8:48:eb:15:7c:8c:0d:01:a7:0a:71: d1:37:c6:d7:30:82:c6:29:9f:00:67:91:72:27:ca: 44:e4:67:19:8f:12:d5:81:14:52:32:ec:26:04:17: 4d:9c:c8:43:9c:c9:51:4f:b6:41:1f:5a:a1:7a:61: aa:8b:ba:30:8c:81:f9:af:06:9b:21:f7:e8:f3:d5: 38:cc:af:b1:92:6a:cb:d9:f0:81:89:bc:2a:d7:7d: 7c:ce:78:12:6e:4d:7a:66:4c:b2:e5:3e:62:94:53: bc:8a:2c:19:0c:70:83:b8:34:5a:8b:50:36:57:4a: f6:f5:f7:cf:74:78:4f:1c:ac:76:69:0d:6a:bf:47: 46:a2:fe:56:e4:a0:80:30:37:0a:a6:d4:c9:2f:83: e1:3f:f1:c3:7d:f3:7d:f4:50:26:8c:af:00:17:3e: dc:ab:11:c7:b9:ea:76:c6:ba:6c:7e:b5:39:0a:f6: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:DF:1C:AF:8C:F6:5A:3B:51:6A:76:B2:5C:6C:A4:49:EA:36:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:3a:b9:09:e7:09:a0:c9:98:7b:2a:86:6b:9c:17:7a:76:db: 37:8f:70:49:2c:82:5e:34:69:95:24:b2:27:c1:da:a1:0f:a7: 65:42:b7:6c:a4:62:ba:a8:36:97:f4:53:f3:62:b6:5b:b7:fe: e7:08:85:c5:b4:d7:9c:ef:af:64:b4:ae:e3:e0:5e:fe:96:2e: 3e:42:2c:2f:ec:3c:01:40:76:b5:c1:9c:50:1a:d1:b5:03:e4: 11:f4:4e:c6:d7:05:b8:05:23:85:45:58:56:4c:6c:f2:10:85: 8a:e8:8b:1c:95:9d:84:8d:e9:01:76:af:ac:17:e1:48:3e:37: 3a:a0:7c:45:bd:fa:5e:15:86:8f:96:e1:4b:f5:c1:d7:4e:c4: 3e:d1:c9:3f:07:b3:05:8e:c3:ad:a5:9e:32:3f:33:36:5d:71: 3a:62:ea:b0:d9:c3:16:28:94:5e:fb:06:e8:7c:2b:cd:cd:2e: 51:e5:4c:78:38:29:f3:6b:5d:eb:8c:93:4b:2a:32:6f:00:3f: 93:9b:8d:76:08:ff:d6:3d:f6:1e:b2:56:44:2d:52:eb:58:55: 49:38:36:e6:74:f5:44:1e:b0:08:89:8e:8d:8a:3c:de:0a:2c: f2:ce:ce:30:7a:92:06:9d:19:da:48:45:9c:ba:89:5d:fd:12: f8:44:09:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4UF+uiG9VQms/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YWZiYTk3NDAtMGVkMy00ZTJhLTk0YWUtMDI4ZjM0NmQyY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMrPNr+YWpCVj2eRnKBfhagGxUQnBy7wZVCi JktlJZEHyO2PMOzFVxMgmushPQ1mjmsW9egMpqPBwKyLAZc5mgPaOm7OyHyj6J/G V6XN+EjrFXyMDQGnCnHRN8bXMILGKZ8AZ5FyJ8pE5GcZjxLVgRRSMuwmBBdNnMhD nMlRT7ZBH1qhemGqi7owjIH5rwabIffo89U4zK+xkmrL2fCBibwq1318zngSbk16 Zkyy5T5ilFO8iiwZDHCDuDRai1A2V0r29ffPdHhPHKx2aQ1qv0dGov5W5KCAMDcK ptTJL4PhP/HDffN99FAmjK8AFz7cqxHHuep2xrpsfrU5CvaNTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUp3xyvjPZaO1FqdrJcbKRJ6jZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOGYzODBiNWEtZDgyMS0z Y2QwLTlkM2ItYzNjMzYwYjM4NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ46uQnnCaDJmHsqhmucF3p22zePcEksgl40aZUksifB2qEPp2VCt2yk YrqoNpf0U/Nitlu3/ucIhcW015zvr2S0ruPgXv6WLj5CLC/sPAFAdrXBnFAa0bUD 5BH0TsbXBbgFI4VFWFZMbPIQhYroixyVnYSN6QF2r6wX4Ug+NzqgfEW9+l4Vho+W 4Uv1wddOxD7RyT8HswWOw62lnjI/MzZdcTpi6rDZwxYolF77Buh8K83NLlHlTHg4 KfNrXeuMk0sqMm8AP5ObjXYI/9Y99h6yVkQtUutYVUk4NuZ09UQesAiJjo2KPN4K LPLOzjB6kgadGdpIRZy6iV39EvhECfE= -----END CERTIFICATE-----Generated at Mon Aug 4 19:04:10 2025 by rpki-client