$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa File: cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa (raw, json) Hash identifier: WdRcTqoIhf/7VHiaQyubAQVq/TY8NHtviR9dStMSqTY= Subject key identifier: 48:92:88:FC:F2:E8:BA:39:A1:47:26:31:74:09:D9:6E:95:50:21:A9 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D85F8129700A549527E2E080 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 1280 IP address blocks: 204.152.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:81:29:70:0a:54:95:27:e2:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=f55800f2-c75f-4ccb-9921-176541d8501c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:03:ff:25:13:2a:39:af:9e:a3:6e:87:ab: ba:30:e7:b0:fc:09:69:dc:d2:da:17:c0:36:f6:3f: b9:d9:39:62:9c:b8:25:42:cd:28:28:49:d9:b7:83: fa:81:51:53:b5:82:a7:2e:a0:13:28:16:45:85:60: 19:e9:26:b0:7e:8e:1a:b5:91:71:62:7a:34:3c:0f: 3e:3c:07:26:88:79:c3:fa:83:68:39:42:90:47:b4: 55:83:42:72:a2:b0:a3:61:14:ec:37:b3:91:22:fd: b9:49:e6:4a:26:fa:c4:73:03:ea:6b:d2:d2:60:08: 6a:9a:cd:0f:b0:fc:2b:6b:b6:d1:61:e1:74:0a:ef: c9:93:b4:40:12:53:b2:c1:3d:e1:46:7d:38:ab:50: 8d:d0:85:dc:33:db:1f:d0:bd:6d:66:20:be:36:b1: 45:df:5f:28:27:b9:a3:c5:01:8f:b8:37:e4:35:88: 79:60:20:7e:bc:c2:e0:63:00:13:cb:53:92:4c:70: 9a:71:29:5f:f4:84:59:b1:f2:2d:42:11:eb:b5:4e: 29:61:5c:85:ae:8b:29:59:6b:4f:d8:36:6e:68:d3: fa:ed:67:70:ab:b7:45:ab:81:8b:35:9d:60:59:0e: e4:42:b6:2d:4f:15:6a:c8:1d:14:bf:ca:11:bb:1b: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:92:88:FC:F2:E8:BA:39:A1:47:26:31:74:09:D9:6E:95:50:21:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:17:64:4f:85:ee:89:00:f4:1f:10:26:93:c0:31:d7:63:12: a4:cd:ab:5e:e2:9a:26:b0:0f:40:91:6f:3c:ed:ac:da:1f:ed: 44:31:71:46:08:10:74:ad:4f:fa:88:96:19:b6:46:8a:1a:a6: d7:29:3e:ed:3c:bd:a6:b3:49:f5:51:eb:89:4a:87:f5:97:6e: 43:b9:1c:c3:4a:c6:60:bc:46:06:32:be:c9:37:99:17:f0:6c: 6b:4a:db:79:8e:5c:eb:88:cc:4d:a0:6e:c5:5b:19:62:4d:d0: 92:5f:7a:a1:22:9c:3b:e4:7a:42:ec:0f:23:f8:2b:b4:1b:06: 8c:79:cd:7d:9a:82:3a:4e:fa:7e:01:d9:80:9d:c9:8c:92:fa: fa:53:dd:5a:cc:d8:7f:c7:ac:79:c7:0f:12:87:b2:41:3a:fa: 2a:82:0a:10:73:84:db:2f:3c:5e:a1:31:3e:fd:8d:cd:42:40: 29:a4:3a:6d:5d:d5:a4:fb:a8:04:f1:85:c0:7e:07:4d:b4:87: c5:ee:af:e6:64:d5:f4:2b:85:f6:5e:43:19:3f:34:b1:a9:c5: b3:ab:b1:37:35:e0:be:77:62:69:f2:52:f6:99:81:df:f9:bd: b3:b7:a9:0e:7d:8e:c2:f7:f1:d0:1c:41:cd:e6:53:4b:45:6a: 78:99:e0:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4EpcApUlSfi4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjU1ODAwZjItYzc1Zi00Y2NiLTk5MjEtMTc2NTQxZDg1MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqQD/yUTKjmvnqNuh6u6MOew/Alp3NLaF8A2 9j+52TlinLglQs0oKEnZt4P6gVFTtYKnLqATKBZFhWAZ6Sawfo4atZFxYno0PA8+ PAcmiHnD+oNoOUKQR7RVg0JyorCjYRTsN7ORIv25SeZKJvrEcwPqa9LSYAhqms0P sPwra7bRYeF0Cu/Jk7RAElOywT3hRn04q1CN0IXcM9sf0L1tZiC+NrFF318oJ7mj xQGPuDfkNYh5YCB+vMLgYwATy1OSTHCacSlf9IRZsfItQhHrtU4pYVyFrospWWtP 2DZuaNP67Wdwq7dFq4GLNZ1gWQ7kQrYtTxVqyB0Uv8oRuxuAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiSiPzy6Lo5oUcmMXQJ2W6VUCGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvY2ZlYTMyZjQtZDU5MS0z YTM3LTljMjItNGZlYjZmYTRhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcXZE+F7okA9B8QJpPAMddjEqTNq17imiawD0CRbzztrNof7UQxcUYI EHStT/qIlhm2RooaptcpPu08vaazSfVR64lKh/WXbkO5HMNKxmC8RgYyvsk3mRfw bGtK23mOXOuIzE2gbsVbGWJN0JJfeqEinDvkekLsDyP4K7QbBox5zX2agjpO+n4B 2YCdyYyS+vpT3VrM2H/HrHnHDxKHskE6+iqCChBzhNsvPF6hMT79jc1CQCmkOm1d 1aT7qATxhcB+B020h8Xur+Zk1fQrhfZeQxk/NLGpxbOrsTc14L53YmnyUvaZgd/5 vbO3qQ59jsL38dAcQc3mU0tFaniZ4Io= -----END CERTIFICATE-----Generated at Sun Jun 15 04:49:26 2025 by rpki-client