$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa File: cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa (raw, json) Hash identifier: JkpXoP4aE2sQrWtS8QItv+H7tT6rxr+/NcKJHBOL6TM= Subject key identifier: BF:8A:B7:7A:C0:B6:64:BC:58:90:E9:31:C1:25:26:E5:D1:43:75:9A Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584AB91B84BD574846D58110D5A0 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 1280 IP address blocks: 204.152.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:84:bd:57:48:46:d5:81:10:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1d1512e9-ee0f-4885-bd05-5feb0b73bcec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:aa:f9:8d:2f:b5:b5:7e:63:72:cb:0e:3c: 74:40:b5:8f:d8:89:97:f1:0a:ad:c3:c7:3a:ea:85: 4b:e9:7f:de:44:f1:ac:5d:93:a0:ea:4c:1d:bf:95: f5:ad:54:af:77:eb:b9:10:e6:72:96:30:ee:2d:69: 77:29:91:e1:05:29:02:0d:18:15:d8:de:1b:ee:4b: 87:fb:28:d8:4c:bc:fb:7a:2a:1b:84:ed:70:be:b7: fb:0e:a1:fb:d4:ae:90:c6:e8:4d:8d:0b:b9:58:16: 31:94:bb:a7:14:5e:fb:2d:21:23:ff:8d:b3:7e:b6: 35:5e:27:bb:7b:88:bb:cb:5b:6a:f5:0d:58:7f:ee: 03:7d:f6:ce:39:12:97:c5:4d:71:fc:58:73:2e:6e: c2:17:b1:ea:c2:ab:43:a1:0e:f3:70:98:16:f3:c8: 39:a5:93:c3:0c:97:b3:8f:ed:bb:60:fa:94:aa:0d: 4f:5f:5d:51:6a:69:ae:b4:27:f3:b0:cf:a0:ee:96: ab:56:fe:e5:21:05:96:5d:5f:34:ae:c2:cd:1d:33: 09:5a:c6:47:6a:5d:3a:e9:89:ee:2c:1e:e9:12:e8: a1:8f:56:9c:4e:0f:bc:cb:af:06:1f:5c:43:16:0a: 85:2d:84:4e:59:b0:f7:47:eb:64:9a:ae:15:f6:8e: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8A:B7:7A:C0:B6:64:BC:58:90:E9:31:C1:25:26:E5:D1:43:75:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:55:cc:14:9f:d1:63:b9:58:5f:c5:99:db:51:31:02:8e:ec: a7:ff:ef:d3:eb:cf:90:b5:1f:2d:37:56:79:a4:5d:62:83:6b: e1:50:7b:91:02:33:51:de:fc:74:f6:c0:ff:e4:32:71:8b:83: 95:9b:cd:f4:bc:b3:f5:3e:31:11:45:7d:f6:7f:c2:34:4d:93: 5b:b1:3c:aa:c8:f9:cb:f8:6e:16:58:60:63:88:de:81:1b:f7: 60:6e:f8:95:27:fa:00:46:9c:c9:e4:3d:f7:39:a4:1a:a3:80: c1:c3:ca:0e:4a:09:1c:14:f4:bf:6f:e5:51:ab:56:f3:6b:1c: e9:af:6f:48:e5:63:19:a6:81:a0:aa:7d:ad:6c:cb:7b:bd:6d: 04:1d:6c:e5:7e:34:fb:8b:8b:2c:31:72:12:34:5c:56:80:34: be:45:c6:38:18:ba:c7:5a:79:63:75:e7:88:a9:eb:99:03:31: e8:a1:59:00:14:3c:9a:e4:a5:6b:e8:a7:7e:82:4e:ee:ac:46: 3b:99:d2:24:6e:cb:e8:a1:00:08:7f:48:64:6a:c5:a6:81:bb: 0c:ac:28:2c:2f:89:a3:09:e4:eb:99:35:e4:55:c5:d8:be:09: e7:23:36:9e:e7:6f:07:fa:db:11:e2:ca:6d:fe:11:96:15:a3: 58:b5:39:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4S9V0hG1YEQ1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWQxNTEyZTktZWUwZi00ODg1LWJkMDUtNWZlYjBiNzNiY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwyq+Y0vtbV+Y3LLDjx0QLWP2ImX8Qqtw8c6 6oVL6X/eRPGsXZOg6kwdv5X1rVSvd+u5EOZyljDuLWl3KZHhBSkCDRgV2N4b7kuH +yjYTLz7eiobhO1wvrf7DqH71K6QxuhNjQu5WBYxlLunFF77LSEj/42zfrY1Xie7 e4i7y1tq9Q1Yf+4DffbOORKXxU1x/FhzLm7CF7HqwqtDoQ7zcJgW88g5pZPDDJez j+27YPqUqg1PX11RammutCfzsM+g7parVv7lIQWWXV80rsLNHTMJWsZHal066Ynu LB7pEuihj1acTg+8y68GH1xDFgqFLYROWbD3R+tkmq4V9o7OxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+Kt3rAtmS8WJDpMcElJuXRQ3WaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvY2ZlYTMyZjQtZDU5MS0z YTM3LTljMjItNGZlYjZmYTRhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5VzBSf0WO5WF/FmdtRMQKO7Kf/79Prz5C1Hy03VnmkXWKDa+FQe5EC M1He/HT2wP/kMnGLg5WbzfS8s/U+MRFFffZ/wjRNk1uxPKrI+cv4bhZYYGOI3oEb 92Bu+JUn+gBGnMnkPfc5pBqjgMHDyg5KCRwU9L9v5VGrVvNrHOmvb0jlYxmmgaCq fa1sy3u9bQQdbOV+NPuLiywxchI0XFaANL5FxjgYusdaeWN154ip65kDMeihWQAU PJrkpWvop36CTu6sRjuZ0iRuy+ihAAh/SGRqxaaBuwysKCwviaMJ5OuZNeRVxdi+ CecjNp7nbwf62xHiym3+EZYVo1i1Oc0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:43 2025 by rpki-client