$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa File: 40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa (raw, json) Hash identifier: toTICWK+iSJoiEdBoK2CodgD0eQJLKkvdXne8V54GX0= Subject key identifier: 1C:6E:6F:48:D7:FB:80:80:4C:4D:EE:E8:37:EE:57:F0:5B:3D:B6:B4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849E7BA6F5C2A3086BB9D059400 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 22612 IP address blocks: 209.188.7.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:6f:5c:2a:30:86:bb:9d:05:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=bed2e39e-7ad4-417f-914d-de82f464af8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:b6:d8:d1:dc:4c:14:56:7a:e3:73:0a:ad: e6:a2:45:32:77:37:f1:bf:be:e6:83:d0:bf:a2:2a: 4e:08:ba:05:a3:6d:84:1f:a0:19:8a:b5:36:19:c7: fb:2c:4b:7e:04:6c:8a:6a:e5:b9:34:6b:04:75:9c: 37:48:0a:0d:f3:54:9d:9c:c1:21:d5:41:a3:25:1f: 64:0e:21:b7:13:46:b9:c1:70:6f:b7:69:26:a5:e4: 11:78:3b:18:b2:83:63:b0:99:89:11:56:39:b0:f4: de:c6:4d:fb:90:78:a7:b1:62:78:0a:e1:4b:48:98: ea:e3:bf:eb:ef:17:02:fa:7b:8a:b4:28:2e:f6:39: 0f:3f:e9:57:24:f0:ba:06:d1:75:a5:0a:39:db:97: f6:28:66:cc:63:d9:1c:ad:64:43:57:62:92:a6:76: 3b:b7:11:c5:d5:6d:43:73:f4:19:0e:a2:2b:f6:33: 2b:30:5a:0b:e0:f5:f4:a2:81:55:81:30:e7:ea:13: 56:4d:7f:a2:c5:6b:ae:64:15:3c:9a:cf:48:db:f7: 89:27:b7:7c:01:21:93:d5:7f:20:a6:03:c2:cb:5e: 17:8c:cc:bf:2e:f2:ba:17:49:8b:11:13:00:4c:f8: 67:e6:3a:d7:e5:9a:67:8f:c7:28:11:f4:8e:e9:51: 81:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:6F:48:D7:FB:80:80:4C:4D:EE:E8:37:EE:57:F0:5B:3D:B6:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.7.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3b:b2:bb:52:93:cf:c1:b7:20:ec:34:03:d9:c7:a0:08:9c: a7:ac:85:d4:c9:f0:72:ef:f2:74:4b:22:0f:71:fa:01:8f:f3: ef:7e:42:f1:7a:9f:2b:36:13:7e:7c:73:9a:d2:71:f3:e4:c0: 75:67:ab:1e:4e:c9:8e:88:7b:d9:74:80:20:d3:8b:a9:a9:e7: e9:cc:e4:76:ec:48:c3:9b:c1:db:d1:fa:4d:cb:6e:ec:5c:61: ab:17:64:92:52:34:13:53:93:b1:e3:81:96:64:90:49:66:7a: 00:fd:36:dd:f6:fe:50:96:b0:23:a0:ea:7b:20:58:8d:80:06: ef:29:7a:0c:fd:6b:76:36:07:5a:3d:6f:81:c7:1f:aa:fa:2d: ac:d9:f0:b0:e7:f3:78:5a:89:cb:f0:23:ae:9b:e8:40:f7:bd: dc:3e:4d:0f:35:f3:13:34:88:96:26:1c:9f:d9:58:36:cb:80: 16:43:9a:e4:3d:96:83:8c:d4:9e:c5:db:20:87:1f:6e:06:99: 0a:6c:6f:07:0f:c5:c4:4b:e4:13:fb:3f:e0:3b:a2:f6:9a:db: 2f:6f:84:3b:e4:78:96:57:83:68:4e:62:15:cf:dd:86:9f:db: db:da:68:5a:19:2e:a5:80:04:56:30:54:4f:e7:56:e5:62:8f: 01:54:9e:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnnum9cKjCGu50FlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YmVkMmUzOWUtN2FkNC00MTdmLTkxNGQtZGU4MmY0NjRhZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlu22NHcTBRWeuNzCq3mokUydzfxv77mg9C/ oipOCLoFo22EH6AZirU2Gcf7LEt+BGyKauW5NGsEdZw3SAoN81SdnMEh1UGjJR9k DiG3E0a5wXBvt2kmpeQReDsYsoNjsJmJEVY5sPTexk37kHinsWJ4CuFLSJjq47/r 7xcC+nuKtCgu9jkPP+lXJPC6BtF1pQo525f2KGbMY9kcrWRDV2KSpnY7txHF1W1D c/QZDqIr9jMrMFoL4PX0ooFVgTDn6hNWTX+ixWuuZBU8ms9I2/eJJ7d8ASGT1X8g pgPCy14XjMy/LvK6F0mLERMATPhn5jrX5Zpnj8coEfSO6VGB+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBxub0jX+4CATE3u6DfuV/BbPba0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDBhMGNlMzUtOGMyZS0z ZjQzLWE0YzMtOGVjNmQ0YWZkZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUH0bwHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWO7K7UpPPwbcg7DQD2cegCJynrIXUyfBy7/J0SyIPcfoBj/PvfkLx ep8rNhN+fHOa0nHz5MB1Z6seTsmOiHvZdIAg04upqefpzOR27EjDm8Hb0fpNy27s XGGrF2SSUjQTU5Ox44GWZJBJZnoA/Tbd9v5QlrAjoOp7IFiNgAbvKXoM/Wt2Ngda PW+Bxx+q+i2s2fCw5/N4WonL8COum+hA973cPk0PNfMTNIiWJhyf2Vg2y4AWQ5rk PZaDjNSexdsghx9uBpkKbG8HD8XES+QT+z/gO6L2mtsvb4Q75HiWV4NoTmIVz92G n9vb2mhaGS6lgARWMFRP51blYo8BVJ6c -----END CERTIFICATE-----Generated at Sun Jun 15 15:57:06 2025 by rpki-client