$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa File: a00e1f15-edb2-3c13-b022-338fbe6d0327.roa (raw, json) Hash identifier: 1/UHB0bYM4cgGVvwaCqCmwaKkG7IcQ100JFzMb2Bc1M= Subject key identifier: E1:8C:A0:3D:18:CB:E3:52:AF:AA:47:0D:75:9B:87:D5:CC:38:BB:E4 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584A00DAC70E183C6D507F445700 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 8075 IP address blocks: 209.143.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c7:0e:18:3c:6d:50:7f:44:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=a18a18cb-cec7-458d-a6c4-08bbb81585d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:1a:4c:0a:00:8e:42:62:f4:33:e1:b7:37: 7a:82:02:ac:fa:6c:a3:17:c8:d0:b0:bc:f3:55:69: 77:0d:5b:92:83:2a:30:ba:90:1c:4f:c4:f3:7a:26: 51:95:5e:46:90:ec:c1:c1:15:4b:99:7d:25:5f:08: f7:f7:6f:31:14:58:7e:2f:5a:83:04:c1:d8:92:28: ba:c1:b5:7e:ab:91:e3:c3:e4:06:5f:a4:de:40:40: ef:74:fa:ab:e8:9b:47:82:04:55:fa:25:3c:26:6d: 62:e0:84:47:3a:40:52:19:e2:d4:20:82:08:52:a0: a3:27:26:3e:e4:65:5c:7b:de:cc:9c:04:11:6f:19: 62:3f:af:f2:1a:b0:77:20:06:b7:7e:0f:b2:60:bb: 1f:bb:34:55:0b:c1:7b:8f:e3:55:ea:da:b1:c3:d2: 4d:97:37:47:50:75:d6:c3:24:eb:4a:42:c1:69:6c: fa:06:0a:1a:cc:88:20:94:af:19:c5:69:ed:18:f6: b2:6f:08:62:70:80:89:53:3d:19:1d:62:9d:c0:a7: a0:5b:3b:78:ed:3b:ba:b4:bc:2d:af:cc:82:76:ec: 7d:86:d7:99:f2:ed:b9:69:f3:e5:55:a4:4d:29:57: c8:93:a9:3d:a9:77:fc:61:47:f9:eb:56:48:c8:7c: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:A0:3D:18:CB:E3:52:AF:AA:47:0D:75:9B:87:D5:CC:38:BB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:73:64:79:86:ba:b8:30:eb:8a:70:7d:93:b4:d1:c1:dd:3d: b8:2c:75:a7:29:68:c1:ed:ca:e6:77:e6:aa:1c:b9:d5:a0:a6: b0:32:90:6c:78:b0:fe:4e:d9:ae:27:90:61:7c:1b:2a:ca:fa: e7:7e:1b:4c:bd:1c:4a:95:60:9c:c4:00:06:91:81:77:c9:90: 2b:63:42:57:8b:cb:a5:ff:72:06:0a:85:bf:52:76:54:56:d4: 87:8d:b3:6b:8c:ed:79:4f:45:15:b1:ff:e6:bf:ef:9c:1f:3d: 77:3d:66:84:e2:7b:b3:53:36:3b:c1:e7:67:bf:5b:23:8f:65: 97:77:67:8f:e9:83:1d:e7:09:88:90:d2:96:02:5f:9d:65:08: 7b:a3:c6:ce:e5:11:fb:01:c7:d8:77:e1:5a:00:92:fe:fe:2a: 55:74:93:38:ec:75:55:e7:2b:82:12:db:5f:24:4b:ae:73:fb: 22:e7:63:27:69:5c:49:b0:2e:ae:cd:22:6c:2f:62:d2:c5:f9: 2e:3b:73:40:40:f0:4f:30:0f:8a:91:5a:fa:ca:d4:cd:c9:c6: 9b:d3:2b:81:de:1a:fb:fc:20:2d:2f:36:00:b9:1b:c3:f7:b8: 66:a9:a7:51:e1:f2:32:8c:17:fd:14:4a:ae:6f:b5:a1:99:ff: c6:88:d1:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2scOGDxtUH9EVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YTE4YTE4Y2ItY2VjNy00NThkLWE2YzQtMDhiYmI4MTU4NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAUaTAoAjkJi9DPhtzd6ggKs+myjF8jQsLzz VWl3DVuSgyowupAcT8TzeiZRlV5GkOzBwRVLmX0lXwj3928xFFh+L1qDBMHYkii6 wbV+q5Hjw+QGX6TeQEDvdPqr6JtHggRV+iU8Jm1i4IRHOkBSGeLUIIIIUqCjJyY+ 5GVce97MnAQRbxliP6/yGrB3IAa3fg+yYLsfuzRVC8F7j+NV6tqxw9JNlzdHUHXW wyTrSkLBaWz6BgoazIgglK8ZxWntGPaybwhicICJUz0ZHWKdwKegWzt47Tu6tLwt r8yCdux9hteZ8u25afPlVaRNKVfIk6k9qXf8YUf561ZIyHymswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGMoD0Yy+NSr6pHDXWbh9XMOLvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvYTAwZTFmMTUtZWRiMi0z YzEzLWIwMjItMzM4ZmJlNmQwMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARzZHmGurgw64pwfZO00cHdPbgsdacpaMHtyuZ35qocudWgprAykGx4 sP5O2a4nkGF8GyrK+ud+G0y9HEqVYJzEAAaRgXfJkCtjQleLy6X/cgYKhb9SdlRW 1IeNs2uM7XlPRRWx/+a/75wfPXc9ZoTie7NTNjvB52e/WyOPZZd3Z4/pgx3nCYiQ 0pYCX51lCHujxs7lEfsBx9h34VoAkv7+KlV0kzjsdVXnK4IS218kS65z+yLnYydp XEmwLq7NImwvYtLF+S47c0BA8E8wD4qRWvrK1M3JxpvTK4HeGvv8IC0vNgC5G8P3 uGapp1Hh8jKMF/0USq5vtaGZ/8aI0Y4= -----END CERTIFICATE-----Generated at Sun Jun 15 20:39:24 2025 by rpki-client