$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa File: 40c350d8-3bc0-3793-8928-ecb678b7c49c.roa (raw, json) Hash identifier: KM7/bnX0gkYuX/Jdq4jKI4KV8Cd2rDBvPf9bXwcbwZs= Subject key identifier: 70:30:DD:D0:E8:6C:FD:8A:15:FD:D7:7C:D8:69:EB:C9:0C:94:CD:72 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584B4AF13C4C15F4701CFDA101B0 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa Signing time: Tue 23 Sep 2025 18:43:35 +0000 ROA not before: Tue 23 Sep 2025 18:43:35 +0000 ROA not after: Mon 22 Dec 2025 19:43:35 +0000 asID: 14593 IP address blocks: 204.48.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:f1:3c:4c:15:f4:70:1c:fd:a1:01:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Sep 23 18:43:35 2025 GMT Not After : Dec 22 19:43:35 2025 GMT Subject: CN=6bd997bb-8b89-46d9-b6dd-4c76d11c5d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:56:a3:67:50:ca:61:0d:36:e8:05:50:d0: 1a:66:19:96:a4:fc:13:8d:f1:15:ee:96:a7:02:15: ab:51:f0:1c:76:94:34:15:d8:a0:16:b8:de:db:6d: 53:5d:93:88:ee:c9:78:c5:34:4a:7b:76:3d:19:9c: 45:e9:92:69:6e:7f:1b:30:d3:bd:45:cd:d9:0a:d2: bc:5c:f5:75:c1:1c:ae:4c:12:3d:12:a7:c9:5b:33: 07:57:7f:49:e5:c9:96:94:94:69:bb:f4:d2:15:86: 10:d1:6c:a6:7f:1a:36:ae:3c:24:79:c6:bd:1e:51: 9e:f6:3c:01:4a:7b:eb:2f:60:5d:a3:e2:cf:e1:8e: bf:a6:cc:3b:7f:23:19:27:16:29:09:a3:d0:3d:9e: 3d:14:d9:e7:3e:d0:9e:6c:c6:0f:c5:78:99:e8:06: 95:dc:30:98:c7:be:e6:63:0d:cb:a0:5d:79:6f:4c: 95:f0:9d:26:e2:ad:2a:28:e1:44:b9:7e:90:bf:e0: 47:01:65:b7:25:9b:55:80:a9:3b:f7:be:e4:a5:48: b9:9d:20:07:8d:24:69:2a:16:f2:56:ee:76:0e:05: f7:df:25:74:ef:af:fd:42:fc:1d:85:a3:5e:f4:eb: 43:9a:fb:a6:04:4f:30:00:48:e8:d6:41:21:17:c2: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:DD:D0:E8:6C:FD:8A:15:FD:D7:7C:D8:69:EB:C9:0C:94:CD:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 204.48.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ec:cc:53:84:63:20:6e:d9:0a:fd:7e:7f:aa:a2:67:85:76: 14:ae:ca:a3:8f:ed:aa:2a:60:3a:ef:6d:14:d9:8d:df:ef:b9: ff:6f:a0:48:b9:04:fb:3d:09:ff:40:9c:5e:ff:62:c0:b3:ec: 76:e1:ac:5f:12:10:14:9c:fb:b7:d3:ed:15:2f:d7:8a:ad:68: 81:25:6e:20:51:e7:04:f8:fb:f2:37:12:04:f4:e6:b9:5f:02: 05:e1:0f:21:c3:09:d2:6e:b7:da:51:d5:fb:5b:db:d9:70:aa: 2e:c7:e7:b5:56:cb:f6:44:7b:34:cd:27:e0:ab:69:9b:3e:9a: 20:cd:e5:f4:e6:04:bd:a3:ac:19:a4:e2:c7:ff:e9:b3:62:fd: 9a:24:3d:c8:96:4d:7a:98:93:62:27:8a:1d:3f:00:2a:9b:6e: f7:6e:c1:94:b9:b1:88:69:40:34:76:6f:88:2f:c2:d8:51:da: 0f:4d:80:0d:cc:5d:1e:ac:d3:9f:f8:38:73:f1:95:11:c6:4f: 25:55:bb:78:3f:f6:b6:af:ca:a5:28:7b:73:3c:57:5e:a4:41: 36:c7:3c:c4:d0:29:cf:ae:9f:0f:13:ff:04:86:bf:0b:15:65: 27:9e:0f:2c:31:40:e8:81:e1:57:4d:fa:16:b8:47:fc:f3:92: 9b:59:29:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtK8TxMFfRwHP2hAbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MDkyMzE4NDMzNVoXDTI1MTIyMjE5NDMzNVowLzEtMCsGA1UEAxMk NmJkOTk3YmItOGI4OS00NmQ5LWI2ZGQtNGM3NmQxMWM1ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbJWo2dQymENNugFUNAaZhmWpPwTjfEV7pan AhWrUfAcdpQ0FdigFrje221TXZOI7sl4xTRKe3Y9GZxF6ZJpbn8bMNO9Rc3ZCtK8 XPV1wRyuTBI9EqfJWzMHV39J5cmWlJRpu/TSFYYQ0Wymfxo2rjwkeca9HlGe9jwB SnvrL2Bdo+LP4Y6/psw7fyMZJxYpCaPQPZ49FNnnPtCebMYPxXiZ6AaV3DCYx77m Yw3LoF15b0yV8J0m4q0qKOFEuX6Qv+BHAWW3JZtVgKk7977kpUi5nSAHjSRpKhby Vu52DgX33yV076/9QvwdhaNe9OtDmvumBE8wAEjo1kEhF8IhvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAw3dDobP2KFf3XfNhp68kMlM1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvNDBjMzUwZDgtM2JjMC0z NzkzLTg5MjgtZWNiNjc4YjdjNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzDAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDszFOEYyBu2Qr9fn+qomeFdhSuyqOP7aoqYDrvbRTZjd/vuf9voEi5 BPs9Cf9AnF7/YsCz7HbhrF8SEBSc+7fT7RUv14qtaIElbiBR5wT4+/I3EgT05rlf AgXhDyHDCdJut9pR1ftb29lwqi7H57VWy/ZEezTNJ+CraZs+miDN5fTmBL2jrBmk 4sf/6bNi/ZokPciWTXqYk2Inih0/ACqbbvduwZS5sYhpQDR2b4gvwthR2g9NgA3M XR6s05/4OHPxlRHGTyVVu3g/9ravyqUoe3M8V16kQTbHPMTQKc+unw8T/wSGvwsV ZSeeDywxQOiB4VdN+ha4R/zzkptZKf0= -----END CERTIFICATE-----Generated at Thu Oct 9 20:08:31 2025 by rpki-client