$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa File: 40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa (raw, json) Hash identifier: A4zJLtwo7ZE4wmO3iJnWpzt/gnjL3nQyxg2uP78Od+Y= Subject key identifier: 52:CA:7F:70:8A:18:99:F1:60:F9:5E:44:9A:3B:13:C7:21:C7:4F:21 Certificate issuer: /CN=c0737391-61e0-4d30-9aa1-7caa06980033 Certificate serial: 010D0C9F4328584A51D06C9E356A11E782EB9B00 Authority key identifier: 4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 14041 IP address blocks: 204.228.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6c:9e:35:6a:11:e7:82:eb:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0737391-61e0-4d30-9aa1-7caa06980033 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=0a3c06b6-b627-450a-9a79-0a3ea2df8ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:67:62:66:50:d4:48:fe:1a:d3:82:48:d3: 20:4f:9e:f6:8a:c4:f1:56:33:71:68:13:d9:98:e8: ab:fb:99:eb:23:c3:c5:28:b1:8c:26:aa:d9:38:be: 9d:8d:38:66:ee:94:35:4d:c1:a1:34:79:8f:ea:e3: 8c:0c:94:07:7c:81:c5:25:a5:6f:75:fa:93:f1:b7: 88:93:06:4f:fa:40:f0:3c:bc:45:a9:a4:dc:b9:b1: 33:76:3e:bb:05:f4:4b:83:23:1c:78:44:49:6d:39: bd:70:ba:83:a8:70:1a:ed:16:a1:99:da:2a:f1:2a: b5:0c:2d:21:78:b8:96:8b:27:bb:0d:ef:9f:ca:57: b8:05:ff:dd:68:46:4b:a3:af:fa:3d:0f:d2:39:f4: 38:2d:62:88:45:9c:02:92:21:fb:b5:71:74:82:c1: 0d:11:85:06:9e:37:2d:75:b2:89:df:8a:6f:b0:f2: fe:c5:03:6d:ca:95:1d:8b:fb:50:03:2d:84:e7:ed: cc:bf:31:2f:ee:1e:d9:00:1e:d2:13:8e:5d:75:74: e5:82:84:c7:2c:93:bb:0b:b0:ce:a3:c7:96:23:b7: 83:75:ec:07:cf:19:69:c8:e2:6b:ac:22:9d:e1:87: d9:ae:6b:ab:6b:e2:cc:4e:48:83:76:63:65:26:cb: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CA:7F:70:8A:18:99:F1:60:F9:5E:44:9A:3B:13:C7:21:C7:4F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl X509v3 Authority Key Identifier: keyid:4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer sbgp-ipAddrBlock: critical IPv4: 204.228.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f9:bd:6f:6e:5a:3b:bd:2c:75:ec:80:cb:f7:29:15:2a:69: 4b:8a:1d:2d:0e:f1:a7:de:85:78:7d:8e:23:f9:3e:95:1d:db: 45:21:ba:9f:00:2d:76:7b:8b:0e:de:27:3e:51:85:9e:6c:fa: 86:28:c9:c4:19:0d:10:e3:22:c5:92:c5:20:8e:9e:42:51:9d: 65:d6:8f:af:a0:25:fa:a4:7f:de:91:78:c0:27:79:bc:a4:d2: 1c:05:8d:dc:af:e9:14:4e:1f:e0:de:7a:43:49:48:68:7a:ca: 77:b6:69:0e:cd:f2:cc:f2:01:a1:bb:37:63:df:10:85:a9:d7: c3:39:c6:37:0c:f2:f9:ea:85:de:b3:a6:31:02:45:09:0c:bb: d3:ec:c9:e1:d1:b5:a3:cd:15:66:f0:35:e3:7e:6f:42:8c:3c: 74:f0:2a:57:80:d1:f3:93:6c:ba:28:e6:c9:d2:20:bc:27:26: 37:4d:dd:d4:90:4e:6c:31:59:32:90:86:ab:d1:05:b8:bb:bd: 52:8a:70:56:05:57:0c:6b:71:2d:28:5c:aa:b1:d5:5f:84:ed: 8d:c4:36:90:46:80:27:24:03:61:95:56:42:c8:30:60:14:5e: 9b:b2:25:af:26:3e:22:38:14:87:70:82:54:86:8b:a9:37:01: 99:26:d6:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GyeNWoR54LrmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3MzczOTEtNjFlMC00ZDMwLTlhYTEtN2NhYTA2OTgw MDMzMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MGEzYzA2YjYtYjYyNy00NTBhLTlhNzktMGEzZWEyZGY4ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh9nYmZQ1Ej+GtOCSNMgT572isTxVjNxaBPZ mOir+5nrI8PFKLGMJqrZOL6djThm7pQ1TcGhNHmP6uOMDJQHfIHFJaVvdfqT8beI kwZP+kDwPLxFqaTcubEzdj67BfRLgyMceERJbTm9cLqDqHAa7Rahmdoq8Sq1DC0h eLiWiye7De+fyle4Bf/daEZLo6/6PQ/SOfQ4LWKIRZwCkiH7tXF0gsENEYUGnjct dbKJ34pvsPL+xQNtypUdi/tQAy2E5+3MvzEv7h7ZAB7SE45ddXTlgoTHLJO7C7DO o8eWI7eDdewHzxlpyOJrrCKd4YfZrmura+LMTkiDdmNlJstoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLKf3CKGJnxYPleRJo7E8chx08hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMDcz NzM5MS02MWUwLTRkMzAtOWFhMS03Y2FhMDY5ODAwMzMvNDBjMzJlYWEtMjhhOC0z ZDhiLWFlOGYtYWYwM2I0ZjI4ODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzA3MzczOTEtNjFlMC00ZDMwLTlh YTEtN2NhYTA2OTgwMDMzL2MwNzM3MzkxLTYxZTAtNGQzMC05YWExLTdjYWEwNjk4 MDAzMy5jcmwwHwYDVR0jBBgwFoAUTvhwGyVe3LHsGMOOxMPqQF1RY54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMDczNzM5MS02MWUwLTRkMzAtOWFhMS03Y2Fh MDY5ODAwMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzORgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX5vW9uWju9LHXsgMv3KRUqaUuKHS0O8afehXh9jiP5PpUd20Uhup8A LXZ7iw7eJz5RhZ5s+oYoycQZDRDjIsWSxSCOnkJRnWXWj6+gJfqkf96ReMAnebyk 0hwFjdyv6RROH+DeekNJSGh6yne2aQ7N8szyAaG7N2PfEIWp18M5xjcM8vnqhd6z pjECRQkMu9PsyeHRtaPNFWbwNeN+b0KMPHTwKleA0fOTbLoo5snSILwnJjdN3dSQ TmwxWTKQhqvRBbi7vVKKcFYFVwxrcS0oXKqx1V+E7Y3ENpBGgCckA2GVVkLIMGAU XpuyJa8mPiI4FIdwglSGi6k3AZkm1u0= -----END CERTIFICATE-----Generated at Thu Jul 10 10:59:40 2025 by rpki-client