$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa File: 40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa (raw, json) Hash identifier: nKscTlUSg7QgW2YYFkBtELCw1dTfIRhtC+cbSF9sL9U= Subject key identifier: CB:2F:2B:62:9C:26:9C:1D:30:C4:72:04:A2:9F:E3:F1:6E:41:63:14 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A6C55DCAC0A98149C3D8D6A00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 5738 IP address blocks: 216.114.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dc:ac:0a:98:14:9c:3d:8d:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=8ddfd567-7574-4a65-baa4-6131132bcf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:b5:5d:d0:97:63:4c:e1:3d:cb:a2:d9:85: e4:30:ab:c1:20:32:b3:27:66:c4:bd:61:85:4c:b6: 9f:e9:6c:03:a4:34:4e:07:b9:99:65:0b:77:b1:f0: 5d:58:ac:44:03:f7:58:13:6c:f2:e0:d5:52:69:ef: 3b:36:19:13:18:2b:65:0c:2f:c1:12:ac:b8:da:16: c9:50:06:0a:68:0a:28:11:8e:be:27:e3:96:67:e9: 76:9e:8c:ba:e0:6f:2a:19:fa:8e:56:26:db:4b:3a: c0:b1:17:cd:f5:e1:87:f4:32:94:b1:97:eb:1f:5f: 4d:02:55:4b:13:91:96:6d:b8:33:8f:09:c8:62:40: 81:81:34:cd:f0:c6:65:0c:62:97:09:15:f6:1e:a8: 09:df:6c:cc:02:c7:8c:31:86:48:6d:84:e2:fb:80: cc:dd:d4:39:67:cf:23:b7:49:b0:b4:39:2b:84:81: 83:ae:a7:2d:87:a3:7b:fe:b9:29:d4:23:44:69:90: 7e:72:a2:3e:f5:f3:3c:4e:c7:b6:5c:fc:e6:c6:f3: 8f:d3:da:05:75:fc:da:fa:09:25:a8:9e:9d:87:f6: 28:4f:40:5c:7c:c6:b4:57:cb:a8:59:4f:82:8d:47: 5e:90:27:ce:8c:82:0f:70:26:24:76:1e:ba:18:d2: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:2B:62:9C:26:9C:1D:30:C4:72:04:A2:9F:E3:F1:6E:41:63:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b5:0f:80:2e:6b:35:be:1c:06:41:ae:f0:62:bb:0d:73:68: e0:4b:04:cd:b8:76:ad:c3:be:df:af:a0:41:53:fb:02:17:18: 9e:4e:f9:0d:9c:23:29:4a:ad:e1:8e:6d:e7:c5:6b:31:81:05: 58:13:a8:24:01:6e:97:79:61:9e:57:60:54:8a:12:de:76:7d: 93:ee:e2:24:71:18:25:99:3c:08:d1:4b:c2:4a:24:6e:c4:54: 7f:b6:bb:7b:ae:95:a2:0c:67:23:54:fa:1f:fc:e2:bc:98:e5: 72:4b:15:f8:0d:de:da:b8:35:67:92:5f:d1:ec:e7:95:24:09: b0:c5:78:b1:a1:af:04:2c:05:8d:f2:a4:bd:22:20:39:85:ba: 23:44:59:bf:f9:de:e2:1e:d5:2f:b1:19:60:93:35:b8:b5:be: e8:9a:17:d8:c6:a4:9b:41:c3:82:36:61:f8:e7:38:23:f0:ff: 1f:23:ef:b7:c9:5f:e8:66:e3:02:04:44:82:0d:5e:56:3a:ce: e5:d4:b5:cd:29:6b:55:84:a3:28:05:17:a5:57:f5:92:7a:3c: 27:0d:bf:dc:ab:80:27:63:16:ef:5c:22:ae:89:b4:0e:c4:26: c7:44:5d:cb:7d:d9:89:1f:93:78:a6:f4:8d:ba:d2:91:c2:4e: 59:39:b2:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdysCpgUnD2NagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OGRkZmQ1NjctNzU3NC00YTY1LWJhYTQtNjEzMTEzMmJjZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE21XdCXY0zhPcui2YXkMKvBIDKzJ2bEvWGF TLaf6WwDpDROB7mZZQt3sfBdWKxEA/dYE2zy4NVSae87NhkTGCtlDC/BEqy42hbJ UAYKaAooEY6+J+OWZ+l2noy64G8qGfqOVibbSzrAsRfN9eGH9DKUsZfrH19NAlVL E5GWbbgzjwnIYkCBgTTN8MZlDGKXCRX2HqgJ32zMAseMMYZIbYTi+4DM3dQ5Z88j t0mwtDkrhIGDrqcth6N7/rkp1CNEaZB+cqI+9fM8Tse2XPzmxvOP09oFdfza+gkl qJ6dh/YoT0BcfMa0V8uoWU+CjUdekCfOjIIPcCYkdh66GNJP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsvK2KcJpwdMMRyBKKf4/FuQWMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDBmM2NiZWUtOTdlYS0z Y2ZmLTlhYTEtOWIzYzFlM2NjM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2HKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW1D4AuazW+HAZBrvBiuw1zaOBLBM24dq3Dvt+voEFT+wIXGJ5O+Q2c IylKreGObefFazGBBVgTqCQBbpd5YZ5XYFSKEt52fZPu4iRxGCWZPAjRS8JKJG7E VH+2u3uulaIMZyNU+h/84ryY5XJLFfgN3tq4NWeSX9Hs55UkCbDFeLGhrwQsBY3y pL0iIDmFuiNEWb/53uIe1S+xGWCTNbi1vuiaF9jGpJtBw4I2YfjnOCPw/x8j77fJ X+hm4wIERIINXlY6zuXUtc0pa1WEoygFF6VX9ZJ6PCcNv9yrgCdjFu9cIq6JtA7E JsdEXct92Ykfk3im9I260pHCTlk5stU= -----END CERTIFICATE-----Generated at Wed Jul 9 20:34:51 2025 by rpki-client