$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json) Hash identifier: kefp4tjqXIXizbvUj3nCqGlpODgeV6M5MCI1zA3kNIE= Subject key identifier: 86:EE:83:F7:59:9F:BA:5E:FB:D1:02:D4:17:96:E7:1B:09:48:26:8B Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584A66C0756AF6D3813D56885C40 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 8075 IP address blocks: 209.143.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:75:6a:f6:d3:81:3d:56:88:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=fe4eef8a-063e-4248-8838-c371a5934e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:83:98:9b:35:e2:22:b5:d7:8d:bc:33:7b: 9b:23:34:e2:33:09:f9:9d:40:36:ec:e8:a9:6c:71: ac:f2:10:eb:56:46:4d:a6:75:31:a4:bb:dc:73:0d: f0:25:fc:01:e6:6b:a5:f9:bb:0c:3a:a8:56:02:49: 06:3a:8f:80:3a:6c:02:12:6c:d2:7f:3c:51:d3:98: 80:3f:78:ed:9d:c7:72:2b:8d:99:c3:e8:e1:6f:82: 54:05:5a:4d:45:44:9f:73:e2:66:aa:63:f8:cb:26: a0:33:50:85:d6:01:3c:68:ce:96:81:2e:47:f3:a1: 42:7b:4a:a2:19:37:9e:82:2a:3b:23:3e:10:77:21: 17:69:de:61:93:63:4c:be:74:1e:9f:a6:75:68:6d: f4:52:fa:08:d1:c6:a9:7c:f7:d4:af:23:8e:69:18: 77:48:69:32:97:c7:34:e6:96:a5:31:ef:ac:61:f3: bd:fc:63:95:84:72:af:d9:1b:4e:f0:88:07:eb:63: dc:7c:86:f7:9a:59:8e:9e:1b:6a:42:19:81:47:68: ca:40:4a:7b:af:ab:97:a4:21:40:90:cc:9e:b1:89: 38:61:f1:e7:0e:95:a6:6f:f2:73:8a:53:b9:9a:d8: bf:c6:1d:ae:6e:6a:77:e3:1e:50:00:8a:68:ab:6f: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:83:F7:59:9F:BA:5E:FB:D1:02:D4:17:96:E7:1B:09:48:26:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6b:5a:f9:ae:a8:1e:bd:11:c1:b0:19:83:7a:af:14:13:a2: 4c:64:26:0b:49:43:a5:7a:37:d6:ad:27:bd:e6:93:bf:fd:57: 42:43:63:63:74:3a:09:3e:1b:fc:a4:7f:45:c4:6e:69:7a:ae: 7b:12:91:18:03:09:5e:83:50:dd:3b:3e:42:30:49:d4:08:3c: 18:d6:77:90:13:15:92:fa:dc:43:47:39:52:1c:b8:d4:58:9b: ec:24:8a:5a:32:97:f9:47:4f:04:ee:a7:33:8e:89:f7:97:f1: ee:86:50:dd:fd:93:07:e8:fc:ba:44:40:3b:39:b5:66:53:a4: c1:99:92:d6:96:86:a5:f9:c7:9f:ff:c4:04:bc:93:f0:85:66: 95:bc:51:39:44:30:9d:e1:90:03:6a:70:49:e9:52:87:59:0c: 26:c6:75:50:70:1e:f2:8e:6d:43:50:be:11:a1:3e:ef:4c:e7: 2a:55:30:18:99:2c:c6:c1:36:3b:d9:27:c1:19:a8:78:29:a9: 7a:53:f9:ae:fb:86:63:50:7f:7b:ff:ef:18:d4:44:f5:02:33: 5e:74:b6:7b:02:6f:df:4c:e6:2d:df:28:79:65:b7:d4:8d:f9: 03:f5:f5:fd:7c:a7:1c:46:b8:40:a9:15:c3:31:c5:26:83:2c: 28:8a:04:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHVq9tOBPVaIXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZmU0ZWVmOGEtMDYzZS00MjQ4LTg4MzgtYzM3MWE1OTM0ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlViDmJs14iK11428M3ubIzTiMwn5nUA27Oip bHGs8hDrVkZNpnUxpLvccw3wJfwB5mul+bsMOqhWAkkGOo+AOmwCEmzSfzxR05iA P3jtncdyK42Zw+jhb4JUBVpNRUSfc+JmqmP4yyagM1CF1gE8aM6WgS5H86FCe0qi GTeegio7Iz4QdyEXad5hk2NMvnQen6Z1aG30UvoI0capfPfUryOOaRh3SGkyl8c0 5palMe+sYfO9/GOVhHKv2RtO8IgH62PcfIb3mlmOnhtqQhmBR2jKQEp7r6uXpCFA kMyesYk4YfHnDpWmb/JzilO5mti/xh2ubmp34x5QAIpoq2+2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbug/dZn7pe+9EC1BeW5xsJSCaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMWE3MDRkMWMtNGU3OS0z Y2ZiLWIzM2YtZjczMjVhNWE3ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFrWvmuqB69EcGwGYN6rxQTokxkJgtJQ6V6N9atJ73mk7/9V0JDY2N0 Ogk+G/ykf0XEbml6rnsSkRgDCV6DUN07PkIwSdQIPBjWd5ATFZL63ENHOVIcuNRY m+wkiloyl/lHTwTupzOOifeX8e6GUN39kwfo/LpEQDs5tWZTpMGZktaWhqX5x5// xAS8k/CFZpW8UTlEMJ3hkANqcEnpUodZDCbGdVBwHvKObUNQvhGhPu9M5ypVMBiZ LMbBNjvZJ8EZqHgpqXpT+a77hmNQf3v/7xjURPUCM150tnsCb99M5i3fKHllt9SN +QP19f18pxxGuECpFcMxxSaDLCiKBP4= -----END CERTIFICATE-----Generated at Thu Jul 10 06:34:43 2025 by rpki-client