$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa File: 480969e7-5db5-391b-a687-2a4105fe0786.roa (raw, json) Hash identifier: Te0uG8XTtYRugl5Hzxw7ICCq09f8ltjTSV0BGMpjcqs= Subject key identifier: 4E:1F:3F:BE:5D:C2:B5:4A:2B:B8:18:0F:36:FC:86:56:E2:E2:89:E2 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584A5765D3B7AC3D0719C6636C80 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 168.203.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d3:b7:ac:3d:07:19:c6:63:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=5317d214-7767-4e10-ab7b-df55cc5fbc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:1e:3b:f0:3b:d8:85:6b:88:99:43:30:cf: 8a:2d:eb:99:2d:e8:ab:18:c0:2c:23:77:bb:c9:55: de:c4:c5:0d:73:38:13:dc:d0:87:fe:29:9a:d0:53: 81:46:f5:be:d8:c7:de:69:39:9b:73:36:6a:12:f6: e3:ea:1f:cd:6e:46:14:3d:71:01:37:c8:2c:2d:09: a2:b2:c9:41:52:1f:ef:fd:dd:68:e3:5c:77:78:78: 32:8d:31:ae:14:5f:4c:86:43:e0:a6:c8:29:9d:da: 80:41:a2:d6:fe:88:67:74:aa:09:c6:17:49:e8:0f: 63:54:5b:3f:74:92:b6:5b:4f:d4:39:f5:11:b0:cc: 44:eb:24:ec:d9:0d:94:6f:cc:79:2c:8a:94:c9:df: 54:e8:29:fc:12:3c:08:1c:40:ce:01:e9:dc:a5:4d: 92:19:93:a4:5e:27:38:af:bc:82:0b:fe:e0:72:4b: e6:ad:54:0b:49:33:b0:73:23:e9:78:8d:3f:9b:15: cb:c7:82:d5:ef:f7:ca:92:ae:5f:52:4d:b9:b1:6f: 22:d4:03:9c:52:20:33:36:53:08:f9:f1:87:79:4e: 39:a2:11:e6:05:78:c0:8e:43:c3:0e:3e:a3:e7:72: 6c:34:26:d7:e6:d0:ca:bb:a7:67:8f:07:03:ba:6d: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1F:3F:BE:5D:C2:B5:4A:2B:B8:18:0F:36:FC:86:56:E2:E2:89:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b2:e3:63:80:4d:c0:6c:c7:89:ee:f2:fd:16:35:84:61:a0: cc:b4:38:42:33:38:11:d2:c7:ef:46:6c:7a:21:a5:2a:1e:64: cc:fa:b5:44:1e:68:86:72:78:7e:7d:93:4e:5f:b5:ca:9d:14: 83:72:7e:ed:b1:9d:e0:cd:9f:46:3d:9a:62:51:10:cf:a7:c7: 0b:be:7f:38:8d:92:43:3d:dc:ff:b8:10:f0:1f:c7:d7:1b:91: fe:39:78:5c:7e:6e:f2:ef:f1:1f:64:35:fc:b0:0e:8f:c7:a8: 0d:71:e2:55:49:55:18:72:f7:c9:4d:3e:a3:8c:d7:bb:d1:a1: fa:56:8b:f1:e8:ae:57:0c:ab:d9:08:b5:8c:9f:88:2a:4a:c3: 8e:b6:95:6c:0f:0f:bb:23:5a:31:76:12:ad:8c:f2:7c:a2:db: 0e:49:a3:98:76:fc:b6:e3:cf:1a:77:3b:c0:f0:50:09:24:59: 9f:06:7b:9a:f3:d8:b8:5e:f8:9b:66:af:73:20:fb:57:89:aa: 7e:25:7e:6a:44:87:4e:f8:8d:c2:3a:9c:f4:05:71:1b:14:bd: 6f:1a:77:1a:c1:ec:1c:53:ec:b7:e7:7d:48:aa:13:d8:3a:64: 8a:1e:b8:77:e6:5c:1d:a5:f6:8a:5b:65:93:d6:76:05:9d:1a: 46:ab:ff:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdO3rD0HGcZjbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NTMxN2QyMTQtNzc2Ny00ZTEwLWFiN2ItZGY1NWNjNWZiYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDgeO/A72IVriJlDMM+KLeuZLeirGMAsI3e7 yVXexMUNczgT3NCH/ima0FOBRvW+2MfeaTmbczZqEvbj6h/NbkYUPXEBN8gsLQmi sslBUh/v/d1o41x3eHgyjTGuFF9MhkPgpsgpndqAQaLW/ohndKoJxhdJ6A9jVFs/ dJK2W0/UOfURsMxE6yTs2Q2Ub8x5LIqUyd9U6Cn8EjwIHEDOAencpU2SGZOkXic4 r7yCC/7gckvmrVQLSTOwcyPpeI0/mxXLx4LV7/fKkq5fUk25sW8i1AOcUiAzNlMI +fGHeU45ohHmBXjAjkPDDj6j53JsNCbX5tDKu6dnjwcDum1KvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4fP75dwrVKK7gYDzb8hlbi4oniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvNDgwOTY5ZTctNWRiNS0z OTFiLWE2ODctMmE0MTA1ZmUwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyy42OATcBsx4nu8v0WNYRhoMy0OEIzOBHSx+9GbHohpSoeZMz6tUQe aIZyeH59k05ftcqdFINyfu2xneDNn0Y9mmJREM+nxwu+fziNkkM93P+4EPAfx9cb kf45eFx+bvLv8R9kNfywDo/HqA1x4lVJVRhy98lNPqOM17vRofpWi/HorlcMq9kI tYyfiCpKw462lWwPD7sjWjF2Eq2M8nyi2w5Jo5h2/Lbjzxp3O8DwUAkkWZ8Ge5rz 2Lhe+Jtmr3Mg+1eJqn4lfmpEh074jcI6nPQFcRsUvW8adxrB7BxT7LfnfUiqE9g6 ZIoeuHfmXB2l9opbZZPWdgWdGkar/1o= -----END CERTIFICATE-----Generated at Tue Jul 1 18:30:36 2025 by rpki-client