$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa File: 40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa (raw, json) Hash identifier: VeLARfSi5qp9B5stP2T/qIEn8GovcswVpNjxfzNGvrM= Subject key identifier: 84:49:60:80:3F:6E:4A:06:25:B0:5B:03:82:1F:2F:69:A6:D1:D4:6D Certificate issuer: /CN=c0737391-61e0-4d30-9aa1-7caa06980033 Certificate serial: 010D0C9F4328584B328C3917942FD2DBA98A3E00 Authority key identifier: 4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 14041 IP address blocks: 204.228.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:39:17:94:2f:d2:db:a9:8a:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0737391-61e0-4d30-9aa1-7caa06980033 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=c1b3d1c2-ccb1-4175-b7bc-09b30b1434f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a9:2d:25:ee:41:bf:ae:26:e4:60:9d:cd:d9: b2:be:8d:46:49:b2:54:c9:6f:b0:f9:91:64:a3:72: 91:19:3b:22:40:18:7a:35:33:c0:fa:21:a1:c9:51: 86:4d:be:8b:b2:22:cf:0b:f8:4c:b1:89:c6:20:19: d8:0e:78:67:89:e2:ce:85:b5:67:26:30:93:2c:5a: 78:1c:0c:4b:33:a2:6f:c8:85:7c:05:d1:f4:cd:c4: 77:ce:5f:d0:af:aa:8f:a9:9f:95:37:dc:b9:58:ed: 23:a2:5a:2d:57:5c:b6:24:d9:76:82:cd:c2:77:27: 66:93:bf:26:cb:1c:e4:c5:3d:97:ed:2b:52:6e:b3: e0:c0:d1:ef:c1:ed:b2:bb:35:b8:84:a6:22:9a:bd: c7:6b:ab:f8:0b:ec:7f:c1:71:74:59:fb:aa:8c:6c: 86:5a:b5:6d:77:73:f3:9d:a1:23:91:42:47:92:87: 92:16:fc:58:68:c8:20:b9:bb:27:66:32:1a:cf:c7: 9b:be:3a:22:e0:92:c0:3d:d1:b8:52:7f:e3:9c:e4: 81:a3:54:9e:39:f7:02:90:d8:22:4a:af:a1:5b:5d: c0:1b:b2:2e:2a:80:c9:f2:6f:73:b4:a5:69:ba:12: 35:60:1d:6c:6e:53:d4:26:1e:73:a0:2d:83:2c:68: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:49:60:80:3F:6E:4A:06:25:B0:5B:03:82:1F:2F:69:A6:D1:D4:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl X509v3 Authority Key Identifier: keyid:4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer sbgp-ipAddrBlock: critical IPv4: 204.228.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d6:fe:f2:86:19:20:2e:90:6d:5c:40:17:ec:1b:c9:42:58: a3:33:01:f2:21:db:55:26:11:19:f5:1d:b8:8e:6e:17:37:77: a7:51:0e:24:ba:03:90:e5:8d:76:2f:0a:6e:ba:f4:f2:63:84: 48:5c:0d:15:53:9c:07:a4:ef:d1:21:f2:24:02:62:23:b6:63: ca:d7:3b:d3:39:f7:b8:cc:52:a1:3f:4d:5b:ef:88:17:f8:f3: 79:be:05:7e:92:8a:30:43:8a:7f:b3:53:1e:32:92:9a:b9:58: ab:90:7e:d6:4b:b2:1a:ad:f5:63:42:2c:75:94:2e:b3:d5:72: 0c:b9:52:0c:40:6b:c6:bb:d6:21:d8:49:ea:72:89:1f:a6:3c: 4d:97:c7:53:aa:4e:8e:e4:f5:45:57:40:2c:b5:21:98:eb:6d: cf:73:cf:70:99:f1:b2:c8:0b:1f:80:3a:05:34:40:f1:6d:a8: 92:8d:c1:97:8b:30:a3:a2:93:9c:8d:89:46:eb:24:fd:44:85: d2:83:ce:02:25:3b:b7:f6:99:48:6f:19:bc:b2:a2:ce:b7:44: 91:57:06:b7:a4:60:71:6e:62:79:c1:27:58:4f:20:fe:2a:85: a6:d6:56:13:ac:a8:82:5f:d0:42:98:cc:74:49:1f:a1:7f:c0: 62:49:66:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDkXlC/S26mKPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3MzczOTEtNjFlMC00ZDMwLTlhYTEtN2NhYTA2OTgw MDMzMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YzFiM2QxYzItY2NiMS00MTc1LWI3YmMtMDliMzBiMTQzNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKktJe5Bv64m5GCdzdmyvo1GSbJUyW+w+ZFk o3KRGTsiQBh6NTPA+iGhyVGGTb6LsiLPC/hMsYnGIBnYDnhnieLOhbVnJjCTLFp4 HAxLM6JvyIV8BdH0zcR3zl/Qr6qPqZ+VN9y5WO0jolotV1y2JNl2gs3Cdydmk78m yxzkxT2X7StSbrPgwNHvwe2yuzW4hKYimr3Ha6v4C+x/wXF0WfuqjGyGWrVtd3Pz naEjkUJHkoeSFvxYaMggubsnZjIaz8ebvjoi4JLAPdG4Un/jnOSBo1SeOfcCkNgi Sq+hW13AG7IuKoDJ8m9ztKVpuhI1YB1sblPUJh5zoC2DLGhNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRJYIA/bkoGJbBbA4IfL2mm0dRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMDcz NzM5MS02MWUwLTRkMzAtOWFhMS03Y2FhMDY5ODAwMzMvNDBjMzJlYWEtMjhhOC0z ZDhiLWFlOGYtYWYwM2I0ZjI4ODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzA3MzczOTEtNjFlMC00ZDMwLTlh YTEtN2NhYTA2OTgwMDMzL2MwNzM3MzkxLTYxZTAtNGQzMC05YWExLTdjYWEwNjk4 MDAzMy5jcmwwHwYDVR0jBBgwFoAUTvhwGyVe3LHsGMOOxMPqQF1RY54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMDczNzM5MS02MWUwLTRkMzAtOWFhMS03Y2Fh MDY5ODAwMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzORgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3W/vKGGSAukG1cQBfsG8lCWKMzAfIh21UmERn1HbiObhc3d6dRDiS6 A5DljXYvCm669PJjhEhcDRVTnAek79Eh8iQCYiO2Y8rXO9M597jMUqE/TVvviBf4 83m+BX6SijBDin+zUx4ykpq5WKuQftZLshqt9WNCLHWULrPVcgy5UgxAa8a71iHY SepyiR+mPE2Xx1OqTo7k9UVXQCy1IZjrbc9zz3CZ8bLICx+AOgU0QPFtqJKNwZeL MKOik5yNiUbrJP1EhdKDzgIlO7f2mUhvGbyyos63RJFXBrekYHFuYnnBJ1hPIP4q habWVhOsqIJf0EKYzHRJH6F/wGJJZog= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:27 2025 by rpki-client