$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa File: a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa (raw, json) Hash identifier: 3hffEDx7EJSt93vQT1l0uwsn7m2hZ7Adt9lt69d3ULY= Subject key identifier: 06:49:30:D0:EC:76:F2:D9:7D:BE:CB:F2:EF:9B:CF:A8:F3:0B:6C:9C Certificate issuer: /CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Certificate serial: 010D0C9F4328584A4AD58FACA08247EA89EFBCC0 Authority key identifier: E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 11370 IP address blocks: 199.201.225.0/24 maxlen: 24 2602:fa50::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:8f:ac:a0:82:47:ea:89:ef:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=6a7da11e-ee2a-4c75-93e9-a26a97e8700d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:04:fb:68:33:11:f5:64:89:6d:b8:9f:8c: 64:4c:f4:3b:19:47:82:ad:ba:fe:db:8b:7b:68:7d: 63:5b:22:69:b3:fd:a0:bd:ed:32:fb:95:12:2b:8a: ab:3a:92:fd:dd:de:b2:0b:aa:56:95:1d:27:91:1a: 99:c4:11:2d:0c:d4:a7:bb:7b:33:5a:8a:2d:a7:8e: de:9f:ad:5d:9f:14:f3:73:6e:99:74:82:a2:b0:31: 30:92:98:ca:80:24:0f:47:d9:4d:37:60:ca:81:24: 99:ae:d2:b6:2a:83:4c:93:e6:8b:fb:c1:a3:29:8c: 57:50:ff:4a:e3:3d:b2:73:66:c5:f3:57:d9:c2:11: 9f:d8:76:da:68:0e:dc:b6:19:f3:22:52:03:41:db: 97:39:70:14:26:d2:67:72:7e:c6:25:cc:83:78:53: 56:2e:3d:6c:93:a6:79:18:fb:be:39:15:0d:95:77: 53:95:31:55:c8:0f:4b:65:99:9f:3f:61:08:9e:7a: c9:a1:09:2d:ed:04:b6:b4:1e:a4:13:36:e1:33:f0: ae:d8:07:dc:88:f8:3b:49:12:67:4a:eb:d8:ce:8d: 97:2d:7e:6d:ff:a7:11:5b:32:4f:9e:8b:ea:51:67: 22:1d:0f:33:76:58:43:54:2c:74:98:21:78:d0:31: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:49:30:D0:EC:76:F2:D9:7D:BE:CB:F2:EF:9B:CF:A8:F3:0B:6C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl X509v3 Authority Key Identifier: keyid:E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer sbgp-ipAddrBlock: critical IPv4: 199.201.225.0/24 IPv6: 2602:fa50::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d4:00:a2:98:d3:e6:c3:ce:1e:f8:72:60:41:18:73:ca:00: 65:38:e0:41:ac:d7:8d:5b:bb:44:c2:f8:1e:ff:28:af:12:20: db:bc:80:58:39:76:4b:26:d4:73:19:9d:ec:b2:f3:a7:29:d0: b7:4e:78:65:c9:91:49:ed:1b:4c:15:22:95:21:b7:f5:8f:c3: fb:88:82:2f:ff:f1:ee:fc:f0:35:f1:c1:e5:ab:5a:f6:27:99: aa:ef:ce:bf:b9:23:58:32:e8:11:14:4a:19:d0:cc:ec:07:a7: bb:fe:40:99:1e:7c:6e:d6:4f:db:9f:eb:e9:64:20:c9:c9:92: c3:32:08:86:d8:3e:f8:98:0e:b1:e9:5f:51:5a:0b:41:74:c6: 92:90:fa:d1:54:a6:76:a5:64:b3:ec:60:28:46:a9:06:15:fa: 7f:cb:f4:59:c5:d4:06:08:96:99:a1:98:fc:0e:98:ad:d7:e0: ad:c3:f8:e0:2e:4a:29:16:61:98:ff:84:1f:b0:39:07:13:ab: c5:b9:6a:4a:14:1d:d6:60:c5:f6:0b:2c:ae:b3:b6:f2:0b:71: 8c:ab:f1:67:99:34:f4:98:48:e2:8e:b2:90:ca:4b:de:1e:13: 10:68:a9:f1:9b:45:75:b2:91:7e:68:3c:1e:b1:a7:de:43:1a: c1:74:15:1b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpK1Y+soIJH6onvvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZWY3NDAtODU5MS00MWU1LTg5ZDAtOWIwMjY2ZDNm Y2Y3MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk NmE3ZGExMWUtZWUyYS00Yzc1LTkzZTktYTI2YTk3ZTg3MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBUE+2gzEfVkiW24n4xkTPQ7GUeCrbr+24t7 aH1jWyJps/2gve0y+5USK4qrOpL93d6yC6pWlR0nkRqZxBEtDNSnu3szWootp47e n61dnxTzc26ZdIKisDEwkpjKgCQPR9lNN2DKgSSZrtK2KoNMk+aL+8GjKYxXUP9K 4z2yc2bF81fZwhGf2HbaaA7cthnzIlIDQduXOXAUJtJncn7GJcyDeFNWLj1sk6Z5 GPu+ORUNlXdTlTFVyA9LZZmfP2EInnrJoQkt7QS2tB6kEzbhM/Cu2AfciPg7SRJn SuvYzo2XLX5t/6cRWzJPnovqUWciHQ8zdlhDVCx0mCF40DHwIwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAZJMNDsdvLZfb7L8u+bz6jzC2ycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBl Zjc0MC04NTkxLTQxZTUtODlkMC05YjAyNjZkM2ZjZjcvYTE5ZWNiNGMtMWRiZi0z NmUzLWExOGEtYmRjMzVkMTI1NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwZWY3NDAtODU5MS00MWU1LTg5 ZDAtOWIwMjY2ZDNmY2Y3LzA0MGVmNzQwLTg1OTEtNDFlNS04OWQwLTliMDI2NmQz ZmNmNy5jcmwwHwYDVR0jBBgwFoAU5tlFAqSd+xLR9T9J8Vll47R/gUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBlZjc0MC04NTkxLTQxZTUtODlkMC05YjAy NjZkM2ZjZjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx8nhMA4E AgACMAgDBgAmAvpQADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCM1ACimNPmw84e+HJgQRhzygBlOOBBrNeN W7tEwvge/yivEiDbvIBYOXZLJtRzGZ3ssvOnKdC3TnhlyZFJ7RtMFSKVIbf1j8P7 iIIv//Hu/PA18cHlq1r2J5mq786/uSNYMugRFEoZ0MzsB6e7/kCZHnxu1k/bn+vp ZCDJyZLDMgiG2D74mA6x6V9RWgtBdMaSkPrRVKZ2pWSz7GAoRqkGFfp/y/RZxdQG CJaZoZj8Dpit1+Ctw/jgLkopFmGY/4QfsDkHE6vFuWpKFB3WYMX2Cyyus7byC3GM q/FnmTT0mEjijrKQykveHhMQaKnxm0V1spF+aDwesafeQxrBdBUb -----END CERTIFICATE-----Generated at Thu Jul 3 22:56:08 2025 by rpki-client