$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa File: c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa (raw, json) Hash identifier: RoLqH8a8D7zG80NWsYYX4sTfa/rHJeLKjspo6EWYPPk= Subject key identifier: F9:57:40:2F:77:8C:2F:E8:DA:0D:24:F5:67:40:ED:85:9C:4D:10:89 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584AA85BAEF1AFBE4DE6D89A3800 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 22742 IP address blocks: 199.241.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ae:f1:af:be:4d:e6:d8:9a:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=a3e4589f-32c7-49ba-a77c-5a12aa3b3577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:1e:5d:55:d8:33:fb:ab:af:32:df:e6:1b: 12:7a:ab:27:d9:03:58:a5:34:21:0b:72:df:b2:1f: 71:6b:39:d7:8e:1a:c6:39:ca:4d:64:bf:92:f4:f3: 99:a1:82:41:44:c9:82:4e:b0:a9:b0:3f:60:79:8a: e3:64:51:85:b7:9e:9d:bf:0d:4f:19:f9:98:fa:ed: 56:16:45:fc:72:90:b2:78:a9:8d:ef:d7:4b:03:9c: 75:be:da:20:f8:87:ee:4b:f7:3e:2c:f2:e5:0f:cd: d0:41:94:31:06:34:64:7c:32:41:5b:2f:b3:d8:9b: 57:6f:af:c1:87:4e:83:a0:51:b2:fa:a2:13:f8:2d: 37:1c:ef:7a:fa:03:26:67:69:0c:8f:c1:72:17:e7: ca:0f:c7:12:9f:ee:4b:cc:a3:03:8e:b3:89:72:ee: 89:f4:4f:0b:af:41:a1:90:e0:47:3e:94:2c:78:0c: c8:21:da:df:f6:3b:9a:bd:d3:48:99:e2:08:46:36: ae:08:69:7e:78:b6:e2:9f:aa:1c:f9:be:7e:fb:1a: 08:a0:8e:f8:a7:55:00:b9:36:5c:cd:9b:8b:d0:27: 29:bb:28:22:cf:04:df:91:82:24:a9:4e:fa:67:62: 4d:2f:53:eb:6b:b7:68:5e:00:95:23:be:3c:f4:17: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:57:40:2F:77:8C:2F:E8:DA:0D:24:F5:67:40:ED:85:9C:4D:10:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 199.241.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:dd:9c:54:f7:2a:53:15:d4:b2:af:0f:ce:3c:0d:3a:aa:74: 81:86:05:aa:9c:6b:64:fb:c4:1d:39:37:3a:c4:8c:0c:9a:66: d6:bd:83:4a:9f:08:df:31:f7:67:7f:59:58:58:14:35:38:b4: ad:58:62:cb:3c:95:86:01:ff:4c:e6:34:31:a8:d6:b1:34:cc: ac:da:3c:fb:a1:91:d5:d9:97:e5:1a:2f:89:30:86:97:cf:55: 8d:76:e6:61:0d:f7:bc:1f:86:70:6c:1c:68:27:7f:a5:b7:e7: 73:0b:47:b1:38:79:8a:7d:5e:97:a7:aa:ae:59:f6:95:d0:e9: 56:92:90:38:8a:2f:9f:86:f2:85:21:55:77:37:ec:a1:77:38: 6e:1b:5b:9f:a4:c3:b2:e9:5e:9c:30:d0:9a:07:b9:00:c6:ab: a7:30:1f:87:5d:04:f9:3f:e6:b0:02:36:0b:7b:41:d9:f5:85: 66:a4:9e:da:8a:31:99:e2:5a:90:b6:c3:38:8c:ac:26:7a:1b: 91:5b:4e:bb:81:bb:3c:25:62:6d:9c:79:2a:3c:24:58:6c:ab: fb:44:b4:1b:5f:d1:2a:00:aa:a4:6e:e4:33:34:43:f6:54:d3: 4e:34:46:5f:65:fe:f6:20:39:9b:da:13:fe:ea:b1:0e:63:96: f7:51:e6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW67xr75N5tiaOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YTNlNDU4OWYtMzJjNy00OWJhLWE3N2MtNWExMmFhM2IzNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz8eXVXYM/urrzLf5hsSeqsn2QNYpTQhC3Lf sh9xaznXjhrGOcpNZL+S9POZoYJBRMmCTrCpsD9geYrjZFGFt56dvw1PGfmY+u1W FkX8cpCyeKmN79dLA5x1vtog+IfuS/c+LPLlD83QQZQxBjRkfDJBWy+z2JtXb6/B h06DoFGy+qIT+C03HO96+gMmZ2kMj8FyF+fKD8cSn+5LzKMDjrOJcu6J9E8Lr0Gh kOBHPpQseAzIIdrf9juavdNImeIIRjauCGl+eLbin6oc+b5++xoIoI74p1UAuTZc zZuL0CcpuygizwTfkYIkqU76Z2JNL1Pra7doXgCVI7489Bf4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlXQC93jC/o2g0k9WdA7YWcTRCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYzhjZDZkMWUtZmNhNC0z YTA4LWEyOTYtNGM2YjYyZGQyZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILdnFT3KlMV1LKvD848DTqqdIGGBaqca2T7xB05NzrEjAyaZta9g0qf CN8x92d/WVhYFDU4tK1YYss8lYYB/0zmNDGo1rE0zKzaPPuhkdXZl+UaL4kwhpfP VY125mEN97wfhnBsHGgnf6W353MLR7E4eYp9Xpenqq5Z9pXQ6VaSkDiKL5+G8oUh VXc37KF3OG4bW5+kw7LpXpww0JoHuQDGq6cwH4ddBPk/5rACNgt7Qdn1hWakntqK MZniWpC2wziMrCZ6G5FbTruBuzwlYm2ceSo8JFhsq/tEtBtf0SoAqqRu5DM0Q/ZU 0040Rl9l/vYgOZvaE/7qsQ5jlvdR5o4= -----END CERTIFICATE-----Generated at Tue Jul 29 18:55:24 2025 by rpki-client