$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: v/z2OYLkKzgyqsCPQrxEEFlQdDFeMBSV6naYGQQTO7A= Subject key identifier: 22:BA:D9:09:5F:4C:5D:45:8F:3E:7B:72:E6:95:5D:A6:4E:9B:67:A9 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F43285848E59BB286BACF4F6CE422B5C0 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b2:86:ba:cf:4f:6c:e4:22:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=055442d6-7307-452b-8a0d-a00419679560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:a0:2c:08:93:96:d7:8d:ba:61:0a:8f:b7: a5:c6:b3:f3:16:b4:ab:5a:26:61:e4:b8:c3:67:6f: a1:c9:e5:e0:0e:ba:18:de:f8:19:c4:85:fb:1d:bc: b5:df:fd:76:43:b4:44:24:52:32:df:b6:a2:a3:b3: 65:a6:76:38:c4:01:39:3a:69:3f:62:15:53:f9:5e: c4:ed:c8:06:3d:62:d2:f6:8c:80:a7:23:b5:1f:a5: 6b:24:ff:09:27:6a:8d:96:f1:25:47:57:34:f4:12: ed:fe:a7:ae:f5:bb:f1:b8:13:e5:cc:4b:0c:9c:4a: d5:28:bf:ef:a4:8e:2b:57:ed:4f:d7:c9:5d:07:ef: cd:e8:dd:93:e8:90:6b:7a:01:71:58:c9:72:b8:b4: 9b:38:d4:a1:a9:23:c3:2f:0a:f2:5a:39:29:51:35: ad:22:22:01:70:b4:b4:a4:38:b8:fa:37:98:22:fe: 5c:10:24:ed:e5:ea:78:ec:30:fb:81:0d:e2:c5:26: de:67:53:2a:99:ca:d4:78:99:9c:39:3e:43:c0:2a: 56:3e:b2:47:4b:12:99:e1:73:75:30:d1:c7:16:ee: 21:d9:7b:9f:18:10:6b:10:21:6e:04:1f:fc:dc:c9: e1:97:78:6c:1e:7d:a8:b1:14:fe:2e:8d:1e:37:19: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BA:D9:09:5F:4C:5D:45:8F:3E:7B:72:E6:95:5D:A6:4E:9B:67:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5d:c8:f1:d1:14:be:f3:10:1f:02:d2:38:ee:73:1e:c4:4c: f8:cc:ed:0f:f2:4b:ca:fb:81:43:87:99:72:69:21:42:bc:5c: 93:55:9f:28:c8:7d:ce:cc:78:0f:55:5b:59:36:56:f7:cc:d3: 43:89:bf:4e:9e:d0:a4:dc:8c:43:af:71:4f:d9:5f:c4:27:50: d3:d6:79:04:f0:52:a2:36:9b:11:04:70:6f:33:4a:19:48:7f: 8f:1d:52:d6:d2:57:37:d9:1f:0c:5c:89:cb:fc:57:20:62:cb: 9b:e7:55:bc:ff:8f:77:cb:3c:3a:d7:5d:61:02:8f:36:58:6c: c7:4b:92:e3:76:46:7b:1e:5e:49:7e:47:c3:1b:28:91:34:f1: 51:e6:72:36:b6:c2:52:f5:c8:1d:c6:11:fd:35:f5:5f:9d:c0: eb:9b:48:63:4b:be:1d:b0:c8:08:a8:b0:b0:55:e9:77:52:6b: 21:91:a9:43:89:19:0d:29:d7:1e:65:f1:f5:9d:58:94:66:4e: af:91:c2:d1:88:e9:ff:7e:d4:cf:62:65:6b:5a:2d:08:53:16: c7:59:2f:2d:37:41:fb:5a:a3:40:43:21:f8:c1:10:e2:ac:7e: 1f:f4:9b:16:15:cc:53:87:6e:c9:97:49:3d:5f:ad:14:f4:28: 31:14:c7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7KGus9PbOQitcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDU1NDQyZDYtNzMwNy00NTJiLThhMGQtYTAwNDE5Njc5NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vugLAiTlteNumEKj7elxrPzFrSrWiZh5LjD Z2+hyeXgDroY3vgZxIX7Hby13/12Q7REJFIy37aio7NlpnY4xAE5Omk/YhVT+V7E 7cgGPWLS9oyApyO1H6VrJP8JJ2qNlvElR1c09BLt/qeu9bvxuBPlzEsMnErVKL/v pI4rV+1P18ldB+/N6N2T6JBregFxWMlyuLSbONShqSPDLwryWjkpUTWtIiIBcLS0 pDi4+jeYIv5cECTt5ep47DD7gQ3ixSbeZ1MqmcrUeJmcOT5DwCpWPrJHSxKZ4XN1 MNHHFu4h2XufGBBrECFuBB/83Mnhl3hsHn2osRT+Lo0eNxkJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK62QlfTF1Fjz57cuaVXaZOm2epMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHddyPHRFL7zEB8C0jjucx7ETPjM7Q/yS8r7gUOHmXJpIUK8XJNVnyjI fc7MeA9VW1k2VvfM00OJv06e0KTcjEOvcU/ZX8QnUNPWeQTwUqI2mxEEcG8zShlI f48dUtbSVzfZHwxcicv8VyBiy5vnVbz/j3fLPDrXXWECjzZYbMdLkuN2RnseXkl+ R8MbKJE08VHmcja2wlL1yB3GEf019V+dwOubSGNLvh2wyAiosLBV6XdSayGRqUOJ GQ0p1x5l8fWdWJRmTq+RwtGI6f9+1M9iZWtaLQhTFsdZLy03Qftao0BDIfjBEOKs fh/0mxYVzFOHbsmXST1frRT0KDEUx+A= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:14 2025 by rpki-client