$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: swQ2IyZ4LmQ7QxPgwmGNlaxqyEjaELh+fSHg0X+jnh0= Subject key identifier: BE:18:25:53:37:B1:B2:91:CE:AE:C2:AB:2D:15:A3:74:1E:05:B4:07 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F43285849D594EE1364B4D81ABB82FE80 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ee:13:64:b4:d8:1a:bb:82:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=20fccb69-3a20-437f-81c2-265ae54529a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:94:86:b2:b0:10:db:95:d1:7f:f6:49:78: 24:e6:49:cb:94:6b:c6:d1:f8:95:c3:f4:3a:4c:8e: 8d:77:da:89:7b:dc:d4:c8:d2:9b:25:b4:c5:7f:ca: 92:30:2c:18:dc:2e:00:b9:b6:22:f9:00:04:78:37: 5a:80:89:79:00:bc:8e:8a:e0:26:a2:1a:72:2d:19: 0b:7b:3d:ec:19:6a:92:37:fb:ee:74:d7:3b:69:83: 6d:1b:ff:c3:ea:32:10:a2:83:d9:e5:98:6e:cd:55: 86:0d:0d:2c:a3:1d:1e:dd:42:c0:cf:5c:be:6d:9b: fe:83:22:a0:d0:3d:a3:5f:d2:da:ab:60:df:e4:2c: 25:89:59:ca:19:8f:e6:f5:54:0b:20:4e:ff:0a:7f: d6:3f:c7:25:65:82:e3:e8:56:29:ed:bb:6b:2e:76: 46:f4:a0:dd:b6:d0:25:97:4b:c0:46:ce:cb:24:39: 71:e5:1e:2c:0c:4f:f8:6a:78:d8:17:c3:80:36:9b: 7a:55:31:12:b3:6e:b0:5e:54:43:e9:01:31:e4:4f: 5d:38:1b:c7:56:39:60:3b:38:89:ec:9d:6c:02:7a: 73:e8:b7:2c:2a:22:31:33:51:b4:50:02:47:47:ac: 76:ab:9a:d6:f4:82:a5:25:6b:bd:6e:ac:49:60:8a: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:18:25:53:37:B1:B2:91:CE:AE:C2:AB:2D:15:A3:74:1E:05:B4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c4:59:41:5b:1a:63:7e:ec:e9:56:8b:e2:19:3b:13:47:00: 76:e3:94:dc:d8:0d:88:f5:6b:a7:15:ea:94:01:e4:34:41:81: 70:15:a9:4e:72:eb:bf:5f:c4:ec:99:a9:42:f6:ab:a2:4d:8f: c7:96:fe:fe:94:f2:ba:a5:8f:74:e1:4c:c8:0e:9a:af:ce:a8: af:94:83:93:ac:f0:53:9f:48:09:00:15:39:27:e2:ff:e3:54: 91:03:c7:32:ec:00:8e:04:61:ed:d8:e9:66:fd:3b:f4:8f:9c: 7e:dd:48:2a:2a:47:19:c0:1f:fc:37:39:28:0c:f3:09:16:7c: 64:fc:42:c6:5c:85:0d:0d:d7:d3:7c:79:db:e1:9a:2b:c1:69: 33:b1:a3:4d:a0:7d:5b:22:cc:68:d6:79:fb:d6:d4:f3:97:27: 6c:eb:d6:ae:29:c2:9b:c2:a3:53:d0:21:a3:94:35:52:85:64: 13:29:67:31:d6:2e:e3:0d:43:55:cb:cc:0e:67:94:44:53:2b: ea:58:0c:47:31:b9:dc:40:51:c6:db:4e:3c:91:e4:eb:99:e2: 70:19:65:a2:73:ef:9c:88:ea:54:75:e8:61:d9:26:57:f3:e5: dd:ad:20:a9:34:b9:27:f7:01:1a:11:d8:63:e9:22:06:dc:cc: d0:56:3e:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO4TZLTYGruC/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MjBmY2NiNjktM2EyMC00MzdmLTgxYzItMjY1YWU1NDUyOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSqUhrKwENuV0X/2SXgk5knLlGvG0fiVw/Q6 TI6Nd9qJe9zUyNKbJbTFf8qSMCwY3C4AubYi+QAEeDdagIl5ALyOiuAmohpyLRkL ez3sGWqSN/vudNc7aYNtG//D6jIQooPZ5ZhuzVWGDQ0sox0e3ULAz1y+bZv+gyKg 0D2jX9Laq2Df5CwliVnKGY/m9VQLIE7/Cn/WP8clZYLj6FYp7btrLnZG9KDdttAl l0vARs7LJDlx5R4sDE/4anjYF8OANpt6VTESs26wXlRD6QEx5E9dOBvHVjlgOziJ 7J1sAnpz6LcsKiIxM1G0UAJHR6x2q5rW9IKlJWu9bqxJYIpihQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4YJVM3sbKRzq7Cqy0Vo3QeBbQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbEWUFbGmN+7OlWi+IZOxNHAHbjlNzYDYj1a6cV6pQB5DRBgXAVqU5y 679fxOyZqUL2q6JNj8eW/v6U8rqlj3ThTMgOmq/OqK+Ug5Os8FOfSAkAFTkn4v/j VJEDxzLsAI4EYe3Y6Wb9O/SPnH7dSCoqRxnAH/w3OSgM8wkWfGT8QsZchQ0N19N8 edvhmivBaTOxo02gfVsizGjWefvW1POXJ2zr1q4pwpvCo1PQIaOUNVKFZBMpZzHW LuMNQ1XLzA5nlERTK+pYDEcxudxAUcbbTjyR5OuZ4nAZZaJz75yI6lR16GHZJlfz 5d2tIKk0uSf3ARoR2GPpIgbczNBWPp8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:25 2025 by rpki-client