$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa File: a24dc796-a354-3534-8807-c7f4b3475218.roa (raw, json) Hash identifier: LN/xtpsDAirEKe28lyv1/PKuHeG3FBFLvgzNwSx7sxI= Subject key identifier: 45:FC:0C:E3:16:4C:54:01:0C:D6:FC:B0:DD:97:D9:A6:7F:F5:2B:4C Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Certificate serial: 010D0C9F43285849FF7515E1F86B0614252BB060 Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 11052 IP address blocks: 199.249.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:15:e1:f8:6b:06:14:25:2b:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=7516f101-8757-4672-b83e-f7fb8cfe7f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:f1:0f:63:02:f6:63:f8:7d:4d:3d:55:f2: b1:a1:5d:60:db:7a:3e:da:15:3b:9c:cf:2f:79:13: e7:56:8d:e0:71:48:bc:fa:8f:40:d1:50:9b:06:e3: 06:ea:97:36:94:34:4f:ba:68:b8:72:3d:6a:81:1c: 5b:c6:25:ac:cc:5e:76:77:5f:e9:7b:1c:52:5c:63: 5f:c1:4c:8f:25:e8:2e:d3:4f:a3:46:14:8b:96:b6: 4c:cb:25:1b:25:c3:18:34:45:47:9e:45:d3:46:f7: 47:b6:8a:cc:c1:c7:9a:8d:00:d9:70:f1:0a:60:5c: 3a:79:54:c2:c1:4d:de:72:c0:85:fa:64:a6:e0:8f: 5d:32:1e:34:5f:3b:1e:0f:91:39:f5:4c:09:c3:ca: 7f:9e:c3:a2:c7:dc:1f:d0:68:23:cc:35:ce:a7:b5: bd:82:e3:07:32:81:a4:a7:25:03:6e:e6:98:c0:b6: d7:65:de:ba:53:ef:d3:30:5b:42:b0:4e:b8:25:89: cb:3e:79:92:97:60:b0:93:84:b8:ec:ca:c2:a9:74: 1d:60:0b:0e:87:f4:36:ea:42:57:9a:04:20:b0:f7: 8a:d5:ed:33:21:76:fd:48:9a:fe:48:de:c6:06:32: ab:f4:0d:c5:1b:ec:28:72:de:1d:2b:a2:3f:18:d8: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FC:0C:E3:16:4C:54:01:0C:D6:FC:B0:DD:97:D9:A6:7F:F5:2B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl X509v3 Authority Key Identifier: keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer sbgp-ipAddrBlock: critical IPv4: 199.249.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0b:35:e4:29:25:c7:83:65:da:b2:41:da:87:73:3d:90:a2: 6b:47:04:8f:7f:f7:02:84:bd:a7:b7:a6:bb:f2:12:7d:b0:bc: f1:f1:d4:c1:1c:b9:bb:8c:bc:91:18:6b:b3:0d:02:74:94:82: c5:32:6d:fc:ab:2c:b3:25:ca:e4:c2:1c:51:73:aa:a3:b9:01: 41:83:21:0d:5a:92:d3:96:f9:ce:34:dd:01:35:b1:96:6d:e5: 9a:79:f2:77:ae:cb:b1:cb:c2:21:2d:a8:0c:c1:3a:c4:3a:35: f0:92:40:5a:ed:49:94:0a:0a:14:ff:54:92:5c:ed:ff:e3:60: 37:4b:fa:b9:d6:f2:31:56:23:12:e4:aa:91:f0:a6:ef:76:2e: a1:e5:00:2a:b9:c8:7b:ca:40:16:4e:49:c3:1d:a5:16:b2:21: 34:fe:c0:cb:40:6e:b7:ca:84:e4:97:86:8d:41:42:1c:21:80: 5f:e7:53:ca:a8:c0:dc:db:a3:95:0c:00:fa:f0:89:5f:02:29: 31:1d:33:05:f6:93:05:e6:27:94:c8:a6:ad:c8:d8:94:c3:1c: 9a:e5:70:54:91:5b:18:45:bc:41:f3:e0:d2:2a:91:ce:b3:a2: 66:24:78:02:d3:c7:6a:9b:7e:76:e6:16:73:59:0a:b8:d9:9f: c4:3a:76:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRXh+GsGFCUrsGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3 N2YxMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk NzUxNmYxMDEtODc1Ny00NjcyLWI4M2UtZjdmYjhjZmU3ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVvxD2MC9mP4fU09VfKxoV1g23o+2hU7nM8v eRPnVo3gcUi8+o9A0VCbBuMG6pc2lDRPumi4cj1qgRxbxiWszF52d1/pexxSXGNf wUyPJegu00+jRhSLlrZMyyUbJcMYNEVHnkXTRvdHtorMwceajQDZcPEKYFw6eVTC wU3ecsCF+mSm4I9dMh40XzseD5E59UwJw8p/nsOix9wf0GgjzDXOp7W9guMHMoGk pyUDbuaYwLbXZd66U+/TMFtCsE64JYnLPnmSl2Cwk4S47MrCqXQdYAsOh/Q26kJX mgQgsPeK1e0zIXb9SJr+SN7GBjKr9A3FG+woct4dK6I/GNi0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEX8DOMWTFQBDNb8sN2X2aZ/9StMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1 MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYTI0ZGM3OTYtYTM1NC0z NTM0LTg4MDctYzdmNGIzNDc1MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1 NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0 ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgLNeQpJceDZdqyQdqHcz2QomtHBI9/9wKEvae3prvyEn2wvPHx1MEc ubuMvJEYa7MNAnSUgsUybfyrLLMlyuTCHFFzqqO5AUGDIQ1aktOW+c403QE1sZZt 5Zp58neuy7HLwiEtqAzBOsQ6NfCSQFrtSZQKChT/VJJc7f/jYDdL+rnW8jFWIxLk qpHwpu92LqHlACq5yHvKQBZOScMdpRayITT+wMtAbrfKhOSXho1BQhwhgF/nU8qo wNzbo5UMAPrwiV8CKTEdMwX2kwXmJ5TIpq3I2JTDHJrlcFSRWxhFvEHz4NIqkc6z omYkeALTx2qbfnbmFnNZCrjZn8Q6dpE= -----END CERTIFICATE-----Generated at Sat Jun 7 15:35:34 2025 by rpki-client