$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa File: c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json) Hash identifier: fEz1WeeCevu1Cs0v/OowhV1HuHGWY8HdO5Zvm18N5wM= Subject key identifier: AC:4A:F6:04:53:9F:81:71:43:0A:87:E0:67:7D:C7:DA:C9:8F:47:D8 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F43285849D42FAAF783D2C5D97789DE00 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 64236 IP address blocks: 199.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:aa:f7:83:d2:c5:d9:77:89:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f2c024e6-acb4-485c-a774-6aa75c40f7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:04:c1:f7:5a:90:0f:76:e4:54:26:fb:2a: 33:35:55:99:ff:4e:a2:fc:81:c2:01:b2:74:30:c6: cb:3c:22:8f:51:07:d6:a2:93:8f:58:1c:b0:67:78: 01:e3:ad:2a:1d:ed:23:56:ba:2e:46:fb:7c:15:76: 58:ab:79:7a:a2:9e:c4:78:e5:22:37:7c:d9:eb:51: 84:01:84:6a:2c:43:e8:19:1e:95:82:3a:7e:96:e6: 3b:e7:7e:91:d7:3e:95:cf:34:4d:db:86:b1:14:20: fa:b3:60:69:32:73:d9:6b:69:ec:99:33:26:5c:07: 25:fb:c3:f0:c4:d3:e8:14:a0:65:e8:99:e5:e0:d6: 97:b5:05:44:50:85:75:98:be:b6:eb:26:f8:c3:75: e4:88:32:e3:61:8c:15:94:46:0d:74:66:3b:4c:cf: 27:1e:6c:8c:2a:87:13:46:5c:83:ef:00:6f:ce:ea: 25:51:fa:74:82:a0:e9:7d:e9:cb:99:37:4b:62:71: 09:85:06:cb:0a:75:7c:c8:fe:a1:3f:ca:78:1e:e0: 23:a5:0f:4e:a0:72:90:f8:a0:20:82:f4:9a:2a:0f: 35:b6:30:e1:04:55:d8:7b:a8:05:8e:58:1e:7b:d2: 20:11:e0:7e:05:41:1e:ce:e1:71:60:5c:ed:0f:56: e7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4A:F6:04:53:9F:81:71:43:0A:87:E0:67:7D:C7:DA:C9:8F:47:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.193.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:55:2c:a5:bd:b5:54:c7:10:4f:be:1d:e9:ee:a9:51:2f:5c: 3a:0c:98:99:65:e0:5a:bc:09:2a:36:ef:7a:54:4a:7a:d9:ad: 3e:99:69:7b:8a:f5:d4:7e:1d:42:86:ed:73:d1:cd:37:f9:29: 57:f3:fd:5c:dc:15:a6:ef:aa:e4:b5:ee:20:4b:9d:9e:e2:5e: cc:2c:0b:d0:90:68:0e:4e:7a:ed:e0:a5:d1:8b:84:c5:bb:c6: 71:9b:9d:f4:d1:d7:3f:96:ed:66:4c:bc:8c:87:fa:d1:3a:a0: d5:78:fd:8e:c3:62:bb:86:b8:3b:d6:7f:46:87:f8:ef:3d:7f: 10:ac:17:53:c8:fc:7c:fb:cc:19:fe:c9:b1:46:4a:c0:7e:25: e0:ca:4c:3a:34:6c:b9:2c:cc:ed:31:68:f3:3e:2a:f7:64:55: d4:96:6d:eb:8a:b1:97:1f:51:87:71:b2:88:8d:b6:9a:07:88: 21:6d:cb:b8:3c:40:dd:4c:b3:6e:ed:94:6e:ab:8b:46:3e:ce: b1:02:09:6e:02:1f:eb:ac:5f:b4:94:93:6a:9f:50:98:e9:1f: 43:d3:28:fa:0c:76:47:cc:ae:94:28:d4:36:72:fe:8b:92:1c: 22:aa:8b:19:32:c1:95:6a:41:a3:ee:ae:61:67:9d:c8:6a:0a: 14:b4:d9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6r3g9LF2XeJ3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjJjMDI0ZTYtYWNiNC00ODVjLWE3NzQtNmFhNzVjNDBmN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySAEwfdakA925FQm+yozNVWZ/06i/IHCAbJ0 MMbLPCKPUQfWopOPWBywZ3gB460qHe0jVrouRvt8FXZYq3l6op7EeOUiN3zZ61GE AYRqLEPoGR6Vgjp+luY7536R1z6VzzRN24axFCD6s2BpMnPZa2nsmTMmXAcl+8Pw xNPoFKBl6Jnl4NaXtQVEUIV1mL626yb4w3XkiDLjYYwVlEYNdGY7TM8nHmyMKocT RlyD7wBvzuolUfp0gqDpfenLmTdLYnEJhQbLCnV8yP6hP8p4HuAjpQ9OoHKQ+KAg gvSaKg81tjDhBFXYe6gFjlgee9IgEeB+BUEezuFxYFztD1bn3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxK9gRTn4FxQwqH4Gd9x9rJj0fYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvYzAzOGQ2ZjEtNTJjNC0z NTNmLWJmMDYtMDg5NWU0OTU1ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFVLKW9tVTHEE++HenuqVEvXDoMmJll4Fq8CSo273pUSnrZrT6ZaXuK 9dR+HUKG7XPRzTf5KVfz/VzcFabvquS17iBLnZ7iXswsC9CQaA5Oeu3gpdGLhMW7 xnGbnfTR1z+W7WZMvIyH+tE6oNV4/Y7DYruGuDvWf0aH+O89fxCsF1PI/Hz7zBn+ ybFGSsB+JeDKTDo0bLkszO0xaPM+KvdkVdSWbeuKsZcfUYdxsoiNtpoHiCFty7g8 QN1Ms27tlG6ri0Y+zrECCW4CH+usX7SUk2qfUJjpH0PTKPoMdkfMrpQo1DZy/ouS HCKqixkywZVqQaPurmFnnchqChS02eM= -----END CERTIFICATE-----Generated at Sun Jun 8 10:25:04 2025 by rpki-client