$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa File: c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa (raw, json) Hash identifier: CK9S3lnMeN088vK8bBmTPsoD40sn/zKTYQ+h7nTCLSE= Subject key identifier: 14:0C:30:FD:1B:E0:B1:47:D1:26:E6:1A:81:42:E5:87:51:47:12:96 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285849C904E7DFE3D5E7BB66059780 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 22742 IP address blocks: 199.241.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e7:df:e3:d5:e7:bb:66:05:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=a22656db-cebb-4c28-8dfb-82232126f8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:26:6e:5d:59:99:b7:70:01:77:5a:fc:30:48: ed:45:fa:4a:8f:a6:79:5a:91:aa:9b:64:2a:ff:8d: 8c:7b:5f:07:c1:f0:f1:88:0a:4f:cc:55:0d:9c:0e: d9:73:c4:62:56:51:f2:bf:13:bb:a3:f2:ca:bd:48: 62:c2:bb:d2:43:36:0c:7f:81:c6:7d:a7:64:6d:20: 35:fe:5c:68:40:b4:3d:72:8e:05:5d:4d:d0:42:c6: 79:96:ce:0b:46:f1:e2:21:08:64:8b:ae:19:3b:63: dd:df:12:f2:e8:40:9b:a9:bf:89:ef:8b:03:af:b7: 3d:2b:e1:99:b5:03:50:d2:42:83:c3:7f:9d:ce:9f: 0a:e1:04:52:77:5d:4c:f2:35:b6:fd:31:15:24:a6: ec:cc:79:35:cf:27:d8:ba:b5:1d:20:5d:47:f6:f7: e6:0c:a1:d3:0e:85:05:f5:f4:7b:d3:e8:5f:ca:46: f7:37:d9:1c:95:2d:a8:c4:8e:97:0c:d6:8b:62:95: 91:36:6c:1e:1a:a2:da:9b:65:82:76:83:2a:cf:2f: cc:1e:dd:ba:5c:54:0e:e9:2a:0f:5f:6d:41:16:36: 91:d6:24:8d:0b:f6:b7:6a:0c:2e:33:cf:b7:1d:b0: 69:91:7c:7e:80:37:e4:83:4b:bf:2a:12:63:42:f8: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:30:FD:1B:E0:B1:47:D1:26:E6:1A:81:42:E5:87:51:47:12:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 199.241.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7f:d4:2a:92:8b:b2:1d:0e:93:fe:1a:b7:14:9e:bf:b0:f4: 1c:8d:34:44:f2:d3:b2:59:9e:10:8a:a4:e1:e3:61:97:94:2f: 9d:0f:1c:19:f0:03:4d:69:18:45:ac:b4:dc:25:d4:61:77:4d: d7:eb:d5:a4:e9:a0:ce:e9:cd:eb:d8:4a:98:d7:d0:78:1d:8f: 01:26:1c:6b:24:33:bb:d4:5d:a4:89:49:77:d7:73:ec:05:f6: 63:e0:0b:0b:2a:50:c1:6e:fa:3a:d1:b1:86:e5:27:81:75:44: 8f:ed:25:5c:44:58:78:04:5e:92:4e:58:4f:e5:b2:63:05:a1: d0:60:52:da:c8:30:b9:08:d6:ea:9a:ac:09:69:93:73:b1:4b: 3b:fd:5c:2a:74:8c:02:60:07:4f:88:04:69:3f:1a:f8:34:6b: e4:3a:4a:17:7a:55:48:b2:19:5d:38:63:66:9d:33:26:f6:ba: 89:14:7d:5b:00:c9:74:77:35:99:9a:47:09:6e:4c:18:f3:44: 25:24:1c:a1:e9:42:9c:a0:f5:2d:79:6b:80:98:1e:be:cd:44: 9a:83:80:f3:f3:4f:f3:cb:10:20:dd:32:43:ee:cd:99:52:d2: b3:e3:65:4b:68:85:9e:72:03:33:b0:b7:bc:0a:e7:6d:f3:8c: 59:c1:2a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOff49Xnu2YFl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk YTIyNjU2ZGItY2ViYi00YzI4LThkZmItODIyMzIxMjZmOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiZuXVmZt3ABd1r8MEjtRfpKj6Z5WpGqm2Qq /42Me18HwfDxiApPzFUNnA7Zc8RiVlHyvxO7o/LKvUhiwrvSQzYMf4HGfadkbSA1 /lxoQLQ9co4FXU3QQsZ5ls4LRvHiIQhki64ZO2Pd3xLy6ECbqb+J74sDr7c9K+GZ tQNQ0kKDw3+dzp8K4QRSd11M8jW2/TEVJKbszHk1zyfYurUdIF1H9vfmDKHTDoUF 9fR70+hfykb3N9kclS2oxI6XDNaLYpWRNmweGqLam2WCdoMqzy/MHt26XFQO6SoP X21BFjaR1iSNC/a3agwuM8+3HbBpkXx+gDfkg0u/KhJjQvgBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQMMP0b4LFH0SbmGoFC5YdRRxKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYzhjZDZkMWUtZmNhNC0z YTA4LWEyOTYtNGM2YjYyZGQyZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9/1CqSi7IdDpP+GrcUnr+w9ByNNETy07JZnhCKpOHjYZeUL50PHBnw A01pGEWstNwl1GF3Tdfr1aTpoM7pzevYSpjX0HgdjwEmHGskM7vUXaSJSXfXc+wF 9mPgCwsqUMFu+jrRsYblJ4F1RI/tJVxEWHgEXpJOWE/lsmMFodBgUtrIMLkI1uqa rAlpk3OxSzv9XCp0jAJgB0+IBGk/Gvg0a+Q6Shd6VUiyGV04Y2adMyb2uokUfVsA yXR3NZmaRwluTBjzRCUkHKHpQpyg9S15a4CYHr7NRJqDgPPzT/PLECDdMkPuzZlS 0rPjZUtohZ5yAzOwt7wK523zjFnBKuA= -----END CERTIFICATE-----Generated at Sun Jun 8 14:10:28 2025 by rpki-client